Case Study
The Technology-Led GSOC: Crisis24 Supports Large Online Retailer’s Growth with a Revolutionary Approach
11 Dec 2024

A large US online retailer with tens of thousands of employees and many European and Asian international physical locations was experiencing rapid growth that outpaced the maturation of its initial security program. The retailer needed to build out a Global Security Operations Center (GSOC) quickly from scratch, focusing on incident management and escalation. The program required 24/7 coverage, a hotline for internal incidents, and streamlined external event incident management. Driven by an innovative small team, they faced demanding customers, regulatory and operational requirements, and internal pressure to maintain high safety and security standards from executives.
A Technology-Led Approach Rapidly Accelerates Security Program
With time and operating costs being a factor, the retailer turned to Crisis24 for a new, two-phased approach. In the first phase, Crisis24 provided a combination of technology and services to build the foundation for incident management, with scalable SOPs for a fully functional GSOC. Here, a shared Virtual Security Operations Center (VSOC) was implemented to demonstrate feasibility, effectiveness, and value. Phase one also included a hotline for internal incidents, rapid IMT alerting, and mass notification for external incidents like storms or protests. This approach proved SOP development and value – while providing time and cost savings compared to traditional alarm management services.
Tailored Support through ‘Man and Machine’
During the launch of phase one, real-world events like Hurricane Beryl and the Central/Eastern Tornadoes demonstrated the value of the AI, software, and human solution. The VSOC provided guidance on potentially impacted areas, types of impact, and eventually- evacuations and closures, further justifying the need for more customized support in phase two. In this next phase, Crisis24 expanded services to include 24/7 embedded intelligence analysts. This allowed the retailer to meet their evolving requirements and provided more tailored support for their security needs.
This phased approach allowed for multiple benefits. First, it enabled mutual assessment for "fit," where the retailer and Crisis24 team built trust in each other, starting with a shared service and eventually moving to a fully dedicated team. Second, it proved Standard Operating Procedures (SOPs). While it's easy to say, "Impactful events should be escalated proactively," achieving this requires years of experience, combining technology, AI, configuration, training, and, most importantly, clear communications around the client's business context. Lastly, it demonstrated early value for non-security executives. The best security leaders continually assess how to drive the most value for the business, beyond just ensuring safety and security for employees. The VSOC-first approach allowed for operational wins in addition to security wins.
If you need help growing or scaling your security program, explore how Crisis24 can strengthen your organizational resilience by combining the best in technology with exceptional human expertise.
Related
Sharpen your
view of risk
Subscribe to our newsletter to receive our analysts’ latest insights in your inbox every week.
Intelligence & Insights
Intelligence
Worth Gathering
Employing a team of 200+ analysts around the world, Crisis24 is the only source you need for on-point, actionable insights on any risk-related topic.

Intelligence Analysis
Synthetic Reality Attacks Pose Rising Operational Risks to International Firms and Travelers
Synthetic reality attacks are emerging as a challenging risk to global corporate operations and international travel.
July 7, 2025

Intelligence Analysis
Impact of Cuts to Forecasting Services Uncertain During Above-Average US Hurricane Season
The 2025 Atlantic Hurricane season is forecast to see above-average levels of storm activity and recent cuts to services may impact the ability of forecasters.
By Charles Hogger
June 30, 2025

Intelligence Analysis
Critical Alert: Iran-Israel Armed Conflict
Crisis24 Alert | Middle East: Ceasefire continues to hold in Iran-Israel Conflict
June 25, 2025

Intelligence Analysis
Evolving North Korean Ghost Worker Threat Underscores Global Dynamic Risk Environment
North Korean “ghost workers” use fake identities and documents to secure remote IT jobs, posing legal, financial, and reputational risks to organizations.
By Jonathan Vincent
June 25, 2025