Hybrid and multicloud infrastructure has become the new norm for large businesses. It also brings greater cybersecurity complexity: the more environments, vendors, and integration points there are, the more important it becomes to move quickly from a threat alert to action.
These challenges were the focus of SOC DAY Ukraine 2026, a two-day, hands-on, multivendor conference held in Kyiv on October 12–13, bringing together cybersecurity professionals from the public, banking, and corporate sectors.
MODUS X shared practical experience in building a unified security framework for hybrid infrastructure, drawing on DTEK’s example. Our Head of IT Infrastructure, DevOps & FinOps Center of Excellence, Denys Garkaviy, delivered a talk titled “Hybrid Infrastructure Under Unified Control: Reducing Cyberattack Response Time from Hours to Minutes.” He explained how combining network security, a SOC, and coordinated response processes makes securing a complex hybrid network a manageable, verifiable process.
What business challenges have we tackled
For businesses, delays in responding to a cyber incident put operational continuity, brand reputation, and customer and investor trust at risk. DTEK’s hybrid environment, comprising more than 500 cloud networks, 5 data centres, and over 200 services, presented several challenges:
Significant effort required to configure rules across more than 20 firewalls and keep them up to date;
Lack of centralised security event collection and correlation, and 24/7 response capabilities;
Lack of oversight of unauthorised changes to network access rules and policies;
Lack of control over service and container traffic, and insufficient network segmentation in cloud environments;
Inability to migrate seamlessly between data centres;
Slow response to events and emerging challenges.
“Hybridity gives businesses freedom of choice, but the price of that freedom is the complexity of security. Therefore, our task was not to do away with hybridity, but to learn how to secure it as a single system,” said Denys Garkavyi, Head of IT Infrastructure, DevOps & FinOps Centre of Excellence at MODUS X.
What the team has achieved
The MODUS X team brought individual tools together into a closed-loop operational framework, with the SOC serving as a single point of control 24/7:
Unified network security across all cloud environments and data centres;
Centralised collection and correlation of all security events within a shared incident context;
Oversight of configuration changes and risky network policy rules;
Rapid mitigation of vulnerabilities, from detection to virtual patching;
Automated response workflows, including blocking suspicious IP addresses and isolating compromised devices with a single click;
Elimination of process delays between the SOC and the responsible teams.
Denys emphasised that delays most often occur between tools and the people responsible for them: when identifying an owner, obtaining approval for a decision, or carrying out actions manually. The key to faster response was therefore a closed loop of “detection — correlation — SOC decision — response — action execution — audit,” reinforced by automation.
Results: the evolution of DTEK’s response from 2023 to 2026
- incident detection time has been reduced from 45 to 6 minutes (by a factor of 7.5);
- response time has been reduced from 80 to 21 minutes (by a factor of 3.8);
- over 60 per cent of response scenarios are automated.
In addition, the business has achieved seamless migration between data centres, full control over its cloud networks and fewer errors caused by human factors.
Key findings
Hybridity is not a temporary transition, but the ‘new normal’.
Hybridity comes at the cost of investments in manageability — otherwise, you will pay the price in delays when an incident occurs.
The speed of response to a cyberattack begins with the alignment of architectures, integrations, responsibilities and actions — even before the first alert.
The performance targets achieved must be maintained on a daily basis through operations, collaboration between IT and information security, and management attention.
About MODUS X
MODUS X is a Ukrainian technology company, part of DTEK Group, providing professional IT services and solutions for large and medium-sized businesses in Ukraine and abroad.
The company has more than 900 experts, drives digital transformation, implements innovative technologies to improve business efficiency, and develops its own products.
MODUS X's main technology areas are data management and artificial intelligence, business application development and implementation, IT infrastructure, cybersecurity, modern workplace and technical support, and IT consulting.
The company partners with leading IT industry players such as Microsoft, SAP, Creatio, IBM, Lenovo, Trend Micro, Check Point, Cohesity, Tenable and others.
