全港服务方案 Gains Experienced 24/7 SOC With Rapid7 MDR Service

所面临的挑战

The onset of the COVID19 p和emic forced Citywide’s 1,000名员工变成了一个分布, 在家工作的模式. 和很多公司一样, 这是全市的关键时刻, who had to recreate their IT strategy 和 envision a new Cyber strategy entirely from scratch.

网络钓鱼是另一个持续的挑战, which Citywide notes is perhaps the most dangerous attack method in Australia. Additionally, its private-public role creates unique challenges for Citywide. They are closely scrutinized by the media 和 audited multiple times a year. If anything goes wrong it impacts the reputation of their parent organization - the City of Melbourne.

解决方案

To deal with a rapidly changing business environment 和 expanding attack surface, Citywide turned to the Rapid7 管理检测和响应 service to deliver the people, 流程, 和 technology to enable Citywide to elevate their cybersecurity maturity. They turned to Rapid7 as their partner in cybersecurity. 

构建网络安全能力

帕里辛格, Group Head of IT 和 Cybersecurity Lead knew that if Citywide was going to weather the move to work-from-home, they would have to be aggressive in protecting their assets. They quickly rolled out MFA on top of their VPN access for all team members, 添加Darktrace, 支撑起他们的数据中心. The Rapid7 管理检测和响应 service was to be the final piece in the puzzle.

“我们没有传统的安全团队, 我们有一个基础设施团队, 管理安全性, 所有的服务器, 以及日常的业务活动,辛格解释道。. “And, we couldn’t deal with all the anomalies coming in our systems. I had already implemented numerous improvements to our security architecture, but it was evident that we required dedicated security specialists. 这就是我转向Rapid7 MDR的原因.”

据辛格估计, the decision to hire Rapid7 rather than half a dozen new employees with six figure salaries was an easy one. “We looked at Rapid7 和 thought, wow, that’s exactly what we need,” he recalled.

Rapid7提供即时结果

Citywide implemented Rapid7 because of the increased attacks being seen 和 reported on in Australia on a daily basis. Singh worked with Rapid7 as part of Citywide’s MDR on-boarding process, 和 it paid off in spades almost instantly for his team.

“Before Rapid7 our team couldn’t provide 24/7 coverage. We began working with Rapid7’s MDR Service to help us bolster our detection 和 response program 和 put our team  at ease. 现在, I have peace of mind because I know if we were to be targeted by a threat or breach, 我们有Rapid7的保护.”

Rapid7连接安全基础设施

Rapid’s MDR service is on of the core security measures implemented in Citywide as part of their  security posture. “一切都是相互关联的。, 所有端点, 所有东西都连接到Rapid7中,辛格解释道。. “Endpoint protection is not smart enough to h和le the heavy load. 这就是Rapid7出现的原因, because Rapid7 could leverage the Sophos endpoint protection 和 collect 和 analyze that data. We also have Microsoft ATP protection 和 Darktrace running. Rapid7帮助我们更有效率, especially since it’s so fast in investigating 和 quarantining things.”

并非所有的MDR服务都是一样的

Singh also notes that just having a system in place doesn’t protect you. 这只是另一种机制. 所以他对真正的高质量感到满意, 高接触, Rapid7提供的可操作的见解. “I have my own Rapid7 Customer Advisor, 和 I talk with them on a regular basis,辛格解释道。.  “他们全天候待命. That is the Rapid7 difference - really great  service delivery. 这是一种合作. 如果出了问题, they will jump on the phone with us if necessary to figure out a problem 和 try to resolve it together.”

Singh adds that Rapid7 responds even if the problem is not related to their service. “Rapid7 has stepped up 和 delivered the service according to my expectations. Overall, the experience with Rapid7 has been an amazing experience. 最终，我们信任Rapid7.”

有Rapid7保护的未来

全市正处于增长模式, having acquired a number of utility companies which will slowly come under Citywide’s umbrella structure – 和 for Singh, that means folding them into Rapid7’s protection as well. “We don’t integrate all their systems with us because they have different needs, 但Rapid7是一个可以工作的部分.”