Creating local security operations center (SOC)

Project: Creating Local Security Operations Centre

Financing programme: Connecting Europe Facility

Project designator: 2016_062_AF5

Coordinator: BULATSA

Contributors: Not applicable

Duration:  2016 – 2019

Budget: 1 068 190 EUR

Objective:

The project is in compliance with the requirements of Regulation (EU) 716/2014 and the SESAR Deployment Programme, and will provide a platform to monitor, analyze and control system logs, network traffic, system files and management of incidents related to information security. The platform will be an integrated solution providing reliable protection of BULATSA IT infrastructure against conventional and unconventional cyber-threats.

Activities:

The project activities consist in providing a platform, assuring reliable protection of the entire IT infrastructure of BULATSA against conventional and non-conventional cyber threats. The solution will have distributed architecture that allows effective protection of the IT infrastructure of the enterprise, including its five geographical locations – central location in Sofia and 4 ACCs, in Varna, Burgas, Plovdiv and Gorna Oryahovitsa.

The deployment of BULATSA SOC requires hardware, software, procedure and staff training provision. The project includes the integration of new security devices (SIEM capability, devices for end point protection, security appliances to capture the network traffic and the systems logs etc.) in BULATSA infrastructure.