90%

reduction in IT overhead associated with backup/recovery

Zero

impact to production data with proactive Threat Hunting

20

facilities spanning 3 continents protected by Rubrik Security Cloud

Overview

When it comes to risks and breaches, many people think only in terms of dollars. Iron Mountain Data Centers (IMDC) thinks first about its customers and its reputation for excellence, while also mitigating financial impacts. “Customers trust us to guard their data,” says Zoe Mora, Information Security Senior Manager. “Maintaining that trust is essential.”

IMDC operates a worldwide colocation platform with over 20 facilities across 7 countries, spanning over 3 continents for customers to meet their digital transformation needs. As a part of Iron Mountain Inc., a global leader in secure data and asset management trusted by 95% of the Fortune 1000, IMDC is uniquely positioned to protect, connect, and activate high-value customer data. The company provides industry-leading security and compliance in a rapidly growing market facing more cyberthreats.

Through Rubrik’s innovation, they have been a game changer, taking us beyond a backup solution to a cyber-resilient platform. When you add it all up, partnering with Rubrik makes Iron Mountain Data Centers an even more secure and innovative environment for our customers today and in the foreseeable future.

Belynda Poupard
IT Director

Challenges

  1. Enhance reputation as leading guardian of data from cyberthreats

  2. Cyberattacks evade defenses using social engineering

Results

  1. 90% reduction in IT overhead associated with backup/ recovery

  2. Zero impact to production data with Threat Monitoring and Threat Hunting

  3. Consistent procedures and compliance across data centers

Challenge

PROTECTING AGAINST EVOLVING THREATS

Historically, IMDC took a defensive posture when it came to data security, focused on keeping bad actors out. Given the continually evolving nature of threats, the service provider had ambitious plans to elevate their cyber security platform, future proofing their online security while keeping bad actors out. To thwart them, IMDC needs stronger backup and restore, effective data monitoring to learn how and when someone uses data, and threat hunting to find indicators of data compromise.

“We are not only rethinking how we handle archival backup and restore but also how to use tools like Rubrik to make better use of that data to ensure we are cyber resilient,” says Mora.

Rubrik stood out to IMDC with its metadata and index-based architecture that makes it easy to rapidly adapt to changes in threat vectors. “Rubrik can be quick to market with new tools and features that we can simply turn on and start using,” says Mora. “It’s one of the best-engineered platforms I’ve seen when it comes to speed to market.”

Rubrik Security Cloud now protects all of IMDC’s virtual environments, SQL workloads, Linux, and Windows-based operating systems. Because of its ease of use, stakeholders now take care of their own data, reducing overhead by 90% compared to the company’s legacy platform and freeing IT to innovate on its processes and procedures. “We can apply these efficiencies to other data centers that we operate, shortening time to readiness,” says Bart Hohimer, Systems Architect.

Customers trust us to guard their data. Maintaining that trust is essential.

Zoe Mora
Information Security Senior Manager

Solution   

SUSTAINING A SECURE, DYNAMIC ENVIRONMENT      

Within months of implementing Rubrik Security Cloud as their data security platform, IT enabled Sensitive Data Monitoring, which is now a key enabler of IT’s proactive approach in finding critical sensitive data.

Hohimer notes that sensitive data discovery helps the team educate its user base on proper data security methods. Adds Belynda Poupard, IT Director, “With Sensitive Data Monitoring, we actively seek, find, and remediate sensitive data exposure much quicker than we could before.”

Upwards of 70% of attacks now incorporate a social engineering component, according to Mora. These attacks bypass external controls by tricking unsuspecting users unless users recognize and report that they’re being attacked. IMDC was looking to further enhance their systems to track and prevent social engineering schemes and found the right solution with Rubrik Threat Hunting for data threat analysis. “What I love about Threat Hunting is that it doesn’t impact production or notify anyone,” says Mora. “I can collect all the evidence and the threat actor is never aware that it’s happening.” 

Rubrik helped fill in other critical gaps in Iron Mountain Data Centers’ legacy toolset, providing data immutability, Anomaly Detection, and Threat Monitoring. Together, these support tighter lockdown for backups, data analysis to find indicators of ransomware or compromise, and surgical recovery to accelerate time to repair for complete cyber resilience.

With Rubrik Security Cloud as a global platform, all of Iron Mountain’s data centers share the benefits of stronger backup and recovery, and IMDC complies with all rules and regulations for regions around the world. “Rubrik has been an exceptional partner,” says Poupard. “Through their innovation, they have been a game changer, taking us beyond a backup solution to a cyber-resilient platform. When you add it all up, partnering with Rubrik makes Iron Mountain Data Centers an even more secure and innovative environment for our customers today and in the foreseeable future.”