NAB Collaborates with Databricks to Revolutionize SIEM Design
We independently review everything we recommend. When you buy through our links, we may earn a commission which is paid directly to our Australia-based writers, editors, and support staff. Thank you for your support!
Quick Read
- NAB collaborates with Databricks to jointly develop a new SIEM solution, Lakewatch.
- Lakewatch is presently in a private preview stage, with no public release timeline announced.
- NAB intends to consolidate more than 30TB of daily security data with larger datasets to enhance cybersecurity.
- This partnership signifies Databricks’ entry into the security market.
- The platform is set to integrate data from 15 security vendors and provide customized security agents.
NAB Teams Up with Databricks for SIEM Development
National Australia Bank (NAB) has made a pivotal advancement in the cybersecurity field as one of the five design partners for Databricks’ new security information and event management (SIEM) platform, Lakewatch. This partnership denotes Databricks’ first step into the security industry, generating significant excitement within the technology community.
Lakewatch: A New Era in Security
Lakewatch is now in a “private preview” stage, with details regarding its public launch still undisclosed. NAB’s chief security officer, Sandro Bucchianeri, emphasized the bank’s daily processing of over 30TB of security data, conveying a goal to merge these signals with larger enterprise datasets to enhance its cybersecurity framework.
Utilizing Current Infrastructure
NAB already employs Databricks on AWS as a fundamental aspect of its enterprise data platform, Ada. The existing partnership between NAB and Databricks sparked conversations about extending Databricks technology into security solutions, which led to NAB’s role in the design of Lakewatch.
The Future of Cybersecurity
Bucchianeri expressed enthusiasm for the collaboration, mentioning, “Collaborating with Databricks to shape a product tailored to the needs of cyber defenders moving forward … is exciting for us.” The platform is designed to address both present and future security requirements.
Integration and Advancement
Databricks has disclosed that Lakewatch will facilitate data integration from 15 security vendors, offering an “agentic” SIEM where customized security agents can be created for incident detection and resolution. This adaptability is a crucial advantage for organizations seeking bespoke security solutions.
Conclusion
NAB’s alliance with Databricks to create Lakewatch represents a significant development in the cybersecurity landscape. By harnessing Databricks’ technological expertise and NAB’s substantial data capabilities, this collaboration promises to deliver a powerful SIEM platform. With its ability to integrate extensive security data and provide customizable security agents, Lakewatch stands as a promising asset for future cybersecurity efforts.