IT Infrastructure Monitoring and Cybersecurity Improvement in a Selected Company

BSc. Daniel Muluken Wassie, BSc

Diplomová práce

Abstract:

Cybersecurity monitoring has become a critical requirement for financial institutions seek-ing to maintain service continuity, comply with regulatory obligations, and respond effec-tively to growing cyber threats. This thesis examines the current state of IT infrastructure monitoring and security practices at XYZ Bank, an anonymized Ethiopian commercial bank. The study focuses on log management, threat detection, incident response processes, and alignment with national regulatory requirements. A mixed-methods approach was used, combining a review of relevant open-source monitoring architectures with primary data collected through a structured questionnaire and semi-structured interviews with IT and security professionals. The findings show that, although perimeter security controls are relatively strong, the bank’s monitoring environment remains fragmented, with incomplete log centralization and no SIEM platform in place. As a result, cross-domain threat detec-tion depends heavily on manual analyst effort, leading to slower detection and reactive security operations. To address these gaps, the thesis proposes an open-source hybrid moni-toring architecture centered on the Wazuh SIEM platform, supported by Suricata for net-work intrusion detection, Greenbone Community Edition for vulnerability management, and MISP for threat intelligence enrichment. The proposed solution is presented as a phased twelve-month implementation roadmap designed to fit the bank’s financial and staffing constraints. Overall, the thesis offers practical guidance for improving detection speed, log visibility, and regulatory alignment in resource-constrained financial institutions operating in emerging markets. Keywords: IT infrastructure monitoring, cybersecurity, SIEM, open-source security, Wazuh, incident response, regulatory compliance, threat detection, financial institutions

Keywords

IT infrastructure monitoring, Open-source security, Incident response, Threat detection, Cybersecurity, SIEM, Wazuh, Regulatory compliance

Jazyk práce: angličtina

Datum vytvoření / odevzdání či podání práce: 3. 4. 2026

Obhajoba závěrečné práce

• Obhajoba proběhla 5. 6. 2026
• Vedoucí: Ing. Martin Havránek, Ph.D.
• Oponent: Ladislav Benda, externi

Česká zemědělská univerzita v Praze

Provozně ekonomická fakulta

Magisterský studijní program:
Informatics