en.Wedoany.com Reported - Digital Bank (Цифра банк) has partnered with Security Vision to build an anti-fraud system by deploying a SOAR platform, transforming the event handling process that previously relied on manual analysis into a "controlled pipeline" model. For fraud operations with clear logic, the system achieves automatic interception, while the processing speed of other events has also been improved, ultimately shortening response time and reducing financial losses severalfold.
Against the backdrop of rapidly increasing fraud methods and increasingly stringent regulatory requirements, the traditional approach of analysts manually handling alerts has become inadequate for massive data volumes. Digital Bank decided to introduce a SOAR-type platform, not for a traditional Security Operations Center (SOC), but to create an efficient anti-fraud direction. The project required the development of over a dozen custom connectors for IT and information systems, while also meeting strict regulatory (ФинЦЕРТ, СИОМ, ГИС Антифрод) requirements for reporting time and format. After a comprehensive analysis of market solutions, the Digital Bank team chose the Security Vision SOAR platform, citing the vendor's expertise in the financial sector, architectural flexibility, and the professionalism demonstrated by the implementation team during the pilot testing phase.
Maksim Meleshkin, Deputy Head of the Information Security Department at Digital Bank, stated that the project achieved two goals simultaneously. On one hand, it created a "driverless" anti-fraud system for typical operations with clear logic, where the system automatically collects context, makes decisions, and intercepts transactions within seconds, with only complex, non-standard scenarios requiring human intervention. On the other hand, it formalized and scaled anti-fraud processes amid a surge in fraudulent activities, talent shortages, and strict regulation. The severalfold reduction in financial losses proves the effectiveness of the approach.
The collaboration established a scalable system. Previously, analysts took 8 to 20 minutes to handle routine events; now, automated scripts make decisions within seconds, enabling the bank to build continuous processes for typical operations and handle a multiple-fold increase in alert volumes without a proportional increase in headcount or operating expenses (OPEX). Regarding reporting to regulators, manually filling out forms for АСОИ ФинЦЕРТ and СИОМ previously took 10 minutes per case; now it takes only seconds, making the process fast and accurate, reducing the risk of fines due to human error or delays.
The system frees employees from tedious tasks, allowing them to focus on complex analysis. For atypical and complex scenarios, the system builds semi-automated response processes, where the platform independently collects and enriches context, preparing an analytical foundation for experts. Investigation time for such cases has been reduced by more than half, and decision quality has significantly improved. The collaboration between Digital Bank and Security Vision demonstrates that the integration of business expertise and advanced technology can meet regulatory requirements and establish protective barriers for customers.
