SOC Setup for the Sunweb Group | SITS

Initial Situation & Client Profile

How can a Security Operations Center (SOC) be established and information security sustainably strengthened in an international tourism company?

The Sunweb Group is one of the three largest tour operators in Western Europe, bringing around 1 million holidaymakers from the Benelux countries and Scandinavia to sunny destinations every year. Technologically, Sunweb operates like an e-commerce company focused on the online sale of package holidays. The company employs around 500 people and is active in seven countries.

This success story shows how SITS supported the Sunweb Group in building a SOC, optimizing its Microsoft security landscape, and sustainably relieving the internal team.

Client: Sunweb Group

Industry: Tourism

Our Services: Establishment & operation of a SOC, implementation of Microsoft Defender & Sentinel, phishing analytics, incident response, process definition

Use Case Sunweb SITS
The Project in Numbers
A project with measurable progress:
1000000
+
Travellers supported per year
7
Countries in operative Focus
500
Employees
1
integrated Security Operations Center

The Challenge

Establishing a modern security structure.
Before the collaboration, Sunweb had a small internal security unit and was not yet optimally using existing Microsoft E5 licenses.

Structured risk management and its own SOC had not yet been established, so operational tasks such as phishing and alert handling placed a heavy burden on the team.

A partner was sought who not only provides technical solutions but also assumes operational responsibility, establishes processes, and relieves the internal team.

Approach & Strategy

 
 
 
 
1
2
3
4
 
Establishing a security foundation
Rapid technical activation of Microsoft Defender and Sentinel as SOC services.
 
Structuring collaboration
Structured onboarding and targeted knowledge transfer: Joint development of playbooks, clear role allocation, and transparent responsibilities.
 
Optimizing security operations
The Microsoft security solutions were adapted to Sunweb’s requirements and efficient workflows for collaboration were established.
 
Realizing the potential of E5
The existing E5 licenses are optimally used so that the Sunweb team can focus more on strategic security tasks.

Implementation

From concept to operational security: Efficiently realized for sustainable protection.
The technical activation of the Microsoft solutions was completed in a short time – the real task lay in onboarding, process definition, and knowledge transfer.

SITS assumed operational responsibility for security monitoring, jointly defined playbooks with Sunweb, and established efficient workflows for alert handling and incident response.

The collaboration was characterized by openness, transparency and the goal of sustainably increasing Sunweb’s security maturity.

SITS focuses on the security operational aspects handling incident triage and phishing email reports, enabling us, the internal security team at Sunweb, to focus on strategic initiatives, like rolling out new capabilities, conducting assessments and actually fixing things.

– Cristian Pascariu, Head of Information Security, Sunweb

The Result

Relief, focus and measurable improvement of security.
By taking over operational security operations, SITS enabled the internal team to focus on strategic tasks such as assessments, rollouts, and improvements.

Security maturity increased from “medium-high” to “high”, the configuration of the Microsoft E5 solutions was optimized, and the number of false positives was significantly reduced.

Through collaboration with SITS, Sunweb was able to sustainably strengthen information security and relieve the internal team.

Today, they benefit from optimized processes and more freedom for strategic tasks.

Secure your Digital Infrastructure too

Would you like to professionalize your security operations or optimally use your Microsoft security landscape?

Our experts will be happy to advise you – individually, competently, and practically.

Get in touch now
Find out how we can protect your company too

You are currently viewing a placeholder content from HubSpot. To access the actual content, click the button below. Please note that doing so will share data with third-party providers.

More Information