Case Study
TopoONE by Crisis24 Increases the Efficiency of GSOC Operations at McKesson
22 Jun 2023

Proprietary critical event management platform enables quicker analysis and response to threats.
Situational Analysis
Meeting its duty of care obligation for over 80,000 employees while ensuring business continuity at its 30+ distribution centers throughout 14 countries is no easy task for McKesson – the ninth largest US-based corporation. To stay competitive and meet its obligations, McKesson’s global security team established a global security operations center (GSOC) to provide a complete view of its potential risks.
McKesson’s global security team evaluates a significant volume of incoming risk events, and over time they acquired many different monitoring systems. Each system functioned as a silo, and the GSOC team had difficulty monitoring numerous screens, maps, and reports. While managing dozens of incompatible systems, the global security team was overwhelmed with data that often hindered timely responses to risk events. High-value actionable data was being commingled with less critical data with little or no strategic protection impact.
Frustrated by the situation, the team searched for a solution to automate tasks and unify its data and various interfaces into a single lens, enabling quicker analysis and response.
Enabling Successful Security Operations
Requirements
McKesson required a way to aggregate the geospatial risk data into one visible map where all team members at the GSOC could view threatening conditions and events in proximity to McKesson assets in real time and triage them using a typical workflow for improved, just-in-time, situational risk intelligence. Additionally, the security team wanted to:
- Access to video camera feeds from all facilities
- Associate all alerts in context to the locations of facilities and travelers
- Customized McKesson activity log templates
- Process the alerts via a dashboard or a map view
- Define KPIs and automatically generate reports to measure team performance against those KPIs
- Generate activity reports by shift, day, week, month, etc.
- Measure risk by asset type and location
- Automatically generate customized reports
- Experience 99.9% uptime
- Have a flexible platform that makes adding new system connections easy and streamlined
TopoONE Platform Enables Effective GSOC Operations
McKesson selected TopoONE because of its robust visualization tools, customizable workflows, streamlined communication, automation features, and insightful analytics. Integrating the multiple alerting systems into one standard map and workflow system enabled the GSOC team to simultaneously monitor all potential risk conditions and events and identify actual threats. Faster risk recognition and communications allow analysts to integrate their analysis into email and communications systems - no more cutting and pasting from various platforms. And the analyst team now has one consistent workflow for rapidly triaging new events.
Systems now scale to enable protective oversight of 6,000 local and international protectees and $8B of fixed and in-motion assets. Management now has robust analytics for better workforce management and more informative executive briefings.
Outcomes

- McKesson analysts estimate a 50% reduction in the time needed for tasks related to SOPs (e.g., communication, documentation, reporting, etc.).
- People and asset protection leadership report a 20% confidence gain for mission assurance.
- Efficiencies gained have increased GSOC Analyst capacity by 30%
- GSOC analysts’ response time has significantly decreased and becomes more uniform day-to-day.
- When the Topo.AI platform was implemented, multi-hour average response times were commonplace, and only 47% of alerts received a response within 20 minutes. Three months later: the average daily response time is only 6:20, and 94% of alerts receive a response within 20 minutes.
- McKesson’s confidence in its ability to assess, prevent, respond, and recover from threats and risks went from a 5 to a 7 out of 10
From Our Client
“Trust is a huge factor, and I felt, from the start, that the TopoONE team would do what they said they would do – and they have delivered above expectations. The ability of TopoONE to create operational efficiencies for McKesson Security Operations has been huge.”
Ed Shubert
Vice President, Global Security Operations Center
Investigations & Crisis Management Program
McKesson

Related
No results found.
Sharpen your
view of risk
Subscribe to our newsletter to receive our analysts’ latest insights in your inbox every week.
Intelligence & Insights
Intelligence
Worth Gathering
Employing a team of 200+ analysts around the world, Crisis24 is the only source you need for on-point, actionable insights on any risk-related topic.

Case Study
Medical Assistance and Cross-Border Repatriation for a Neurological Emergency
See how Crisis24 coordinated hospital care, cross-border medical transport, and a seamless repatriation for a stroke patient, ensuring a safe transition to rehab.
September 12, 2025

Intelligence Analysis
Afghanistan Earthquake Creates Complex Public Health Emergency
The Aug. 31 earthquake in Afghanistan has created a complex public health emergency, characterized by high trauma needs, strained healthcare infrastructure, and elevated infectious disease risks.
By Robyn Mazriel
September 10, 2025

Intelligence Analysis
Implications of Israel’s Attack in Qatar in a Post-Oct. 7 World
Explore how Israel’s Doha strike reshapes Gulf security, strains US ties, and jeopardizes mediation efforts in the Israel-Hamas conflict.
By Crisis24 Middle East Intelligence Team
September 10, 2025

Intelligence Analysis
5G and Next-Generation Wireless Networks Likely to Reshape Global Digital Mobility and Geopolitical Competition
The expansion of 5G and the rise of next-generation wireless technologies create new opportunities and challenges for international businesses and travelers.
By Crisis24 Intelligence Team
September 9, 2025