Case Study
The Technology-Led GSOC: Crisis24 Supports Large Online Retailer’s Growth with a Revolutionary Approach
11 Dec 2024

A large US online retailer with tens of thousands of employees and many European and Asian international physical locations was experiencing rapid growth that outpaced the maturation of its initial security program. The retailer needed to build out a Global Security Operations Center (GSOC) quickly from scratch, focusing on incident management and escalation. The program required 24/7 coverage, a hotline for internal incidents, and streamlined external event incident management. Driven by an innovative small team, they faced demanding customers, regulatory and operational requirements, and internal pressure to maintain high safety and security standards from executives.
A Technology-Led Approach Rapidly Accelerates Security Program
With time and operating costs being a factor, the retailer turned to Crisis24 for a new, two-phased approach. In the first phase, Crisis24 provided a combination of technology and services to build the foundation for incident management, with scalable SOPs for a fully functional GSOC. Here, a shared Virtual Security Operations Center (VSOC) was implemented to demonstrate feasibility, effectiveness, and value. Phase one also included a hotline for internal incidents, rapid IMT alerting, and mass notification for external incidents like storms or protests. This approach proved SOP development and value – while providing time and cost savings compared to traditional alarm management services.
Tailored Support through ‘Man and Machine’
During the launch of phase one, real-world events like Hurricane Beryl and the Central/Eastern Tornadoes demonstrated the value of the AI, software, and human solution. The VSOC provided guidance on potentially impacted areas, types of impact, and eventually- evacuations and closures, further justifying the need for more customized support in phase two. In this next phase, Crisis24 expanded services to include 24/7 embedded intelligence analysts. This allowed the retailer to meet their evolving requirements and provided more tailored support for their security needs.
This phased approach allowed for multiple benefits. First, it enabled mutual assessment for "fit," where the retailer and Crisis24 team built trust in each other, starting with a shared service and eventually moving to a fully dedicated team. Second, it proved Standard Operating Procedures (SOPs). While it's easy to say, "Impactful events should be escalated proactively," achieving this requires years of experience, combining technology, AI, configuration, training, and, most importantly, clear communications around the client's business context. Lastly, it demonstrated early value for non-security executives. The best security leaders continually assess how to drive the most value for the business, beyond just ensuring safety and security for employees. The VSOC-first approach allowed for operational wins in addition to security wins.
If you need help growing or scaling your security program, explore how Crisis24 can strengthen your organizational resilience by combining the best in technology with exceptional human expertise.
Related
Sharpen your
view of risk
Subscribe to our newsletter to receive our analysts’ latest insights in your inbox every week.
Intelligence & Insights
Intelligence
Worth Gathering
Employing a team of 200+ analysts around the world, Crisis24 is the only source you need for on-point, actionable insights on any risk-related topic.

Intelligence Analysis
Lebanon–Israel: Military Escalation Weakens State Authority and Signals Strategic Shift
Hostilities between Israel and Lebanese Hizballah (LH) have entered a renewed and more dangerous phase, resulting in near-daily exchanges of fire and a clear expansion in Israeli military objectives.
By Dyna Faid
March 27, 2026

Intelligence Analysis
Potential Public Health Impacts of Water Infrastructure Damage in the Persian Gulf
Recent escalation in the Middle East conflict increases the risk of disruption to desalination plants and power generation facilities in the Persian Gulf.
By Robyn Mazriel
March 17, 2026

Intelligence Analysis
Middle East Conflict: Disruptions Update
Conflict-related disruptions are likely to affect the Middle East through late March; Iranian attacks and interceptions persist regionwide.
March 13, 2026

Intelligence Analysis
Middle East: Rising Public Health Threats Driven by Conflict, Displacement, and Supply Disruptions
Strained supply chains and rising demand are placing mounting pressure on health systems across the Middle East, heightening the risk of shortages in essential medicines and lifesaving care as the conflict continues.
By Robyn Mazriel
March 12, 2026




