Splunk at Airbus
Download as PPTX, PDF0 likes3,902 views
The document outlines Airbus's digital transformation efforts utilizing Splunk to enhance business productivity, streamline operations, and improve cybersecurity measures across its global operations. Key objectives include reducing data loss, accelerating incident response, and ensuring compliance while integrating diverse IT and physical asset data. The implementation has resulted in measurable benefits, including increased asset monitoring, reduced data loss detection times, and improved warehouse productivity.
Splunk at Airbus
- 1. Enabling Airbus Digital Transformation with Splunk Fast facts about Airbus 133,000 Employees 11,926 aircraft delivered 180 locations 12,000 suppliers 2019 863 aircraft delivered 768 net orders
- 2. Digital transformation means… Business • Faster time to market • Drive employee and supplier productivity at scale • Uncertainty is the norm • Simplification • Continues improvement, faster and better decision making
- 3. Digital transformation means… Business Technology • Faster time to market • Drive employee and supplier productivity at scale • Uncertainty is the norm • Simplification • Continues improvement, faster and better decision making • 11 enterprise digital platforms • Consumption based cost • User experience • Adoption • Operational transparency • Secure by design
- 4. Digital transformation means… • 11 enterprise digital platforms • Consumption based cost • User experience • Adoption • Operational transparency • Secure by design • Empowered team • Break the siloes • Data driven decisions • Measure value and adoption • Shift from technology centric to business outcomes focused Business Technology People • Faster time to market • Drive employee and supplier productivity at scale • Uncertainty is the norm • Simplification • Continues improvement, faster and better decision making
- 5. Digital transformation means rethinking cyber security in the digital age… Digital transformation means the perimeter of cyber security is rapidly expanding You can’t protect everything and CISO now looking to protect “Crown Jewels” Cyber threats are evolving - you need to break the organisational data siloes to enhance detection Insider threat. Understanding who can access, who has accessed to data is critical to evaluating cyber risk Moving from IT to business risk - making cyber security insights relevant and contextual to business leaders Business Technology People
- 6. We have combined the needs of digital transformation and cyber security Digital Transformation Cyber Security Enterprise digital platform approach Value, adoption and customer experience metrics Embedded security by design Near visibility at the speed of digital Single version of truth Contextual cyber analytics
- 7. • Embedded in digital platforms • Data loss analytics • Insider threat • Real-time compliance monitoring • 350 SOC use cases • Hypervision control centre • Spares management • IT asset optimisation • Stranded IT asset detection • Business consumption • Executive KPIs Where are we now? A global data fusion platform after 18 months 1000 unique monthly active users 120 applications 20 Tbytes a day 200 data feeds 200,000 assets Global adoption
- 8. Use Case: Security Operations and Insider Threat WHY SPLUNK? BUSINESS BENEFITS… OUR OBJECTIVES: • Faster time to detect and response • Reduce unit cost per incident • Single enterprise platform for security and operations • Extended with advanced automation with Splunk Phantom • Underpinned by devops quality automation processes • 40x increase in assets monitored • 8x increase in data analysed per day • 80% L1 automated, L2 50% automated • Automated response from SOAR
- 9. Use Case: Reduction of data loss for Airbus employees and suppliers OUR OBJECTIVES: • Reduce the risk of loss of critical data by tracking in near time data loss events across all Airbus digital channels for 75,000 people across Europe • Protect the most critical people and data first • Create actionable insights for senior leaders, to continuously improve WHY SPLUNK? BUSINESS BENEFITS… • Massive data loss reduction for suppliers • Time to detect reduced from weeks to minutes • Contextual cyber metrics for business • Near time data fusion at global scale • Data fusion of 10 data loss channels organised around individual Users data extraction
- 10. Use Case: Aircraft Spare Warehouses WHY SPLUNK? • Reduction in time to deliver spare parts • Predict and prevent business outages BUSINESS BENEFITS… • Ability to fuse data from diverse IT and physical assets to improve spare part availability and tracking Driving warehouse productivity at global scale: • by automating warehouses to support a cadence increase • by opening new warehouses (1 every 9 months) OUR OBJECTIVES:
- 11. 12 Use Case: Hypervision Control Center • Reduce business impact of IT and OT outages on aircraft production WHY SPLUNK? • 360° View on critical applications and data flow: E2E monitoring of 350 applications • Key enabler for predictive monitoring BUSINESS BENEFITS… • Avoid business disruption and secure critical applications for aircraft delivery • Faster restoration of service when issues occur • Support business processes with an End-to-End view on data flows and critical applications landscape OUR OBJECTIVES:
- 12. Use Case: Real-time compliance of public cloud • 50% reduction in non compliance of AWS cloud assets against standards • Self improvement culture data driven WHY SPLUNK? • Easier integration with AWS logging services • Real-time and historical view of assets • Integrated view between Cloud Scoops and Security Operations Centre BUSINESS BENEFITS… • Reduce the business risk of cyber attack and data loss. • Track and remediate compliance at scale in real time of cloud assets OUR OBJECTIVES:
- 13. Thank you