Delta Risk
Building a Modern MSSP

Scott Kaine, CEO

“Our focus at Delta Risk is building a modern, cloud-native security platform that directly addresses these challenges,” says Scott Kaine, the CEO of Delta Risk, “We provide the technology and expertise our clients need to prioritize and respond to potential threats faster.” As such, the company has focused this past year on expanding the capabilities within ActiveEye, its Security Operations Center (SOC) as-a-Service platform and building a cybersecurity operations team with diverse skillset to quickly address any threat on premise or in the cloud.

The threat landscape has grown more complex, and recent attacks have shown that every organization is a possible target for today’s financially motivated adversaries. Security tools are evolving, but many companies still lack the skills and expertise to properly deploy them, or the time to investigate and respond to potential threats.

Security Information and Event Management (SIEM) platforms are spewing high volumes of alerts that can ultimately hide real issues. These legacy platforms require a lot of cycles to maintain, and they don’t extend well to the modern enterprise that is focused on cloud and SaaS. It is expensive to build an in-house security operations center (SOC) and hire a team with the skillset to cover a broad range of technologies. Furthermore, there’s a severe shortage of experienced cybersecurity professionals, making it even harder to find quality talent.

Delta Risk understands and simultaneously solves this problem with its ActiveEye SOC-as-a-Service. The platform helps clients automate responses within their existing environment and then investigate the most urgent issues instantly or to have Delta Risk’s SOC analysts to do this for them. If the client requires an assessment or additional support, Delta Risk can also provide broad expertise in security services such as compromise assessments, penetration testing, security exercises, and incident response.

Alert fatigue is a common problem where Delta Risk is consistently adding value for customers by managing and monitoring next-generation endpoint detection and response (EDR) solutions. The company offers a co-managed model that enables it to identify the most important alerts and eliminate the noise, as well as to remediate any problems that surface, and to give clients the same view of that activity that Delta Risk SOC analysts see.

In one case, for example, Delta Risk’s ability to show a 360-degree view of activities within a client’s IT environments by connecting cloud, endpoint, and network activity helped identify a rogue operation from an employee who had unknowingly succumbed to a phishing attack and immediately resolve the problem before it could cause any damage. “We can also provide post-incident support,” said Kaine. “Following an incident, we work with clients to set up governance and controls through our professional services team to prevent further damage.”

With such immense capabilities, Delta Risk is planning to extend its coverage to more technical platforms. For 2020, the company will focus on the most effective ways to communicate with existing and future customers. “We want the SOC-as-a-Service experience to be very interactive for clients who want a high level of engagement,” concludes Kaine. “We can also add a lot of value for clients who are more hands-off and would prefer entrusting us to carry out our mission to protect their organization.”