// CASE STUDY //

The challenge

Operating within a globally interconnected supply chain, Richter understands that security is not just an internal priority but a shared responsibility. By embedding rigorous cybersecurity measures and risk management strategies across its operations, it helps safeguard its own projects and the broader networks of suppliers, contractors and stakeholders.

The lack of comprehensive monitoring and detailed reporting from its previous security provider made visibility a challenge. The legacy reporting system provided minimal metrics and Richter had to spend time manually reviewing and responding to security alerts. Ritcher needed to enhance threat visibility and improve security metrics to provide full reassurance and fulfil more advanced reporting requirements.

The company also needed to streamline compliance with current regulation, ISO standards and important international security guidelines such as the NIST framework. Contributing to projects within the UK CNI sector, Richter also had to ensure whatever new approach it adopted complied with strict data sovereignty requirements.

Richter was increasing its investment in cybersecurity, having recognised that data protection was essential for responsible collaboration with supply chain partners. However, like other SMEs, it did not have a limitless budget and faced ongoing challenges surrounding the continual scarcity of cybersecurity talent. By working with Red Helix, Richter gained immediate access to a pool of IT security and governance professionals.

The solution

Red Helix started by understanding Richter’ s specific needs, conducting a comprehensive audit, before implementing tailored EDR and NDR solutions.

EDR is a next-generation anti-virus solution that detects and removes malware and attacks from devices including computers, mobile devices and servers before damage is inflicted. This is complemented by NDR, which conducts vulnerability assessments and compliance checks on its network infrastructure, firewalls and switches.

Red Helix also installed its Security Information and Event Management( SIEM) service covering all of Richter’ s Microsoft 365 and Azure infrastructure, firewalls and servers. This transmits all logs into the SIEM, allowing Red Helix’ s SOC to identify anomalies. The SOC operates 24 / 7 – so Richter not only has new security tools but the round-the-clock service to monitor them.

In addition, Richter implemented ZTNA so users must identify and authenticate themselves at multiple layers in its infrastructure. This‘ never trust – always verify’ approach requires everyone to prove they are who they say they are.

The result

Following implementation, Red Helix’ s EDR solution transformed threat visibility and accelerated response times. From day one, the platform uncovered previously undetected vulnerabilities, giving the team a clear path to prioritise and remediate early in the onboarding process. This is common across the industry and Red Helix follows the same process with every new client.

When any malware or malicious files are detected, Red Helix can quickly identify and contain the threats. A notification is then shared with the IT team detailing the incident, by which point the issue has already been resolved in 90 % of cases.

By handling immediate containment and providing clear, detailed updates, Red Helix saves valuable time for the IT team. Richter has gained hours back in time savings per week, allowing focus to be reallocated to vulnerability management and the strengthening of its security posture. Red Helix’ s experienced SOC team now manages the SIEM, EDR and NDR tooling, taking care of the time-consuming manual security monitoring and remediation tasks.

RED HELIX’ S SUPPORT HAS ALLOWED US TO WIN SOME LARGE CONSTRUCTION FRAMEWORKS, GIVING CLIENTS THE REASSURANCE THEY NEED

Intelligent SME. tech

15