← Cases
ItalyFinance and insurance2024 – ongoing

Intesa Sanpaolo

Microsoft Sentinel and Copilot for Security in cyber defence

Intesa Sanpaolo used Copilot to help security analysts write queries and brief executives

WorkingVendor case studyVendor ↗

Problem

Intesa Sanpaolo faced growing security threats across a complex international data estate. A shortage of cybersecurity talent increased pressure on its analysts.

Approach

The bank replaced its on-premises security monitoring system with Microsoft Sentinel. It began evaluating Copilot for Security in early 2024 and used it to generate Kusto queries and analyze scripts. Security teams also used it to prepare executive briefings.

Results

No published figures

Takeaway

Microsoft reported faster work by junior analysts and time savings for experts. It did not quantify those improvements.

Categories

Business function
IT and R&D
Innovation type
Process innovation
Evidence
Vendor case study

Sources

Source summaries

[1]Microsoft25 Sep 2024

Microsoft described operational use of Sentinel and Copilot by Intesa's security teams. It reported qualitative improvements in threat detection and analyst productivity without measured AI-specific savings.

Full details are in the original sources.

Added 1 Nov 2026 · Updated 1 Nov 2026
Open case page ↗