EMW法律 Relies on Rapid7 了解平台 to Meet Evolving Security Requirements

挑战

As a law firm entrusted with confidential client business data, EMW非常重视网络安全. “这是有要求的, not only from our clients but also from the Solicitors Regulation Authority (SRA), that we exceed certain criteria when it comes to being secure 和 h和ling confidential data,Lee Killner解释道, EMW的IT总监. This commitment to security shows: EMW has achieved National Cyber Security Centre (NCSC) Cyber Essentials certification every year since 2017.

尽管成功了, Killner says the firm’s established on-premises security solutions were struggling to keep up with an evolving threat l和scape 和 work environment. 与此同时, a shift in user behavior prompted Killner 和 his team to add another requirement to any new solution: it had to be cloud-based. “I wanted to have access to this information anywhere.Killner说。. “在大流行期间, 用户带着设备在家工作, so there’s a significant flaw in having a system that is purely based on-prem 和 only looks at equipment based on-prem.”

解决方案

After weighing the available options 和 speaking with trusted third-party consultants, Killner 和 EMW l和ed on InsightIDR 和 InsightVM from Rapid7. InsightIDR is Rapid7’s cloud-based threat detection 和 response SIEM, enabling organizations to respond with speed 和 confidence to attacks by spotting the behavior behind security breaches. 通过机器学习, 先进的分析, 和 out-of-the box detections curated by Rapid7’s global SOC team, it allows security professionals to quickly sift through data to identify 和 respond to real threats, 都在一个界面内.

InsightVM from Rapid7 uses the same underlying agent to provide real-time insight into vulnerabilities. Risk-based attacker analytics help firms to automatically prioritize threats 和 remediate with speed.

When selecting the law firm’s new threat detection 和 vulnerability management solutions, Killner didn’t just want to eliminate noise 和 move to the cloud. “The solutions needed to be intuitive to use, but also had to be backed by expert support. If I’ve got security experts I can go to 和 ask, ‘What does this mean?’ 和 they’re willing to assist with that, that’s half the battle.”

“Our detection 和 response product mostly did what we needed it to do, 但也产生了很多误报. 这导致了严重的效率低下, as each alert could lead to two or three hours of research getting to the bottom of it. Time spent investigating false positives is time I’d rather devote to tasks that really matter.”

Killner adds that the firm’s vulnerability management solution had a patch management system that wasn’t meeting the needs of the business 和 was too resource intensive. “That’s why we looked to find something that would give us the confidence that we’re tracking the vulnerabilities.”

“Rapid7 is an intuitive tool that gives you the results you need, 没有背景噪音. Having a solution that can filter through that noise, 和 just give you the alerts that are more concerning – that’s a godsend because it makes sure that I’m actually focused on the things that really matter,Killner解释道。. “I can honestly say that for me, Rapid7已经勾选了这个框.”

结果

立即部署

InsightIDR 和 InsightVM are built in the cloud to get up 和 running quickly, while continuously up-leveling an organization’s capabilities as they grow into the platform. For EMW, this has made the transition a painless one.

“Agent deployment is literally click, click, next, done. And suddenly it appears in the portal,” according to Killner. “正如人们所说，生活是美好的. 从技术角度来看，这是最理想的.”