The Problem: Held Back from Scaling MSSP Operations Due to Fragmented Toolset

RSM US, a globally recognized MSSP, protects hundreds of enterprise and mid-market clients. To maintain their high level of service in the face of escalating threats, RSM needed to scale their managed SOC operations — without simply hiring more people to do more things. Instead, they wanted to gain efficiencies by consolidating their existing tools and orchestrating and automating workflows.

Time wasted on tool hopping: RSM had experimented with security automation before, both from third-party vendors and by building their own tools in-house — however, none of the solutions were as seamless as they needed them to be. Analysts frequently had to jump back and forth between multiple tools as they followed through on incidents. Todd Willoughby, Director at RSM Defense, shared that they were “looking for something a bit more turnkey for our team that we could use to scale operations.”

Client onboarding inefficiencies ate into margins: RSM was spending 75+ hours per month and hundreds of thousands of dollars per year onboarding new clients, which cut into their margins. Improving the efficiency of client onboarding was a chief priority for their MSSP operations.

The Solution: Empowering RSM Defense with Hyperautomation

RSM conducted a series of proof of concepts (POCs) and chose Torq due to its scalable architecture and disruptive Hyperautomation capabilities. To strengthen their world-class cybersecurity protection for their clients, RSM standardized on Torq HyperSOC™ across their RSM Defense managed SOC, launching over 200 customers in just three weeks during the migration. With Torq, RSM has streamlined investigations and triage and reduced manual analyst workloads, enabling their team to focus on strategic initiatives for clients.

Simplifying security automation: Efficiency was the name of the game for RSM and they wanted to avoid expensive, specialized hires to build security automations. This made Torq’s drag-and-drop workflows and ease of connecting tools without having to write code a game changer for RSM.

Speeding up SOC responses: Torq HyperSOC automates 82% of all of RSM’s managed SOC cases — which means thousands of fewer cases for their analysts to handle each month. HyperSOC streamlines investigation and escalation processes and enables RSM’s SOC team to focus on accelerating resolution for high-priority cases — ensuring clients receive swift and effective protection.

Optimizing existing investments: Torq’s orchestration capabilities allowed RSM to integrate their stack and amplify their existing security ecosystem. For example, they built fluid automations between platforms like SentinelOne, Stellar Cyber, and Intezer to achieve outcomes like automatically updating cases and tickets, facilitating deeper investigations, and delivering client feedback directly out of the Torq platform.

Together, Torq and RSM US are revolutionizing managed SOC services with an innovative Hyperautomation approach that allows them to scale with more clients and a lean team, while enhancing their clients’ security postures.