Security risks and monitoring requirements are ever-evolving, which is why we introduced a next-generation centralised Cyber Security Incident and Event Management (SIEM) tool that would allow greater customisation of use cases and scenarios. Whether working to identify victims of misuse and phishing, unauthorised software, poor practice by suppliers, or potential malicious attacks – this tool and operating model has streamlined how the team identifies incidents and events, validates the findings, launches incident response and drives threat hunting activity.

The new SIEM tool has enabled a 3,500% increase in data source volumes for greater visibility across Royal Mail’s estate and allows the team to keep seeking the next opportunity or solution to protect the business.