Case Study — Organizational Risk 2023
TopoONE by Crisis24 Increases the Efficiency of GSOC Operations at McKesson
Proprietary critical event management platform enables quicker analysis and response to threats.
Situational Analysis
Meeting its duty of care obligation for over 80,000 employees while ensuring business continuity at its 30+ distribution centers throughout 14 countries is no easy task for McKesson – the ninth largest US-based corporation. To stay competitive and meet its obligations, McKesson’s global security team established a global security operations center (GSOC) to provide a complete view of its potential risks.
McKesson’s global security team evaluates a significant volume of incoming risk events, and over time they acquired many different monitoring systems. Each system functioned as a silo, and the GSOC team had difficulty monitoring numerous screens, maps, and reports. While managing dozens of incompatible systems, the global security team was overwhelmed with data that often hindered timely responses to risk events. High-value actionable data was being commingled with less critical data with little or no strategic protection impact.
Frustrated by the situation, the team searched for a solution to automate tasks and unify its data and various interfaces into a single lens, enabling quicker analysis and response.
Enabling Successful Security Operations
Requirements
McKesson required a way to aggregate the geospatial risk data into one visible map where all team members at the GSOC could view threatening conditions and events in proximity to McKesson assets in real time and triage them using a typical workflow for improved, just-in-time, situational risk intelligence. Additionally, the security team wanted to:
- Access to video camera feeds from all facilities
- Associate all alerts in context to the locations of facilities and travelers
- Customized McKesson activity log templates
- Process the alerts via a dashboard or a map view
- Define KPIs and automatically generate reports to measure team performance against those KPIs
- Generate activity reports by shift, day, week, month, etc.
- Measure risk by asset type and location
- Automatically generate customized reports
- Experience 99.9% uptime
- Have a flexible platform that makes adding new system connections easy and streamlined
TopoONE Platform Enables Effective GSOC Operations
McKesson selected TopoONE because of its robust visualization tools, customizable workflows, streamlined communication, automation features, and insightful analytics. Integrating the multiple alerting systems into one standard map and workflow system enabled the GSOC team to simultaneously monitor all potential risk conditions and events and identify actual threats. Faster risk recognition and communications allow analysts to integrate their analysis into email and communications systems - no more cutting and pasting from various platforms. And the analyst team now has one consistent workflow for rapidly triaging new events.
Systems now scale to enable protective oversight of 6,000 local and international protectees and $8B of fixed and in-motion assets. Management now has robust analytics for better workforce management and more informative executive briefings.
Outcomes
- McKesson analysts estimate a 50% reduction in the time needed for tasks related to SOPs (e.g., communication, documentation, reporting, etc.).
- People and asset protection leadership report a 20% confidence gain for mission assurance.
- Efficiencies gained have increased GSOC Analyst capacity by 30%
- GSOC analysts’ response time has significantly decreased and becomes more uniform day-to-day.
- When the Topo.AI platform was implemented, multi-hour average response times were commonplace, and only 47% of alerts received a response within 20 minutes. Three months later: the average daily response time is only 6:20, and 94% of alerts receive a response within 20 minutes.
- McKesson’s confidence in its ability to assess, prevent, respond, and recover from threats and risks went from a 5 to a 7 out of 10
From Our Client
“Trust is a huge factor, and I felt, from the start, that the TopoONE team would do what they said they would do – and they have delivered above expectations. The ability of TopoONE to create operational efficiencies for McKesson Security Operations has been huge.”
Ed Shubert
Vice President, Global Security Operations Center
Investigations & Crisis Management Program
McKesson