<case>

Developing a cybersecurity sourcing strategy and bringing core security services in-house

Ambition

The CISO and Head of the global SOC at a big pharmaceutical company decided it was time to rethink their security services sourcing strategy and possibly bring key services in-house. They had three main reasons for this change: improving detection and response workflows, increasing cost-effectiveness, and reducing complexity from using multiple vendors and technologies.

We were brought in to help and our team first developed the new sourcing strategy and then managed the insourcing of Anti-Malware and Data Loss Prevention (DLP) services, ensuring a smooth and efficient transition for the company.

Solution

Kopenhagen Konsulting was brought in to help with the sourcing strategy and manage the insourcing of Anti-Malware and Data Loss Prevention (DLP) services. We worked with the management team of the global Security Operations Center and subject matter experts to create a sourcing strategy and prioritize services for potential insourcing. We also developed a business case and presented it to executive management for approval.

The Anti-Malware and DLP services were selected for insourcing, and Kopenhagen Konsulting led the project. We established a global project team and defined operational responsibilities, documented processes and responsibilities in formal documentation, and ensured a seamless transition from the service provider to the internal SOC. We consolidated installed technologies, optimized the platform and operational policies, and defined the future state of the service.

Outcome

Our work resulted in a more efficient and effective security setup with a significant decrease in costs and improved service delivery. The project was completed within time and budget, and established a model for future insourcing of services in the security department. We're proud to have helped our client take back control of their core security services and achieve a more enhanced security posture.