- Organisation
- Metropolitan Police Service
- Predecessor
- large-scale policing-data access without the same centralised Splunk audit and behavioural monitoring layer
- Destination
- Splunk monitoring, auditing and governance controls around access to the Connect policing-data platform
- Workload
- Splunk platform
- Stage
- operational
Evidence boundary: Splunk supports the named governance programme and reported outcomes, including identified ICT breaches and staff time saved. It does not establish that Connect migrated to Splunk, that every Met system is monitored or that every alert proves misconduct.
Verified platform change
The Metropolitan Police Service uses Splunk to monitor and audit access to Connect, identifying potential inappropriate or erroneous access and supporting governance investigation at scale.
Transition
From: large-scale policing-data access without the same centralised Splunk audit and behavioural monitoring layer
To: Splunk monitoring, auditing and governance controls around access to the Connect policing-data platform
Known unknowns
Splunk supports the named governance programme and reported outcomes, including identified ICT breaches and staff time saved. It does not establish that Connect migrated to Splunk, that every Met system is monitored or that every alert proves misconduct.