Cyber Data Optimization

Organizations are entering a new era of cybersecurity, driven by rapidly expanding data volumes, increasingly sophisticated and evolving threats, and heightened regulatory and compliance demands. The scale of cyber log data volumes can make it technically and financially challenging for organizations to modernize.

Deloitte’s cyber data optimization solution for regulated industries is a trusted model for efficiently storing and sharing log data. With their solution, data is designed to be retained in low-cost cloud storage, accessible by centralized queries to avoid the transfer of raw data. Using the Databricks Data Intelligence Platform, Deloitte deploys a hub-and-spoke model where a central analytics “hub” coordinates with enterprise clouds and system owners, i.e., the “nodes”, to establish a centralized analytics layer for log data. This multi-node, federated model allows data to be securely shared from individual nodes to the centralized lakehouse in order to compile, search and perform advanced analytics. By leveraging this federated model, organizations avoid costly log data storage in native cybersecurity systems, and maintain flexibility with their existing cloud—data does not have to be moved from one to another.

With Deloitte’s cybersecurity solution, potential benefits are:

• Integrate with existing systems to accelerate adoption
• Scalable, long-term retention of petabytes of data
• Reduced data duplication and real-time analytics