Introduction
SEP2 partnered with GWI to enhance their security setup using Google SecOps. This case study delves into the initial challenges faced by GWI, the reasons behind choosing SEP2, and the significant improvements achieved through this collaboration.
GWI (Global Web Index) is a global consumer insights platform that provides instant access to data representative of the views, behaviours, and interests of 3 billion consumers across 50+ countries. GWI has become the go-to for agencies, brands and media companies that want to know what really drives their audience to action.
How the partnership started
When the Head of Information Security John Denham joined GWI, there was a need to build a security setup in Google Cloud Platform (GCP) as well as a need to enhance governance and security measures. Challenges included vulnerability management in the cloud, visibility of logs, and intrusion detection and prevention. Logging was disabled by default in GCP, and there was no log aggregation from their workspace to support incident investigation.
Since GWI is predominantly a Google House, Google SecOps was the logical solution. Integration with their existing tools aside, Google’s SIEM tool also has a relatively low cost for entry compared to other legacy solutions.
John engaged with Google and received a strong recommendation endorsing SEP2 as experts. Besides finding the best technical partner, another key factor was finding one that would fit with GWI’s culture.
The on-boarding process with SEP2 was remarkably simple and streamlined, with the set-up and integration with GCP almost instantaneous. Adding API rules and some troubleshooting issues were resolved within hours, making the process in John’s words “as painless as I could have ever hoped for.”
“If you know that you’re working with good people, they’re passionate about what they do and they speak in plain English when describing the concepts – that makes it a lot easier for people to come on board and understand what you’re trying to accomplish.”
John Denham, Head of Infosec – GWI
Working with SEP2
As the manager of a small team, John was keen to ensure that their chosen solution would be easy to manage. Log fatigue was also a concern when looking at SIEM solutions. This guided his choice of Google SecOps, combining SIEM and SOAR capabilities, but was also helped by SEP2’s set up: “They’ve allowed us to actually implement it in a very practical way where we’re not overloaded with unnecessary information.”
Another benefit for John’s team has been the validation provided by SEP2. They’ve found that their IT and DevOps teams are becoming a lot more proactive, because it’s “coming through an automated system, reinforced and triaged by a third party in SEP2. They’re taking it more seriously than us just saying, ‘Can you go and look at this thing that we found in the logs?’” As John says, “sometimes it’s nice to have a third party that just provides some validation that what you’ve done is appropriate for the business.”
As a practitioner, John is passionate about security, viewing it not just as a box-ticking exercise: “If we put a SIEM in, it’s not for the sake of telling our customers, ‘We’ve got a SIEM!’ It’s about having a functional tool that we can actually use.” Unfortunately, he hasn’t always found partners to be on the same page, with many treating him and his organisation as little more than a paycheque. “They just want to get the tool in, then they abandon us after deployment. In contrast, SEP2’s engagement has improved since the onboarding because they’re constantly learning from us, as well as us learning from them.”
Finding a security partner with the same level of passion has been a welcome change. Reflecting on the SEP2 engineers assigned to GWI, John says:
“They are phenomenal: both personable and very knowledgeable. Our main contact is like a fountain of knowledge. If you ask him a question, he always comes back with ten answers – all the shades of grey, not just a ‘Yes’ or ‘No.’ To me that shows the level of passion he has, and that he really wants to do things properly.”
John Denham, Head of Infosec – GWI
Looking to the future
GWI’s collaboration with SEP2 has bolstered their cyber security, without overwhelming the team with unnecessary noise and information. Using Google SecOps, SEP2 ensured full coverage and smooth integration with existing tools, giving the GWI team peace of mind.
Looking ahead, John is confident that GWI’s relationship with SEP2 will continue and grow. “It is a pleasure working with good people and I definitely think it’s worth singing those praises.”
Related Case Studies
Want to read about other businesses that we have helped with our services and solutions? Click here to view more case studies or click one of the related case studies below.
Syrenis
article date:
14/11/2024
READ MORE
Check Point Harmony Email and Collaboration
article date:
16/07/2024
READ MORE
Concern Worldwide
article date:
02/04/2024
READ MORE
Why Choose Us
Our values inspire and guide us towards cyber security excellence
SEP2 are cyber-security specialists whose success is built on five values:
Honesty
We have always worked hard to ensure that we are offering an honest and transparent set of solutions to our clients. This means always prioritising the right solutions to our customers.
Committed to Good
SEP2 is an honourable organisation guided by a strong moral compass. We live this value with authenticity; it is not about simply ticking a social responsibility box. We understand that we are on the side of ‘good’ in a continuing war against cyber criminality, and that we have a purpose and duty to perform.
Passion
No matter who you talk to at SEP2, you will find someone truly passionate about the sector that they are working in. We are fanatical about the sector – working in cyber security really means something to each and every one of us.
Tech Driven
People Powered
We understand that the tech alone is not going to provide you with the security you need. It is our job to know these solutions inside-out to ensure they are right for your requirements. We understand that we need to listen and be proactive. We live our ‘people powered’ value and have a proud history of investing in apprentices to help us grow.
