Case Study: RONA boosts threat detection and response with Expel

How RONA’s New Approach Boosted Threat Detection and Response

RONA, a major North American hardware and home improvement retailer, faced significant challenges with its security information and event management (SIEM) system. Their SIEM-centric strategy was costly, inefficient, and resulted in alert fatigue, making it difficult to detect and respond to threats quickly. The company needed a more proactive, automated solution to meet its goal of neutralizing threats within 20 minutes without the time or budget to build a 24/7 internal security operations center (SOC).

The company implemented Expel's Managed Detection and Response (MDR) service and Expel Phishing. The tech-agnostic platform integrated with RONA’s existing security stack via APIs, using automation and community-sourced telemetry to filter noise and provide real-time, contextualized alerts. This allowed RONA to reduce its SIEM log ingestion by 75%, cutting costs. Expel triaged 43 million events, escalating only 20 genuine incidents for RONA to handle, and enabled the team to achieve its target of resolving issues in under 20 minutes.

RONA

Patrick Gilbert

Senior Director, Information Security