Cisco IT describes how they operationalized their AI/ML-driven voice security system by integrating it with Splunk Cloud Platform. The architecture ingests millions of Call Detail Records (CDRs) from CUCM, Session Border Controllers, and cloud calling platforms, normalizes and enriches them with threat intelligence, then correlates them with AI risk scores. Operational dashboards provide executive overviews, behavioral trend analysis, geographic threat mapping, and risk-stratified investigation views. Automated alerting triggers incident tickets and blocking workflows when high-risk calls are detected, while cross-domain correlation links voice fraud to identity and network events. The integration delivered a 70% reduction in potential fraud losses, 60% reduction in manual investigation effort, and cut detection-to-mitigation time from hours to minutes.
