Case Study
The Technology-Led GSOC: Crisis24 Supports Large Online Retailer’s Growth with a Revolutionary Approach
11 Dec 2024

A large US online retailer with tens of thousands of employees and many European and Asian international physical locations was experiencing rapid growth that outpaced the maturation of its initial security program. The retailer needed to build out a Global Security Operations Center (GSOC) quickly from scratch, focusing on incident management and escalation. The program required 24/7 coverage, a hotline for internal incidents, and streamlined external event incident management. Driven by an innovative small team, they faced demanding customers, regulatory and operational requirements, and internal pressure to maintain high safety and security standards from executives.
A Technology-Led Approach Rapidly Accelerates Security Program
With time and operating costs being a factor, the retailer turned to Crisis24 for a new, two-phased approach. In the first phase, Crisis24 provided a combination of technology and services to build the foundation for incident management, with scalable SOPs for a fully functional GSOC. Here, a shared Virtual Security Operations Center (VSOC) was implemented to demonstrate feasibility, effectiveness, and value. Phase one also included a hotline for internal incidents, rapid IMT alerting, and mass notification for external incidents like storms or protests. This approach proved SOP development and value – while providing time and cost savings compared to traditional alarm management services.
Tailored Support through ‘Man and Machine’
During the launch of phase one, real-world events like Hurricane Beryl and the Central/Eastern Tornadoes demonstrated the value of the AI, software, and human solution. The VSOC provided guidance on potentially impacted areas, types of impact, and eventually- evacuations and closures, further justifying the need for more customized support in phase two. In this next phase, Crisis24 expanded services to include 24/7 embedded intelligence analysts. This allowed the retailer to meet their evolving requirements and provided more tailored support for their security needs.
This phased approach allowed for multiple benefits. First, it enabled mutual assessment for "fit," where the retailer and Crisis24 team built trust in each other, starting with a shared service and eventually moving to a fully dedicated team. Second, it proved Standard Operating Procedures (SOPs). While it's easy to say, "Impactful events should be escalated proactively," achieving this requires years of experience, combining technology, AI, configuration, training, and, most importantly, clear communications around the client's business context. Lastly, it demonstrated early value for non-security executives. The best security leaders continually assess how to drive the most value for the business, beyond just ensuring safety and security for employees. The VSOC-first approach allowed for operational wins in addition to security wins.
If you need help growing or scaling your security program, explore how Crisis24 can strengthen your organizational resilience by combining the best in technology with exceptional human expertise.
Related
Sharpen your
view of risk
Subscribe to our newsletter to receive our analysts’ latest insights in your inbox every week.
Intelligence & Insights
Intelligence
Worth Gathering
Employing a team of 200+ analysts around the world, Crisis24 is the only source you need for on-point, actionable insights on any risk-related topic.

Case Study
Global Energy Company Enhances Duty of Care with Mass Notification from Crisis24
Global energy company relies on Crisis24 Mass Notification system to send location-based emergency alerts to protect employees and enhance duty of care.
August 6, 2025

Intelligence Analysis
Lobito Corridor Project: Strategic Supply Chain to Remain Contested Security Environment
Security threats along the Lobito Corridor are set to intensify over the next 24 months, driven by expanding infrastructure that is opening new routes for criminal exploitation.
By Crisis24 Africa Intelligence and GardaWorld Africa Information Services
August 6, 2025

Intelligence Analysis
Iran’s Nuclear Defiance ahead of October Snapback Threatens Global Sanctions
UN snapback sanctions against Iran are set to expire mid-October, narrowing the diplomatic window to address Iran's nuclear program.
By Crisis24 MENA Intelligence Team
August 5, 2025

Intelligence Analysis
Canada: Confirmed Legionnaires’ Disease Cases Reported in the Middlesex-London Region in July; Outbreak Source Remains Unknown
On July 8, Ontario's Middlesex-London Health Unit declared an outbreak of Legionnaires' disease in the City of London. While the outbreak's source remains unknown, it underscores the importance of public health surveillance and environmental monitoring of aging infrastructure.
By Robyn Mazriel
August 4, 2025