Resource Type: Customer Stories

Achieving Effective Vulnerability Management at Scale – and a Whole lot more

Managing cybersecurity at a fast-growing company comes with unique challenges. In this case study, see how Moffatt & Nichol overcame inefficient security processes and improved vulnerability management with Critical Start. You’ll learn how they leveraged Critical Start’s Managed Detection and Response (MDR) and Vulnerability Managment Service (VMS) to reduce risk, optimize resources, and strengthen their overall security strategy.

H.I.G. Capital Achieves Efficient Alert Triage and a Stronger Security Posture with CRITICALSTART® MDR and Managed SIEM

Explore how H.I.G. Capital overcame the challenge of overwhelming false positives and inefficient alert management with Critical Start’s Managed Detection and Response services. By enhancing their security infrastructure and leveraging mobile monitoring, they quickly improved SOC efficiency. Learn how Critical Start’s tailored approach strengthened their security posture and reduced risk.

Packaging Manufacturer Saves Time with MDR and Microsoft Security Solutions

A packaging manufacturer needed more visibility into data, faster response times, and their own Security Information and Event Management (SIEM) capabilities. Since they already identified the need for their own SIEM and wanted to go deeper with Microsoft security tools, finding a provider with Microsoft expertise was crucial. That’s where Critical Start came in.

Trusting the Critical Start Team | A Financial Services Firm’s Use Case

“The biggest lesson is transitioning from alert overload to being at a point where we do have eyes on alerts, where every alert is truly possible. It’s something that a lot of people sell and not a lot of people do very well. Being able to come into this relationship, then where we’re at today, it kind of opened my eyes to: There is the opportunity and the possibility to do this.” Learn how Critical Start’s integration with Cylance and Carbon Black helped this financial services firm with complete endpoint protection.

Protecting the Business with Critical Start MDR & Microsoft

Real-World Results: MDR in Action

The Security Director for this global leadership advisory and search firm shared a story of how the Critical Start method protected his organization from a potentially serious breach. “We had an endpoint that became infected from a USB drive,” he explained. “It was setting off 40 or 50 alarms at one point. The Critical Start SOC started notifying my team according to the predefined escalation chain. I called the person that had unintentionally infected the device and instructed them to get the device off the network. The SOC team performed an analysis and determined that we were able to stop the infection before it could propagate anywhere else, so that early detection stopped an issue that could have become much, much worse.”

Professional Services: Devising a Strategy that Secures and Saves Money

One of the largest utility companies in the southern US was looking for expertise to help them architect the best security strategy and infrastructure for their organization. They turned to CRITICALSTART’s Cybersecurity Consulting team to evaluate their existing technology and processes and then deliver recommendations for how to create and implement a world-class security strategy that leveraged the technology and processes that they already had while integrating new tools and systems as needed.

Immediately, CRITICALSTART saved the customer over $100K on proposed security projects, just by showing them how to reuse their existing SSL decryption and next-generation firewall capabilities. They created further opportunities to save by designing a modular security strategy that delivered the necessary level of security while ensuring the customer wasn’t investing in technology they didn’t need or wouldn’t use properly.

Finally, they brought in CRITICALSTART’s Managed Detection and Response (MDR) team to provide the customer with the continuous monitoring and Level 1 incident response that they desperately needed but couldn’t staff internally – a common problem in security circles as there will be 3.5 million unfilled security jobs by 2021 (CSO Magazine). Now, the customer has a true 24x7x365 security operations model, without the human resources, expertise, infrastructure, and technology that such an approach requires.

100% Transparency: Blowing the Lid Off the “Black Box”

When one of the world’s leading beverage companies began their search for a Managed Security Services Provider (MSSP) or Managed Detection and Response (MDR) partner, they built a checklist and request for proposal (RFP) that covered all the basic functions you would expect – and then sent it out to 20 different firms, including some of the biggest names in the security services space, such as IBM, SecureWorks, The Herjavec Group, HP and others.

Among the early responses they received was one from CRITICALSTART, and that response drove them to rethink what they were looking for in a partner. That’s because CRITICALSTART was offering a set of services and capabilities that no other vendor had even mentioned, let alone could match. Specifically, they were intrigued by CRITICALSTART’s commitment to 100% transparency and the notion that they could view as much or as little of what was happening behind the scenes as they wanted – things like specific types of alerts, total number of alerts marked as good or bad, and other data points that could help them govern their business. This would afford them the ability to offload day-to-day operations and benefit from CRITICALSTART’s deep security expertise, while still retaining a sense of control and insight.  No other vendor was willing or able to match that level of visibility – instead, competitors offered the more traditional “black box” model where the customer was on the other end of a less productive and less trustworthy “need to know” relationship.

Transparency to the customer was a guiding principle in the creation of CRITICALSTART’s MDR offering. In the early days, the company’s head of managed services polled former colleagues and outside security executives to get their perspectives on working with a third-party managed services vendor. The feedback was unanimous – the greatest concern they shared was “black box” technology and a lack of visibility into what was really going on behind the scenes. So CRITICALSTART built their MDR service to ensure 100% transparency to every customer, all the time.

As for the selection process, the customer narrowed the list of vendors to CRITICALSTART and SecureWorks and toured the Security Operation Centers (SOCs) for both. And in the end, the combination of a passionate and highly knowledgeable team, world-class facilities, a set of game-changing capabilities, and especially the proven commitment to 100% transparency – which none of the other vendors offered – led them to choose CRITICALSTART as their MDR partner.

5 Signs Your MDR Isn't Working - Join our March 27 webinar to spot the gaps
This is default text for notification bar