Customer Success Stories

BFSI — SOC deployment for a large private bank

Challenge: A leading private sector bank with 800+ branches needed a 24×7 Security Operations Centre aligned to RBI's Cyber Security Framework. Their existing log management was fragmented across six tools with no correlation or analyst oversight.

Solution: eNeoteric deployed Microsoft Sentinel as the unified SIEM, integrated 1,200+ log sources (branch firewalls, ATM networks, core banking application, AD, cloud workloads), designed custom detection rules for banking-specific fraud patterns, and staffed a 24×7 SOC team with Level 1–3 analyst coverage.

Outcome: Mean time to detect (MTTD) reduced from 72 hours to under 15 minutes. CERT-In mandatory incident reporting compliance achieved. Zero audit findings on SOC controls in the subsequent RBI IS audit.

Healthcare — VAPT and ISO 27001 for a hospital group

Challenge: A multi-city hospital group handling 2 million+ patient records annually needed to achieve ISO 27001 certification and demonstrate VAPT compliance to their insurance partners and the Ministry of Health.

Solution: eNeoteric conducted a full-scope VAPT covering the hospital's HIS/EMR web applications, PACS systems, internal network, and medical IoT devices. We then designed and implemented an ISMS aligned to ISO 27001:2022 and prepared the organisation for Stage 1 and Stage 2 certification audits.

Outcome: ISO 27001:2022 certification achieved within 9 months. 47 critical and high VAPT findings remediated before certification audit. Insurance premium reduction of ~18% citing improved security posture documentation.

Manufacturing — OT/ICS security for an automotive plant

Challenge: A Tier-1 automotive component manufacturer discovered that their production network had direct IP connectivity to corporate IT following an ERP integration project. After an industry peer suffered a ransomware attack that shut down production for 11 days, their CISO was mandated to assess and isolate the OT environment within 90 days.

Solution: eNeoteric conducted a passive OT asset discovery using Nozomi Networks, mapping 340+ PLCs, HMIs, and SCADA components previously unknown to the IT team. We designed and implemented a Purdue Model-based network segmentation architecture, deployed a data diode for one-way historian data flow, and implemented OT-specific monitoring.

Outcome: IT/OT segmentation completed in 78 days. OT asset inventory established for the first time. Continuous OT monitoring detecting 3 previously unknown legacy devices with critical firmware vulnerabilities.

Frequently asked questions

Can I speak to a reference customer before engaging eNeoteric?

Yes. We are happy to facilitate reference calls with customers in your sector, subject to their availability and NDA. Please mention your sector and the type of engagement you are considering, and we will identify the most relevant references.

Do you publish detailed case studies?

Yes — see our Case Studies page for in-depth write-ups on selected engagements. Where customers have requested confidentiality, we anonymise sector and size information while preserving the technical and business outcome details that make case studies useful for evaluation.

What sectors do you have the deepest customer experience in?

Our deepest enterprise cybersecurity experience is in BFSI (banking, NBFC, insurance, fintech), healthcare, central and state government, and manufacturing. We also have growing practices in technology/SaaS, retail, and logistics.

What is the typical size of organisations that engage eNeoteric?

We serve organisations ranging from 200-person growth-stage companies to enterprises with 50,000+ employees and 1,000+ locations. Our mid-market focus is typically 500–5,000 employees, where we can deliver measurable security improvement without the overhead of a Big 4 engagement model.