Capstone Project Task

Capstone Project: Strengthening Security with UEBA, UAM, and Network Segmentation

By Reynold W. Obuyekha
M.S. Cybersecurity, 2025

For my graduate capstone, I designed and implemented a unified cybersecurity solution that combined User and Entity Behavior Analytics (UEBA), User Activity Monitoring (UAM), and network segmentation. The goal was to reduce insider threats, improve incident response, and align with international compliance frameworks while ensuring business continuity.

Key Improvements Implemented

• -  Real-time threat detection: Automated alerts and behavior-based monitoring replaced manual log correlation, reducing fatigue and improving accuracy.
• -  Segmentation for control: Critical systems and data were isolated into trust zones, preventing lateral movement and minimizing risk during breaches.
• -  Modernized SIEM integration: Dashboards and centralized log collection gave security analysts and leadership visibility into threats, helping drive better decision-making.
• -  Policy updates: Incident response, access controls, and continuity strategies were rewritten in line with NIST SP 800-207 (Zero Trust), ISO/IEC 27001:2022, and national data protection laws.

Data Collection and CIA Triad

The solution improved logging across applications, servers, endpoints, and networks feeding data into the SIEM for investigations and compliance reporting. These changes directly reinforced the CIA Triad:

• -  Confidentiality: Strong encryption and segmentation keep sensitive data within defined zones.
• -  Integrity: UEBA detects unusual behavior patterns, flagging potential misuse or compromise.
• -  Availability: Automated monitoring helps identify and mitigate DDoS, brute force, or insider threats before they disrupt operations.

Risks & Mitigation

Even with new systems, challenges remain:

• -  Alert fatigue: Addressed through tuning and refining detection rules.
• -  System overload: Mitigated with scaling and backups.
• -  Misuse of tools: Reduced with separation of duties and role-based access.

These measures ensured a stable rollout while balancing security with operational efficiency.

Lessons Learned

This project reinforced the value of integrated security ecosystems, where people, processes, and tools work together. UEBA and UAM enhanced visibility, segmentation strengthened defenses, and updated policies gave staff a clear framework for action. By aligning with recognized standards and building resilience into daily workflows, the environment moved closer to true Zero Trust.