| CASE STUDY

Cyber Vulnerability Prevention & Information Security Management

At a Glance

Through multiple acquisitions, a global e-commerce company found itself with an unmanaged information security landscape, creating large scale vulnerabilities for the company and its private data.

[RedCloud is] incredibly knowledgeable in their field and are able to communicate various levels of information across the resource spectrum, from SVP down through the execution level. It’s always a pleasure to work with people who have mastered their craft."

-- Client Security Product Manager

Challenge

After eight years of unconfigured and unmanaged data, the company lacked not only data storage practices, but access to it and the ability to act upon data coming from a multitude of different security tools, putting it at risk of future breaches. The company was spending 65% of its team's time solely on vulnerability containment and remediation, leaving little time and resources for detection and prevention.
​
To solve this issue the company turned to RedCloud consultants to develop a clear and full picture of their information security landscape, from which vulnerabilities be identified, contained, and mitigated prior to impact. Ultimately, the goal was to reduce the risk of security breaches and their cascading business impacts.

Solution

RedCloud began with an in-depth audit of the numerous security platforms across the company from which data was being pulled and stored, as well as the existing Security Information and Event Management (SIEM) software being used to provide real-time analysis of security alerts.

The audit exposed that the company’s data quality was subpar, so RedCloud set out to clean existing data sets and prepare it for migration to a common data storage platform from which real-time reporting dashboards were built. In parallel, RedCloud developed processes for hardening the company’s security surface area including networks, code, applications, and third-party tools – documenting steps along the way to create new comprehensive data dictionaries and playbooks.

Finding that all security data was stored locally, RedCloud then developed and implemented a transition plan for moving all of the company’s security data to a leading hosting solution in order to assure redundancy and reliability.

Results

Through the process of bringing clarity and consistency to all of the data sources, RedCloud helped the client to secure private data, have a true, real-time picture of its security landscape, protect critical infrastructure, and ultimately prevent the loss of customer, financial, and human resources data. With data now stored securely in the cloud, the company ensured access to and redundancy of this critical piece to operations, strengthening trust with partners and customers and enabling ongoing business success.