Microsoft Financial Services Italy

Intesa Sanpaolo

Security and Compliance

Intesa Sanpaolo won’t be intimidated by a constantly evolving threat landscape. It needed a tool set that could help it brace against increasing malicious actors, growing legal and regulatory requirements, and the scarcity of cybersecurity talent.

Reported impact

Business outcome

Despite an ever more complex and changing cybersecurity landscape, Intesa remains proactive with a tool set fed by constant innovation. Thanks to comprehensive threat intelligence from Microsoft and the flexibility of Microsoft Sentinel in ingesting multiple threat intelligence feeds, the bank can quickly identify and mitigate previously unknown threats while also prioritizing them appropriately.

  • Compliance
  • Productivity Improvement
  • Risk Reduction

Solution

Intesa Sanpaolo won’t be intimidated by a constantly evolving threat landscape. It needed a tool set that could help it brace against increasing malicious actors, growing legal and regulatory requirements, and the scarcity of cybersecurity talent. The bank deployed the Microsoft Sentinel security information and event management system to scale elastically to evolving security needs and simplify threat detection. It supports its threat hunters with Microsoft Copilot for Security. Intesa identifies and mitigates previously unknown threats faster and more effectively, thanks to AI-enabled Microsoft Sentinel. New security staff reach peak effectiveness faster with productivity-enhancing Microsoft Copilot for Security.

Data flow

Security telemetry and threat-intelligence feeds are ingested into Microsoft Sentinel, where Copilot for Security helps analysts generate KQL queries, summarize findings, and produce executive reports from the live SIEM context.

Solution architecture

2 components · 2 layers
  1. Serving
    • Microsoft Copilot for Security Turns security telemetry into incident summaries, queries, reports, and recommended response steps.
  2. Governance
    • Microsoft Sentinel Serves as the SIEM layer that collects telemetry and supports threat detection, investigation, and response.

Architecture clues

  • Intesa identifies and mitigates previously unknown threats faster and more effectively, thanks to AI-enabled Microsoft Sentinel. New security staff reach peak effectiveness faster with productivity-enhancing Microsoft Copilot for Security.
  • Security telemetry and threat-intelligence feeds are ingested into Microsoft Sentinel, where Copilot for Security helps analysts generate KQL queries, summarize findings, and produce executive reports from the live SIEM context.
  • The bank deployed the Microsoft Sentinel security information and event management system to scale elastically to evolving security needs and simplify threat detection. It supports its threat hunters with Microsoft Copilot for Security.
  • Visibility is our most effective weapon against cyber ‘unknown unknowns.’ We adopted Microsoft Sentinel so that we could detect threats and anomalous behavior faster and more effectively than ever before.

Evidence from the source

Intesa Sanpaolo won’t be intimidated by a constantly evolving threat landscape. It needed a tool set that could help it brace against increasing malicious actors, growing legal and regulatory requirements, and the scarcity of cybersecurity talent.
The bank deployed the Microsoft Sentinel security information and event management system to scale elastically to evolving security needs and simplify threat detection. It supports its threat hunters with Microsoft Copilot for Security.
Transparency Evidence & methodology 71/100 reference value · 77% confidence · 1 source

Review how this reference was scored and trace each normalized claim back to its documented source.

01

Scoring methodology

How scores are calculated

Customer Reference Value measures usefulness as a customer reference. Evidence Confidence measures the quality and traceability of available evidence, not independent verification.

Customer reference value71/100
  • Problem clarity20/20
    Measures whether the customer's operational problem is specific enough to compare.
  • Implementation depth25/25
    Rewards named components, data flow, integrations, and architecture detail.
  • Outcome specificity16/20
    Measures whether the reported benefit is concrete rather than a generic claim.
  • Quantified impact0/25
    0 metrics describe measurable impact.
  • Deployment scale10/10
    Rewards evidence of a live or scaled deployment and meaningful integration scope.
Evidence confidence77%
  • Source authority20/25
    The main evidence is an official vendor-published customer story.
  • Claim traceability21/25
    10 of 12 key fields link to a named source.
  • Direct evidence10/20
    2 direct source quotes retained.
  • Date provenance10/10
    The publication date comes from the source page or publisher.
  • Source transparency8/10
    1 source reference document publisher, URL, authority, retrieval, and supported fields.
  • Implementation specificity8/10
    Rewards source-backed components, data flow, quantified impact, and a specific outcome.
02

Traceability

Sources & provenance

Field coverage shows which facts each source supports. Dates are shown only when documented by the source.

  1. Microsoft

    Intesa Sanpaolo customer story

    First-party
    https://www.microsoft.com/en/customers/story/18745-intesa-sanpaolo-group-microsoft-copilot-for-security
    Source type
    Vendor-published customer story
    Published
    Sep 25, 2024
    Supports
    • Customer
    • Business problem
    • Solution
    • Products
    • Solution components
    • Data flow
    • Integrations
    • technical area
    • use case category
    • Business outcome
    • outcome category
    • Metrics
    • Architecture
    • evidence quotes
    • Publication date

Date evidence

  • Published on source page Sep 25, 2024 · Microsoft · First-party
    Open date source
Not separately sourced Industry, Region, Company size. Treat these normalized attributes as lower-confidence until a dedicated source is added.