The customer operated workloads across AWS and a hybrid environment and needed a dependable way to identify and respond to security events. The business challenge was that security information could come from different systems, while the operations team needed to know what required attention, how serious it was, and what action should happen next.

Without a consistent monitoring and response process, an important security event can take longer to detect and resolve. This can increase operational disruption and the time spent by teams manually investigating issues. The customer therefore needed a more connected approach to monitoring, workload protection and incident response across the environment.