Eurotux provides a Security Operations Center service at DigitalSign
The SOC platform ensures 24-hour monitoring of cybersecurity events
DigitalSign is a trust service provider accredited in Europe under eIDAS and in Brazil under ICP-Brasil. The company offers a wide range of services, including digital certification, signature platforms, electronic invoice stamps, Time Stamp, among others.
With several years of market experience, it provides digital certification to meet the most diverse market needs. DigitalSign also offers customized solutions tailored to each client’s particularities and provides services in Europe and Brazil. It currently has around 200 direct employees, plus a further 800 indirect ones.
Challenge
DigitalSign is a company whose approach places security at the forefront of its value proposition. In the current climate, where cyberattacks are becoming increasingly common and increasingly destructive, it is more important than ever to take steps to protect data.
The Portuguese company identified the need to strengthen its security measures, such as ISO 27001 certification and eIDAS compliance. The importance of giving its clients the peace of mind that their data is secure is a challenge that DigitalSign is committed to dedicating itself to and addressing assertively. By effectively applying these measures, it is possible to demonstrate its commitment to security and its dedication to providing clients with the best possible service.
There is no doubt that cyberthreats have increased in recent years. This scenario, in turn, led to the need for a more mature approach to security monitoring, both at the infrastructure level and at the application level. Ad hoc security monitoring simply was no longer enough for DigitalSign. Instead, the company sought a continuous system monitoring solution, so as to identify potential risks better and faster, in a timely manner, and take steps to mitigate them.
Solution
Given the nature of its business, DigitalSign sees itself as a company that, in essence, sells trust to its clients. In this sense, strategic decisions are made with that focus in mind, and apply not only to its services but also to its internal teams and to the quality it puts into its services and products. It is only possible to ensure that this trust is not betrayed if these (and other) factors are guaranteed.
In collaboration with Eurotux, a SOC (Security Operations Center) service was put into operation, analyzing cybersecurity events 24 hours a day.
By turning to the SOC, DigitalSign aimed to respond quickly and effectively to potential threats, as well as to investigate and resolve incidents, basing this approach on a data correlation process that is essential for strengthening the identification of potential problems and their swift resolution.
Result
The SOC service has become, for DigitalSign, a valuable layer of protection for clients’ data and systems. It has also become the guarantee of the highest level of security measures and policies. With Eurotux’s collaboration, DigitalSign is now able to monitor cybersecurity trends and make changes to the service as needed to ensure its clients are always protected.
For DigitalSign, implementing the SOC modules made it possible to do away with an isolated approach to analyzing cybersecurity events, “an approach that lacked context“, as Fernando Moreira, CEO of DigitalSign, puts it.
After the SOC service was activated, it became possible to create event correlations within DigitalSign’s infrastructure, a different approach “because it allows conclusions to be drawn that translate into the real identification of risks”. This makes it possible, for example, to relate access events, as the digital certification company’s CEO explains: “user X accessed a DigitalSign service from a Portuguese network (which is usual) and a few minutes later accessed another DigitalSign service from a Spanish network (which can also be perfectly natural). If analyzed in isolation, these are theoretically legitimate behaviors; but combined, they show a high probability of an intrusion attempt”.
In terms of the business, the partnership with Eurotux, and in particular the implementation of the SOC service, has made it possible to strengthen the quality of DigitalSign’s service offering, reinforce reliability in terms of cybersecurity, and give the company a cross-cutting view “that allows the right decisions to be made at the right time”.
We have worked with Eurotux for several years, and throughout that time they have always been an excellent partner. They are always quick to respond to our needs and have a set of knowledge and experience that has been invaluable to DigitalSign.
Fernando Moreira, CEO DigitalSign
