Yarix, ten years of operation of the Security Operation Center

Starting from 2020, in conjunction with an increase in ransomware attacks, the SOC has managed over 400 critical accidents, providing support and incident response (IR) services for the restoration of affected company activities. Currently, the International Team of SoC, consisting of 120 people, of which 70 operating at the Treviso headquarters, analyzes more than 2,000 security events daily. In 2024, a significant growth in total security events was observed, reaching the threshold of 485,000, with an increase of 56% compared to 2023. The most affected sectors were found to be manufacturing, IT and health. There was also a 169% increase in critical gravity events.

To improve the efficiency in the management of events, the Egyda artificial intelligence platform was introduced in December 2023, developed in collaboration with the Data Science consultants of Var Group. This platform analyzes large quantities of data to map users’ behavior, reducing analysis and response times to attacks by 40%. In 2024, 52% of the alarms were managed with Egyda’s support, and a quarter of these did not require human intervention.

Mirko Gatto, Head of Cybersecurity of Var Group, underlined the evolution of computer threats over the past ten years: “Ten years ago the IT threats were mainly represented by traditional viruses and malware. Over time, these threats have evolved , becoming more sophisticated and targeted, up to a significant increase in ransomware attacks, phishing and data breach. Italy has confirmed itself among the 5 most targeted countries in the world by the ransomware. , fraud and advanced phishing attacks, making it increasingly difficult to distinguish between authentic content and False. If ten years ago the most aware sectors were the banking and financial, today companies of other sectors have also recognized the importance of integrating cybersecurity in their corporate strategy. This change occurred above all at the end of the last decade, when we recorded an increase in attacks by organized hackers groups, aimed at compromising customers’ computer infrastructures. The organization of the groups, the frequency and sophistication of the attacks have led to an evolution of our security solutions: hence the introduction of a platform of Ai between our defense tools “.

Yarix’s SoC, born in 2015, joined the Forum of Incident Response and Security Teams (First) in 2016. In 2019, Yarix was 100% acquired by Var Group, becoming the center of competence for cybersecurity globally of the group. Francesca Moriani, CEO of Var Group, highlighted the importance of the partnership with Yarix in the evolution of the group’s cybersecurity approach. He also underlined how the approach has evolved to respond to the internationalization needs of companies. In line with this internationalization strategy, Var Group has recently acquired the Spanish company Wise Security Global and has started the “Follow the Sun” model, with the opening of new locations in Mexico and Thailand, to ensure continuous global coverage and improve the well -being of employees.