Rapid7

Qlik, a leading data integration and analytics platform, was facing the challenge of expanding their cloud footprint while ensuring a cohesive, enterprise-level cloud security strategy. The company, which has grown significantly since its inception in 1993, was already using cloud services across various departments, including Research and Development (R&D) and Security teams. However, they recognized the need for holistic guidance to ensure the adequate protection of their cloud resources and data. As Qlik continued to grow as a Software as a Service (SaaS) technology provider, the use of cloud providers like Azure and Google Cloud Platform also expanded. The challenge was to maintain consistent control of their cloud environments and expand their cloud security best practices into these new environments.

Experity, a dynamic Health Information Technology company, was formed from the merger of the two largest urgent care Electronic Medical Records (EMR) companies in the country. The merger led to a rapid expansion of personnel, office locations, software, and services, creating unique challenges for the security team. The team was tasked with protecting the company from loss events of any kind, requiring business continuity and standardization. The small security team was overwhelmed with the task of managing security operations and building resilience in their security program. The company's growth also meant that the security team needed a platform to vet alerts from the increasing number of employees and contractors. The existing Managed Detection and Response (MDR) platform was inadequate as it only monitored network and server activity and not endpoint activity.

CoStar Group, a leading provider of commercial real estate information, analytics, and online marketplaces, has been expanding its reach through mergers and acquisitions (M&A). As of October 1, 2019, CoStar has spent approximately $2 billion acquiring a total of 27 organizations, each with a unique cloud presence and varying levels of cloud competency. The challenge for CoStar is ensuring the security and compliance of its constantly growing and evolving cloud footprint, which spans across Amazon Web Services (AWS), Microsoft Azure, and Google Cloud Platform (GCP). When growing through M&A, CoStar must be able to understand the cyber risk of the acquisition target, integrate the newly acquired resources, and maintain the ability of these acquired entities to accelerate innovation through the use of cloud services without the loss of control.