Rapid7 > Case Studies > Domino’s Pizza Enhances Security Operations with Rapid7's Detection and Response Workshop

Domino’s Pizza Enhances Security Operations with Rapid7's Detection and Response Workshop

Technology Category

Cybersecurity & Privacy - Intrusion Detection
Sensors - Temperature Sensors

Applicable Industries

E-Commerce
Retail

Applicable Functions

Logistics & Transportation
Product Research & Development

Use Cases

Cybersecurity
Tamper Detection

Services

Cybersecurity Services
Training

About The Customer

Domino’s Pizza is the largest pizza company in the world, with a significant business in both delivery and carryout pizza. It ranks among the world’s top public restaurant brands with a global presence of more than 18,300 stores in 90 countries across five continents. The company's Technology department supports its e-commerce, point-of-sale, and franchise reporting systems. Its information security team is composed of policy-minded professionals, compliance experts, and technical pros with a hacker mentality, working together to protect the entire business from attack by implementing and maintaining the most advanced security technology in the industry.

The Challenge

Domino’s Pizza, the world's largest pizza company, relies heavily on technology for its online ordering and delivery services. The company's security operations center operates 24/7, and one of the biggest security challenges they face is phishing. Spear phishing, in particular, is a significant threat due to the craftiness of threat actors. The company also has a wide attack surface due to its domestic and international markets, making threat hunting a critical task. The company wanted to train its security operations center (SOC) analysts to think like attackers, as many analysts focus solely on detection and response and lack understanding of the tactics used by attackers.

The Solution

Domino’s partnered with Rapid7 to conduct real-world team assessments and develop a new Detection and Response Workshop. This workshop, led by expert incident response consultants, is designed to test detection capabilities and provide hands-on training for defenders, helping analysts identify and investigate attacker activity within their existing toolset. Domino’s analysts were taken out of the SOC and paired with Rapid7 security professionals to learn about new attack scenarios from real-world cases. The goal of this partnership was to add value by delivering a solution on business terms, with Rapid7 understanding Domino’s environment and taking into consideration their principal assets and biggest centers of revenue generation.

Operational Impact

The Rapid7 Detection and Response Workshop provided Domino’s analysts with an immersive experience, allowing them to focus on learning in their own environment using tools they were already familiar with. The workshop catered to varying skill sets, providing new insights for both beginners and experienced analysts. The workshop also helped Domino’s develop a continuous model of content development and refinement, filtering noise to produce actionable items. The analysts gained a more holistic view of the content in their environment, and the company walked away with more takeaways than initially expected, learning things about their program that they were previously unaware of.