Security Securing Cloud Operations: How NCC Strengthened a Financial Company’s Cloud Security

Posted by taufik

March 27, 2025

CDT

A financial company in Indonesia has become a digital banking innovation by offering various services, including mobile banking, online banking, and a specialized corporate banking platform. The bank established a strategic partnership with a fintech company to launch a new digital banking application, which has further enhanced its digital transformation efforts.  

As the company expanded its digital services, it faced significant challenges in managing its growing cloud infrastructure. It also encountered cybersecurity risks, which made it essential to protect sensitive customer data and comply with strict financial regulations. After previously collaborating with Central Data Technology, the company implemented the Nebula Cloud Console (NCC) as its managed service solution with CDT to improve cloud management through a fully managed services approach.  

Challenges: Overcoming Operational and Security Barriers in Cloud Management

The company faced challenges without a dedicated team to manage its cloud services. This could sometimes result in performance resources becoming less efficient and a higher chance of service disruptions. To address these issues, the company sought a solution to improve the efficiency and reliability of its cloud services. 

We recognized the need to strengthen three key pillars: people by enhancing security awareness; processes by refining internal policies; and technology by adopting advanced cybersecurity measures and scalable cloud solutions.” stated the Head of Information Security & Governance.   

With digital transformation accelerating, the company also required a robust security framework to protect against evolving cyber threats. Strengthening identity and access management, threat detection, and compliance monitoring became critical priorities. However, the company encountered additional challenges with its on-premises network infrastructure, which complicated the implementation of the NCC. Their restrictive network made it difficult to connect on-premises systems to the cloud. To resolve this, we need to find solutions that would integrate their infrastructure and enable seamless data flow and efficient operations. By applying best practices from AWS, the NCC team initiated several initiatives to address these challenges.   

As the company grew rapidly, it started using more advanced AWS services, which meant our team also had to learn new services quickly. As their business became more complex, we continuously adapted and explored new AWS solutions to support their changing needs. Although each project presented its own challenges, we successfully delivered solutions that were aligned with their business requirements.  

Solution: Implementing NCC for a Secure, Efficient, and Scalable Cloud Strategy

To overcome these challenges, the company adopted Nebula Cloud Console (NCC) Managed Services by Central Data Technology (CDT). This fully managed solution provides a cloud management strategy that improves security, performance, and cost efficiency.   

Utilizing AWS best practices, NCC implemented an integration strategy that bridged the gap between on-premises infrastructure and cloud-based services. This ensured uninterrupted data flow and improved system interoperability. NCC also provided real-time security monitoring and threat detection to keep the system safe. With strong expertise in compliance, NCC helped the company meet regulations and reduce cybersecurity risks.   

Security was a top priority for the company, so NCC implemented advanced AWS security solutions to protect its systems, such as AWS Web Application Firewall (WAF) to protect corporate applications from cyber threats and AWS IAM Identity Center to centralized access controls. These services ensure that only authorized personnel can access critical systems. Amazon GuardDuty was implemented for real-time threat detection to enhance security further, allowing the company to identify and address risks before they become serious.  

The company aimed to improve its cloud security and compliance by following the Center for Internet Security (CIS) AWS Foundation Benchmarks guidelines. Initially, its security score was only 32%, which underscored some services needing improvement. We collaborated closely with the company to implement remediation strategies and develop a plan for ongoing enhancement of its security measures, and now it has achieved a score of 84%. This improvement strengthened its security and ensured that the company met CIS compliance standards. 

In addition to security, the company also needed to strengthen compliance and governance. NCC set up AWS Control Tower and AWS Security Hub to give the company a centralized system to monitor security and ensure it meets industry regulations. This initiative led to a more secure and well-managed cloud environment. With continuous monitoring from NCC, the company managed its cloud resources more efficiently. By optimizing system configurations and removing inefficiencies, operations became smoother with fewer disruptions. NCC’s proactive approach also reduced unnecessary costs, helping the company get the most value from its cloud investments.  

Results: Enhancing Security, Compliance, and Cloud Performance

After implementing NCC, the company experienced significant improvements in both security and operational efficiency. Security measures, including firewall protections, were greatly enhanced through continuous monitoring and proactive remediation efforts. This approach ensured that potential threats were quickly identified and addressed, reducing security risks.   

By leveraging AWS Security Hub, the company 100% compliance with NIST NICS (National Institute of Standards and Technology Network and Information Security Controls). AWS Security Hub continuously monitors security threats, detects vulnerabilities, and ensures regulatory compliance, giving the company confidence in its cloud security strategy.  

Additionally, resource optimization improved cost efficiency, allowing the company to maximize its cloud investments. Despite the complexity of its network, NCC successfully enabled seamless integration between cloud and on-premises systems, ensuring smooth operations without disruptions. With NCC, the company could focus on business growth and strategic initiatives rather than IT maintenance.  NCC showed a strong ability to adapt to changing business needs while efficiently managing increasing workloads. By implementing NCC, the company transitioned to a fully managed service model that supported its business expansion. This transition also strengthened security and compliance measures, aligning with the company’s long-term growth strategy as it continued to take on more projects.  

Cloud Management with NCC

By implementing Nebula Cloud Console (NCC) Managed Services, the company successfully transformed its IT operations, ensuring a more secure, cost-efficient, and scalable cloud environment. Through a trusted partnership with CDT, the company was able to overcome its cloud management challenges and focus on long-term business expansion. With NCC in place, the company now operates with enhanced security, optimized performance, and a reliable foundation to support future growth in the competitive financial sector.

whatsapp icon.png
Start a Conversation

Privacy & Policy

PT Central Data Technology (“CDT” or “us”) is strongly committed to ensuring that your privacy is protected as utmost importance to us. https://centraldatatech.com/ , we shall govern your use of this website, including all pages within this website (collectively referred to herein below as this “Website”), we want to contribute to providing a safe and secure environment for visitors.

The following are terms of privacy policy (“Privacy Policy”) between you (“you” or “your”) and CDT. By accessing the website, you acknowledge that you have read, understood and agree to be bound by this Privacy Policy

Use of The Subscription Service by CDT and Our Customers

When you request information from CDT and supply information that personally identifies you or allows us to contact you, you agree to disclose that information with us. CDT may disclose such information for marketing, promotional and activity only for the purpose of CDT and the Website.

Collecting Information

You are free to explore the Website without providing any personal information about yourself. When you visit the Website or register for the subscription service, we provide some navigational information for you to fill out your personal information to access some content we offered.

CDT may collect your personal data such as your name, email address, company name, phone number and other information about yourself or your business. We are collecting your data in some ways, online and offline. CDT collects your data online using features of social media, email marketing, website, and cookies technology. We may collect your data offline in events like conference, gathering, workshop, etc. However, we will not use or disclose those informations with third party or send unsolicited email to any of the addresses we collect, without your express permission. We ensure that your personal identities will only be used in accordance with this Privacy Policy.

How CDT Use the Collected Information

CDT use the information that is collected only in compliance with this privacy policy. Customers who subscribe to our subscription services are obligated through our agreements with them to comply with this Privacy Policy.

In addition to the uses of your information, we may use your personal information to:

  • Improve your browsing experience by personalizing the websites and to improve the subscription services.
  • Send information about CDT.
  • Promote our services to you and share promotional and informational content with you in accordance with your communication preferences.
  • Send information to you regarding changes to our customers’ terms of service, Privacy Policy (including the cookie policy), or other legal agreements

Cookies Technology

Cookies are small pieces of data that the site transfers to the user’s computer hard drive when the user visits the website. Cookies can record your preferences when visiting a particular site and give the advantage of identifying the interest of our visitor for statistical analysis of our site. This information can enable us to improve the content, modifying and making our site more user friendly.

Cookies were used for some reasons such as technical reasons for our website to operate. Cookies also enable us to track and target the interest of our users to enhance the experience of our website and subscription service. This data is used to deliver customized content and promotions within the Helios to customers who have an interest on particular subjects.

You have the right to decide whether to accept or refuse cookies. You can edit your cookies preferences on browser setup. If you choose to refuse the cookies, you may still use our website though your access to some functionality and areas of our website may be restricted.

This Website may also display advertisements from third parties containing links to other websites of interest. Once you have used these links to leave our site, please note that we do not have any control over the website. CDT cannot be responsible for the protection and privacy of any information that you provide while visiting such websites and this Privacy Policy does not govern such websites.

Control Your Personal Data

CDT give control to you to manage your personal data. You can request access, correction, updates or deletion of your personal information. You may unsubscribe from our marketing activity by clicking unsubscribe us from the bottom of our email or contacting us directly to remove you from our subscription list.

We will keep your personal information accurate, and we allow you to correct or change your personal identifiable information through marketing@centraldatatech.com