RSM scales alert triage with AI, saving $2M annually

RSM is the leading provider of professional services to the middle market. The clients RSM serves are the engine of global commerce and economic growth, and they are focused on developing leading professionals and services to meet their evolving needs in today’s ever-changing business landscape.

RSM, a leader in the professional services industry, was looking to leverage AI to enhance and automate their alert triage and incident response processes for the strategic advantage of its clients. This need led Todd Willoughby, Director of Security Transformation for RSM Defense™ managed security operations center (SOC), to Intezer’s AI SOC platform.

Measurable outcomes for RSM Defense

Intezer automates SOC processes to deeply investigate and triage every alert in minutes, provide tuning recommendations, and escalate critical threats to the experts at RSM Defense. Using Intezer, the experienced cybersecurity practitioners inside RSM Defense get a detailed analysis of every alert so they can uncover hidden cyber attacks and act fast to protect clients globally.

Intezer can do more than what a Tier 1 SOC analyst would be able to do in their initial pass of an investigation, with an average triage time of 2 minutes and 30 seconds.

That fast triage time means RSM’s clients get faster response times for real incidents and the assurance that every alert, including low-severity, has been investigated.

Since RSM ingests roughly half a million alerts every quarter the AI-powered triage process has improved their SOC analysts lives, reducing burnout. RSM’s analysts have checked Intezer’s results, but due to Intezer’s comprehensive quality assurance, they haven’t found an instance when Intezer’s verdicts were incorrect.

Willoughby estimates that Intezer helps RSM save roughly $2 million a year.

RSM Defense’s Unit26 team is committed to delivering unparalleled security solutions for our global clientele. Our partnership with Intezer allows us to leverage the power of AI to automate manual tasks and gain a deeper understanding of potential threats. By automating the triage of SIEM, EDR, and phishing alerts and providing us with enriched threat intelligence, Intezer empowers our security practitioners to focus on high-priority incidents and take decisive action to protect our clients’ business operations and reputation.

Todd Willoughby

Director of Security Transformation, RSM Defense

Interested in learning more? Take a tour of the Intezer Autonomous SOC Platform here.