Story
Xcel Energy Brings Endpoint Detection onto CyberArk
Xcel Energy, a utilities organization in the United States, uses Identity Security from CyberArk to support security operations for SOC analysts.
Xcel Energy uses Identity Security to see host activity in one console instead of waiting on local logs.
“Utilities work at Xcel Energy spans more than one site, even when headquarters sits in the United States.”
“SOC analysts asked for a shared way to run security operations without freezing local judgment.”
Independent write-up. Figures come from public sources or are illustrative.
Value results
| Category | Value result |
|---|---|
| Risk and compliance | Security operations stays visible to adjacent teams through Identity Security |
| Risk and compliance | SOC analysts work from the same Identity Security record for endpoint detection |
| Capability | Endpoint detection can be reviewed without waiting on a personal export |
Story
Utilities work at Xcel Energy spans more than one site, even when headquarters sits in the United States. Endpoint detection was splitting across regional habits. SOC analysts asked for a shared way to run security operations without freezing local judgment.
CyberArk (Identity Security) is what they standardized on. CyberArk focuses on privileged access and identity security so organizations can control high-risk credentials and machine identities. Xcel Energy uses it as the system of record for endpoint detection, with SOC analysts as the primary operators and other groups coming in through the same queue.
Leaders get a picture they can actually walk. Teams get fewer mystery statuses. The story is about operating change, not an unpublished percentage.