How a global software company rebuilds travel risk management around the intelligence it trusts

Customer

A global software company, with a workforce of around 5,000 employees spread across multiple continents, needed to protect a highly mobile, travel-dependent workforce. Engineers, commercial teams and leadership move constantly between offices, customer sites and events worldwide, which places a premium on knowing where people are, understanding the risks they face, and acting quickly when something changes.

Duty of care at this scale depends on two things: a travel risk management platform the security team can operate with confidence, and threat intelligence they actually trust. When those two things are bundled together and can't be separated, a weakness in one becomes a weakness in the whole programme.

Impact at a glance

5,000 — Employees protected through a single travel risk management platform

Intelligence, decoupled — The threat intelligence layer separated from the platform, so the team could choose the provider that fits their risk

MAX Security, plugged in — Best-fit intelligence integrated directly into resilienceOS and mapped to people, sites and journeys

No lock-in — Freedom to switch or combine intelligence providers in future without rebuilding the platform

The challenge

The company was already running travel risk management on AlertMedia. The platform did the job of managing travel, but the security team wasn't satisfied with the part that mattered most to them: the alerting and the threat intelligence. The signal wasn't sharp enough for their operational footprint, and the team wanted intelligence with more depth and relevance to the specific risks their people faced.

They had a clear answer to that problem. MAX Security's intelligence and alerting were a much better fit for how the organisation operated and the regions its people travelled through. The team wanted to move to it.

But they hit the wall that catches out most organisations at this point. Their intelligence and their platform were the same product. In a closed model, the feed comes bundled with the software, so changing the intelligence provider means changing the entire platform - re-procuring, re-implementing and re-training around a new system, purely to get a different source of intelligence.

The company didn't want to rip out and replace their travel risk management programme every time their intelligence needs changed. They needed a platform built around a simple principle: the intelligence layer should be theirs to choose, and to change.

The solution

The company selected the combined Restrata and MAX Security offering: resilienceOS as the open travel risk management and operational platform, with MAX Security's intelligence plugged directly into it.

This solved the problem at its root. resilienceOS is open by design and threat-intelligence agnostic, so the team could bring the intelligence they had already decided they wanted - MAX Security - into a platform purpose-built to make that intelligence operationally useful. Rather than consuming alerts in isolation, MAX Security's intelligence is continuously mapped against the company's people, sites and journeys, so the team sees not just that a threat exists, but whether it matters to their operation and who is affected.

Just as importantly, the decision no longer had to be permanent. Because the platform and the intelligence are decoupled, the company retained the freedom to adjust, add or switch providers as their needs evolve - without rebuilding their travel risk management programme each time.

Restrata solved the platform problem so the company could focus on the intelligence decision.

Threat intelligence, open by design

Threat intelligence only becomes valuable when it's connected to the operation. Most platforms lock organisations into their own feed, which is exactly the constraint this company had run into. resilienceOS works differently: it integrates intelligence from the world's leading providers and continuously maps it against people, assets, sites and journeys, giving the security team confidence in what matters, who is affected, and what action to take next.

For this customer, that meant MAX Security's intelligence flowing into a single operational picture. Alerts are normalised and cross-referenced against travellers and sites using Restrata's Location Confidence engine, which combines travel data, mobile location, site access and operational assignments to build an accurate picture of workforce exposure — rather than relying on a single location source.

The principle underneath it is freedom of choice. Restrata doesn't believe any single intelligence provider has all the answers. Different providers excel in different regions, threat categories and operational environments, and the right provider depends on the organisation, its footprint and the risks it faces. resilienceOS gives teams the flexibility to choose the intelligence that's right for them today - a single provider, or several combined - and to change that choice as their needs evolve, without switching platforms.

That flexibility is the difference. This company chose MAX Security because it was the right fit for them now. Should that ever change, the platform doesn't. The intelligence is theirs to switch; the operational picture stays intact.

The outcome

The company now runs its travel risk management on a platform where the intelligence is theirs to choose, and MAX Security's alerting and analysis - the intelligence the team actually wanted - is fully integrated and mapped to their workforce.

When an alert fires, the security team can see exactly who is affected across their 5,000 people, understand their exposure, and act, all within one environment. The programme is no longer hostage to a single vendor's feed, and the team has removed the risk that a future change in intelligence needs would force another full platform migration.

Most importantly, the organisation has replaced a closed, bundled model with an open one. Its travel risk management platform and its threat intelligence are now two decisions instead of one - and both can move independently as the world, and the company's needs, change.

Want to modernise your global security operations? Talk to us and see how resilienceOS can transform your operations. Book a meeting with one of our specialists.