Rapid7 > Case Studies > Exponent Enhances Data Security with Rapid7 InsightVM and Managed Detection and Response Service

Exponent Enhances Data Security with Rapid7 InsightVM and Managed Detection and Response Service

Technology Category

Cybersecurity & Privacy - Intrusion Detection
Processors & Edge Intelligence - System on a Chip

Applicable Industries

Equipment & Machinery
National Security & Defense

Use Cases

Supply Chain Visibility
Tamper Detection

Services

Cybersecurity Services

About The Customer

Exponent is a well-known engineering and scientific consulting firm that serves corporations, insurance carriers, government agencies, and law firms. The firm is renowned for its analysis of accidents and other failures to determine their root causes. It has been hired by NASA to examine the possible causes of the Space Shuttle Challenger disaster, by FEMA to examine the damage in the aftermath of the deadly Oklahoma City bombing, and to investigate the infamous Exxon Valdez oil spill. More recently, Exponent has expanded its services to analyze new products or processes to help avert potential future problems. The firm has 1,500 employees distributed across more than 30 locations, supporting clients in the U.S, European Union, and Asia.

The Challenge

Exponent, a renowned engineering and scientific consulting firm, faced a significant challenge in securing its data across its diverse and constantly evolving environment. With 1,500 employees spread across more than 30 locations and serving clients in the U.S, European Union, and Asia, the firm needed a robust security solution that could provide visibility across its diverse environment. The responsibility of securing the data fell on Daniel Shuler and his information security team. The team's primary focus was to protect their clients' data using the best technology available and demonstrate that they had the right security tools in place. The challenge was further complicated by the firm's constantly evolving roster of clients and projects, new field offices, and diverse technologies.

The Solution

To address the security challenge, Daniel Shuler implemented Rapid7’s vulnerability tool, InsightVM, and its Managed Detection and Response (MDR) service. The solution was chosen for its lightweight agent that could be deployed on end-user devices and accompany them wherever they go. This strategy was crucial as a large percentage of Exponent's work happens offsite. Rapid7’s InsightVM technology performed asset discovery scans that identified each node on Exponent’s network, providing visibility into a constantly changing environment. The MDR service provided 24/7 security coverage, which was essential as Exponent did not have an in-house security team capable of providing round-the-clock coverage. The MDR service also offered visibility into where the users and devices were operating from, which was crucial for the firm's security.

Operational Impact

The implementation of Rapid7’s InsightVM and MDR service has significantly improved Exponent's security posture. The solution has provided the firm with the much-needed visibility into its diverse and constantly changing environment. The 24/7 security coverage offered by the MDR service has been invaluable, especially considering the firm did not have an in-house security team capable of providing round-the-clock coverage. The ability to track the location of users and devices in real-time has also been a significant advantage. Furthermore, the solution has met the security criteria desired by the firm’s clients, thereby enhancing their trust in the firm. On a personal level, the around-the-clock support provided by Rapid7 has allowed the security team to focus on critical alerts and has improved their work-life balance.

Quantitative Benefit

24/7 security coverage provided by Rapid7's MDR service
Visibility into a constantly changing environment with Rapid7’s InsightVM technology
Ability to track the location of users and devices in real-time