Teknosa detects attacks 18 times faster with Microsoft Security Solutions

Today, Teknosa serves more than 15 million customers with 50 million transactions annually. "Even after more than 20 years in the industry, our focus is still on the customer—we want to make sure our end-to-end omnichannel and mobile infrastructure are safe for making purchases," says Ulaş Kaya, Information Security Manager at Teknosa. 

Considering all the devasting effects of cyberattacks, Kaya knew change was necessary. “The more vendors we use, the higher the security risks we have. That’s why we decided to focus Information Security as a stand alone department, separating it from other IT teams.”

Kaya was the first and only employee of the department. “In 2021, I laid the foundations of data security by analyzing the current situation, performing GAP and risk analysis with our existing products,” says Kaya. “This was a brand-new department. I needed to invest in multiple areas and sustain them all by myself. I had to prioritize, and sustainability was my biggest concern. Instead of going forward with different solutions, I started to look for a consolidated one.”

Threat detection: From hours to minutes 

Improve data security, securing endpoints and user accounts, while simplifying its management were Kaya’s main priorities as the Information Security Manager. “That’s when I invited Microsoft to the table. We worked together for almost three months on. We evaluated all scenarios together end-to-end, and compared competitor’s solutions,” explains Kaya. “The reason we chose Microsoft is that it provides so many solutions above industry standards. They also integrate many solutions into one.”

Previous information security solutions used at Teknosa were not talking to each other, and Kaya spent much of his time trying to make sense of data. “For every threat, I was checking one solution for email and another one for antivirus to see if the incidents are related. I was wasting time on searching for patterns,” recalls Kaya. “Now, the first thing I do  is use a fast checklist to determine if our operations are secure. Having early detection and alarms also made it easier to keep up with threats. I now have a manageable infrastructure with actionable insights.”

As a result, Teknosa’s visibility has increased, and the number of security incidents has decreased. "With Microsoft Defender , there are so many checkpoints to detect malicious activity. From IP address and domain address to behavior analysis, we can set these parameters,” says Kaya. “Most importantly, when we can detect the problem faster, we find the solution faster. At a click of a button, I can detect phishing emails with Microsoft Defender for Office 365. Instead of taking two to three hours to clean them, it now takes only five to 10 minutes.” 

Today, Kaya and his team are working on building a secure future for Teknosa. “Our main focus is business continuity. After relying on Microsoft Defender for security, we now can see a better picture on what areas to focus, such as risk management with Microsoft Defender Vulnerability Management,” adds Kaya. 

Securing the devices of 2,300 employees

Since Kaya is responsible for the computers and devices of 2,300 employees, he deployed an endpoint solution to secure end-user devices. “With Microsoft Intune and Microsoft Defender for Endpoint, I can manage devices remotely to ensure their safety, no matter where the team member works from. Our employees can work confidently knowing that their data is protected. We created an awareness of information security,” he says. 

Teknosa still leverages Microsoft’s support that guides them in effective and quick deployment of the security solutions. “Thanks to our brainstorming sessions with Microsoft, we learnt that we can protect data on mobile devices, even though we don’t provide them, and the employees use their own. This prevented us to look for another solution.”

Now with a team of three in the information security department, Kaya has more plans in store. He says, “We want to explore more of the compliance solutions for the ISO 27001 certificate with Microsoft Purview Insider Risk Management to remediate possible insider threats like endpoint and email security and operational security.” Looking toward the future, Kaya thinks that security will remain a key topic for businesses. He concludes, “Companies need to prioritize information security—whether that involves investments or creating a team, it is something that needs to be on the table at all times when considering a successful future for businesses.”