Case Study Managed Security Services
Managed Security Services
Customer: Judo Bank
Industry: Banking
Services: Security Operations Centre (SOC) Services
Challenges
- Need to scale information security capabilities alongside business growth
- Need to provide secure, trusted services to customers
Outcome
- Moving to a complete MS ecosystem, taking advantage of existing investments
- Scaling up information security capabilities to keep pace with business and technology growth
- Trusted partner who can scale with them and provide managed SOC services
Judo Bank
Judo is an Australian challenger bank focused on small and medium-sized enterprise (SME) business lending. It also offers a range of personal term deposit products to consumers.
Judo’s purpose is to be Australia’s most trusted SME business bank, underpinned by the best people, a relationship-based approach to banking and leading technology.
The challenge
Judo Bank started operations in October 2016, with security technology and processes that were fit for purpose at the time. In 2022, as Judo continued to scale its existing platform, they required an uplift to keep pace with the evolving threat landscape.
Concurrently, Judo had moved to a Microsoft E5 licence, but were not making full use of the licensing provided to maximise their potential security posture.
Judo had the strategic vision to scale the bank, and its cyber security capabilities also needed to scale to keep pace.
The solution
Judo identified early on that with the market constraints around cyber security resourcing, and the cost associated with understanding, building and running its own 24 x 7 Security Operations Centre, a trusted partner was needed to help drive and manage the process to scale. As such, Judo partnered with CyberCX early in its growth and established a strong working relationship. With the existing partnership as a foundation, CyberCX and Judo worked to identify opportunities for improvement in the technologies used to protect Judo, allowing CyberCX to deliver more effective security around the clock.
CyberCX provided a planned approach for the solution development with Judo and was adaptable when needed to be, committing to a “use the right tool for the job” vendor agnostic approach. During the transition process, CyberCX was able to pivot to provide guidance to Judo, including helping the bank to meet and overcome any complexities and challenges in the transition process. For Judo’s transition to the next stage of enhanced cyber security capability, and moving to a complete Microsoft Security Ecosystem, CyberCX was able to:
Leverage economies
of scale in its service delivery
Increase the efficacy
of its security operations, including integrated threat intelligence
Increase its visibility
and alerting capabilities by an order of magnitude and integrate the solution into the CCX DevOps process
Make full use of
Judo’s existing investment into the Microsoft suite
Integrate response capabilities
into its service, dramatically reducing potential response and dwell time
Add a suite of XDR
telemetry and response capabilities to the SOC solution
The outcome
It was a true partnership between Judo Bank and CyberCX in scaling Judo’s cyber security capabilities.
Outsourcing its SOC needs supports Judo in
maintaining focus on building a world class SME business bank and helping its SME business and term deposit customers achieve their goals.
This uplift in technology
and security capability was delivered to Judo without material increase to its security spend, by capitalising on existing investment and leveraging the efficiencies of scale provided by CyberCX’s services.
By upgrading technology
and adapting to an evolving threat landscape, Judo and CyberCX were able to implement an end to-end SOC solution.
CyberCX continues to provide managed SOC services to Judo and is proud to partner with Judo on an ongoing basis to provide security support for the challenger bank as it continues to scale and grow.
“The advantage of working with CyberCX was the depth of knowledge and experience the team had about scaling up. They had a structured approach, but were still flexible for the transition, which really worked well for us. Their service was not transactional. It was a real partnership.”
Michael Collins
Chief Information Security Officer
