Case Summary
Servinform, a leader in business process management with over 47 years of experience and more than 6,000 employees in Spain, faced the challenge of modernising its security ecosystem to meet audit requirements and regulatory changes. Through its collaboration with Devoteam and the implementation of Google SecOps, the company was able to centralise security event management, automate responses, and strengthen control over its infrastructure.
What is Google SecOps?
Google SecOps is Google Cloud’s security operations platform, combining the capabilities of Chronicle SIEM and SOAR to help organisations detect, investigate, and respond to threats quickly and effectively—without the need to replace existing tools.
Key Highlights:
1
Servinform needed to evolve its security architecture to meet new regulatory and audit requirements.
2
Google SecOps was integrated without replacing existing solutions, providing an additional layer of control and automation.
3
The implementation optimised incident response and enhanced security visibility across the organisation.
About the Client
Servinform is a leading company in business process management, with over 46 years of experience and more than 6,000 employees in Spain. It provides comprehensive solutions in areas such as customer service, document management, and process automation for sectors including telecommunications, banking, insurance, energy, and public administration.
The Challenge
Servinform’s growth and the evolving security landscape called for a modernisation of its infrastructure. Although the company was already using tools like CrowdStrike EDR, the security team identified the need for a more advanced architecture to centralise security event management and respond more efficiently to incidents.
The current security landscape challenged us to evolve our security approach. That evolution requires support from an expert team, and Devoteam has been the ideal partner on our journey to transform our security ecosystem.
Juan Antonio Muñoz Risueño
CSOO – Chief Security Operations Officer
The Objective
To ensure greater control and governance over security processes, enhancing Servinform’s ability to:
Comply with client regulations and audits.
Optimise the detection and response to security incidents.
Reduce reliance on external parties in security management.
The Solution
Devoteam partnered with Servinform to implement Google SecOps, ensuring a smooth integration with its existing infrastructure. The solution included:
- Centralised collection of security events from both cloud and on-premise environments using SIEM.
- Automated threat responses through SOAR.
- Advanced alert management tailored to the team’s roles and needs.
- Data ingestion from multiple sources to optimise threat detection.
- Development of custom use cases to strengthen overall security.
The Methodology
The implementation process was carried out in several phases:
- Analysis of the security environment and identification of specific needs.
- Design of an integration strategy with no impact on operations.
- Deployment and configuration of Google SecOps with customised alerts.
- Automation of responses to reduce reaction times to incidents.
- Ongoing training for the Servinform team to maximise the platform’s potential.
Results and Next Steps
Following the implementation of Google SecOps, Servinform has achieved:
- Greater control and visibility over its security, making audits and regulatory compliance easier.
- Automated responses, significantly reducing incident reaction times.
- Centralised security management, enabling more efficient operations with less reliance on external parties.
Next Steps:
- Optimise threat detection through new, advanced use cases.
- Further strengthen response automation to reduce mitigation times even more.
- Continue training the team to fully leverage the platform’s capabilities.
With this transformation, Servinform has taken a key step in the evolution of its cybersecurity strategy, ensuring a safer environment that is well-prepared for future challenges.
Cyber Threats Are Evolving. Your Defence Must Too.
The regulatory landscape is getting more complex, and cyberattacks are more sophisticated than ever. Are you prepared to navigate both? Download your free legal guide to cybersecurity with Google Cloud.
- Proactively mitigate emerging cybersecurity risks.
- Achieve and maintain compliance with regulations like NIS2, DORA, EU AI Act and GDPR.
- Move from a reactive to a proactive stance against emerging threats..
- Optimise security operations to increase efficiency and reduce alert fatigue.