Case Study: Sir Robert McAlpine achieves a modern, streamlined third‑party information security program with Panorays

SRM Builds a Modern Third-Party Vendor Information Security Program, Raising the Bar for the UK Construction Industry

Sir Robert McAlpine (SRM), a 150‑year‑old UK construction and civil engineering firm, needed to modernize its approach to supply‑chain information security as cloud use and digital threats grew. To address gaps in third‑party security oversight and custodianship of SRM data, the company selected Panorays and its SaaS third‑party security risk management platform to provide automated assessments, external attack surface scanning and vendor questionnaires.

Panorays gave SRM continuous, business‑contextual visibility into vendor posture, plus notifications, web and dark‑web monitoring, self‑assessment workflows and external footprint scanning to drive remediation and regulatory compliance. The platform streamlined collaboration and reporting, and within three months SRM had uploaded more than 60 vendors, accelerating approvals and helping turn third‑party security from an IT task into an enabler for the business.

Sir Robert McAlpine

Andy Black

Head of Compliance & Information Security