How RedLegg Helped Randa Strengthen Security Operations with Managed SIEM

Case Study · APPAREL & CONSUMER GOODS 

Randa Apparel & Accessories partnered with RedLegg to establish a more structured security program, expand threat monitoring, and strengthen incident response through Managed SIEM and 24/7 security operations support. 
Executive Summary

Building a More Proactive Security Program with Managed SIEM 

Randa Apparel & Accessories (RAA) manages a global portfolio of more than 40 brands across the apparel and lifestyle accessories industry. With a large international operation, the organization needed security capabilities that could support its growing business and evolving operational requirements.

Before partnering with RedLegg, Randa operated in a largely reactive IT environment, with limited SIEM coverage and security processes that relied on ad hoc measures. Establishing a more structured security program became a priority.

RedLegg helped Randa strengthen its security operations through Managed Detection and Response (MDR) with Managed SIEM, providing dedicated security monitoring, customized detection logic, and access to Cyberfusion analysts operating around the clock.

The engagement also introduced dedicated platform engineering, playbook-driven threat analysis, and real-time reporting to improve visibility and support more consistent investigation and escalation processes.

Through ongoing collaboration, RedLegg became an extension of Randa's internal security team, supporting its transition toward a more proactive and coordinated approach to cybersecurity.

oaTZJJZsiVOmripzKWEkVicTi0YoStpR_jx3luh9ZIetmkQkgo5GEPtii2DEB7OHeCy5Y9ovepqnSC7RtwxxbGNTywYdeLEZzJR6mwgSr4BfuRwcIzX5IldP_vtne_yx1QFLsJ51etoLo2_HKpyKJaTV3ilaSsWcJDKoe0SQXRQpZ8VqJIIUlaJxXJA4emjg
THE CHALLENGE

Randa's security environment relied heavily on reactive processes and ad hoc measures. Without comprehensive SIEM coverage, the organization needed a more consistent approach to security monitoring, threat detection, and incident management.

As its business operations continued to grow, Randa recognized the need to centralize IT processes and establish a formal security program that could provide greater visibility across its infrastructure.

The organization identified three primary challenges: limited SIEM coverage, a reactive security environment, and the need to standardize processes across teams.

Addressing these gaps required dedicated expertise, continuous monitoring, and a coordinated security operations model that could support the internal team.

WHY REDLEGG

Randa Apparel & Accessories had an established relationship with RedLegg through previous collaboration. As its existing SIEM/SOC contract approached expiration, Randa sought a security partner that could provide specialized expertise, continuous monitoring, and support for a more structured security program.

Robert Black, Randa's SVP/CIO, had worked with RedLegg previously and valued its collaborative approach. RedLegg was positioned to work alongside Randa's internal team, providing the expertise and operational support needed to strengthen security operations.

As Robert Black explained:

“I look for partners, I don't just look for vendors.”

SOLUTION / AUTOMATION WORKFLOW

RedLegg helped Randa establish a more structured security operations model through MDR with Managed SIEM. A dedicated SIEM platform collects and analyzes security data across Randa's IT infrastructure, while RedLegg's Cyberfusion analysts provide continuous monitoring and threat analysis.

The engagement included customized detection logic, playbook-driven investigations, dedicated platform engineering, and real-time security reporting. These capabilities strengthened Randa's visibility into potential threats and supported more consistent investigation and escalation processes.

Ongoing collaboration between RedLegg and Randa's internal team helped align security operations with evolving business requirements.

DATA INGESTION
Security data is collected and analyzed through Randa's dedicated SIEM platform. 
 24/7 MONITORING
Cyberfusion analysts provide continuous monitoring across Randa's security environment. 
THREAT DETECTION 

Customized detection logic helps identify potential security threats. 

THREAT ANALYSIS & RESPONSE 

Playbook-driven processes support investigations and incident escalation. 


REPORTING & VISIBILITY 
Real-time dashboards and reports provide insight into security performance and posture. 
“
“We were much more of a reactive, hair-on-fire, chaotic environment before. Now we're trying to be more of a proactive, planned, and thoughtful kind of approach.” 
ROBERT BLACK
SVP/CIO, Randa Apparel & Accessories 
IMPLEMENTATION 

RedLegg and Randa coordinated onboarding and implementation through direct collaboration between RedLegg's Platform Management Team and Randa's internal engineering resources.

Robert Black facilitated the necessary connections while remaining relatively hands-off during integration, reflecting the level of coordination between both teams.

The transition established a foundation for ongoing monitoring, platform management, and security operations support.

THE BENEFITS

Through Managed SIEM and SOC services, Randa gained access to continuous security monitoring, specialized analysts, and dedicated platform engineering expertise.

Customized detection logic and playbook-driven threat analysis strengthened the organization's ability to investigate and escalate potential security events.

Real-time dashboards and reporting also improved visibility into security performance and posture, supporting a more structured approach to security management.

HOW IT WAS DELIVERED

CUSTOMIZED DETECTION LOGIC

Developed with RedLegg's Cyber Threat Intelligence expertise supports the identification of potential security threats. 

DEDICATED PLATFORM ENGINEERING

Provide technical expertise and ongoing support for Randa's security infrastructure. .

PLAYBOOK-DRIVENTHREAT ANALYSIS

Playbook-driven processes support customized investigations, incident escalation, and consistent security response procedures. 
“
“It was so smooth and went so well, I can't even really outline it for you.” 
ROBERT BLACK
SVP/CIO, Randa Apparel & Accessories 
CONCLUSION

RedLegg's partnership with Randa has supported the organization's transition from a reactive IT environment toward a more proactive and structured security program.

Through Managed SIEM and SOC services, Randa strengthened its monitoring and response capabilities while gaining access to dedicated analysts, platform engineering, customized detection logic, and security automation.

The engagement also improved visibility across the security environment through real-time reporting and established more consistent investigation and escalation processes.

As Randa continues to develop its security program, RedLegg remains an extension of its internal team, providing specialized expertise and operational support.

IMPACT
  • Structured Security Operations: Supported Randa's transition from reactive processes to a more proactive and coordinated security program. 
  • Continuous Security Monitoring: Established 24/7 monitoring through RedLegg's Cyberfusion analysts. 
  • Customized Threat Detection: Implemented tailored detection logic to strengthen threat identification and monitoring. 
  • Extended Security Expertise: Provided dedicated analysts and platform engineers to support Randa's internal team. 
  • Improved Security Visibility: Delivered real-time dashboards and reporting to provide insight into security performance and posture. 
  • Consistent Incident Response: Introduced playbook-driven processes to support threat analysis, investigations, and escalation procedures. 
“
“I look for partners, I don't just look for vendors.” 
ROBERT BLACK 
SVP/CIO, Randa Apparel & Accessories 
CASE STUDIES

More stories from RedLegg clients

manufactura
Case Study
Scaling Security Automation Across Enterprise Operations 

See how RedLegg helped Albemarle streamline security workflows, reduce manual effort, and improve operational efficiency through XSOAR automation. 

Read Now
next arrow
images (6)
Case Study
Building a Security Operations Center for an International Law Firm 

See how RedLegg helped an international law firm build its Security Operations Center (SOC) with SIEM services and specialized security expertise. 

Read Now
next arrow
Union
Case Study
Building a Security Operations Center with SIEM

See how RedLegg helped an international law firm build its SOC and strengthen security operations with SIEM expertise.

Read Now
next arrow