Download PDF
Enhancing Cybersecurity in Commercial Real Estate: A Case Study on Rapid7 Solutions
Technology Category
- Analytics & Modeling - Real Time Analytics
- Platform as a Service (PaaS) - Application Development Platforms
Applicable Industries
- Cement
- National Security & Defense
Applicable Functions
- Maintenance
- Product Research & Development
Use Cases
- Cybersecurity
- Tamper Detection
Services
- Cybersecurity Services
- Training
The Challenge
The case study revolves around the challenges faced by Tony Hamil, a senior cybersecurity engineer for a commercial real estate development company based in Dallas, Texas. The company operates in an industry that is not heavily regulated by the government, but still faces significant cybersecurity challenges. Hamil's role includes a wide range of responsibilities, from application setup to maintenance, integrations, and alert monitoring. The company's IT environment is unique due to the lack of government regulations, but it adheres to the CIS and NIST standards voluntarily. The company has a large number of remote sites and users, making it crucial to maintain security whether the employees are working onsite or remotely. The company's biggest security challenges include patch management and user and asset management. The team often struggles with installing patches properly, leaving the system vulnerable. Additionally, the process of onboarding and offboarding employees from an IT and security perspective was a significant challenge.
About The Customer
The customer in this case study is a commercial real estate development company based in Dallas, Texas. The company operates in an industry that is not heavily regulated by the government, but it still faces significant cybersecurity challenges. The company has a large number of remote sites and users, making it crucial to maintain security whether the employees are working onsite or remotely. The company's IT environment is unique due to the lack of government regulations, but it adheres to the CIS and NIST standards voluntarily. The company's biggest security challenges include patch management and user and asset management. The team often struggles with installing patches properly, leaving the system vulnerable. Additionally, the process of onboarding and offboarding employees from an IT and security perspective was a significant challenge.
The Solution
To address these challenges, the company has been using Rapid7’s InsightVM and Metasploit products for nearly five years. They also incorporated InsightIDR and the Managed Detection and Response (MDR) service as their extended SOC team. Most recently, they introduced InsightConnect to support their initiative for more integration, automation, and orchestration to make their security operations more fluid. InsightIDR has been used as the source of truth for alerts, data, and user activity, allowing the team to quickly understand what’s happening. InsightConnect has automated the onboarding and offboarding process, making it seamless. The company also uses InsightConnect to ensure patching happens every time, on time. It helps to isolate malicious users or systems by automatically gathering data for the team to make quick decisions. The company is also exploring containers to embed security at the beginning of their development projects. With InsightVM, they will be able to monitor containers during the development process to ensure they are secure before they are pushed to production.
Operational Impact
Quantitative Benefit
Related Case Studies.
Case Study
System 800xA at Indian Cement Plants
Chettinad Cement recognized that further efficiencies could be achieved in its cement manufacturing process. It looked to investing in comprehensive operational and control technologies to manage and derive productivity and energy efficiency gains from the assets on Line 2, their second plant in India.
Case Study
Data Capture for Afghanistan Forces
Electronic equipments on the field of Afghanistan provided information on the status of the vehicle and to identify potential threats surrounding it to the British Force. The monitoring and interpretation of this data requires robust and sophisticated digitization for data capture and communication.
Case Study
Digital Transformation of Atlanta Grout & Tile: An IoT Case Study
Atlanta Grout & Tile, a Tile, Stone & Grout restoration company based in Woodstock, Georgia, was facing challenges with its traditional business model. Despite steady growth over the years, the company was falling behind the web revolution and missing out on the opportunity to tap into a new consumer base. They were using independent software from different vendors for each of their department information and workforce management. This resulted in a lot of manual work on excel and the need to export/import data between different systems. This not only increased overhead costs but also slowed down their response to clients. The company also had to prepare numerous reports manually and lacked access to customer trends for effective business decision-making.
Case Study
Major Aerospace Company Automates Asset Management
The O&M division of an aerospace and global security company was using spreadsheets to manually track more than 3,000 assets assigned to students and staff. Maintaining audit trails for this high volume of equipment became increasingly time-consuming and challenging. The chore involved knowing precisely what equipment was on hand, what had been issued, its location and the name of the custodial owner of each item. Every aspect of this task was carried owner of each item. Every aspect of this task was carried out by individuals with spreadsheets. Manually documenting the full lifecycle of each asset added to the burden. This included tracking maintenance requirements and records, incidents and damages, repairs, calibrations, depreciation, and end-of-life data.
Case Study
Revolutionizing Construction Equipment Rental: A Case Study on ProsRent and ENO8
ProsRent, a startup that won the 'Best Financial Opportunity' and 'Best Pitch' at CodeLaunch 2016, aimed to revolutionize the way construction professionals source and rent heavy equipment. In the construction industry, project managers and contractors typically rent heavy equipment from supply companies. However, predicting inventory can be challenging, and finding the required equipment at the right time and place can be a hassle. If the preferred vendor doesn't have the required equipment, it results in wasted time and money in searching for it, often leading to higher costs due to non-preferred rates and increased delivery costs if the vendor is located far from the job site. Suppliers, on the other hand, desired access to a wider base of trusted renters that they didn't have to vet themselves and wanted to offer dynamic rental pricing based on demand and availability in their market. ProsRent's challenge was to produce a minimum viable product that was fast and first to market but also strong enough to engender loyalty and repeat business from the target market.