Global Pharmaceutical Company Transforms Insider Risk with High Fidelity Metadata

Industry

Pharmaceutical

Company Size

50,000+ employees

Location

Global

Solution

Protecting IP without stifling employee innovation and productivity, DTEX data provides behavioral context and a complete forensic audit trail for proactive insider risk management.

Key Results
  • Prioritized data protection
  • Improved context around employee-data interactions
  • Pharma-specific insider risk use cases
  • Security that supports innovation

A global pharmaceutical company, which employs more than 50,000 people, required a robust solution for protecting highly sensitive IP, including medical formulas, patient data, and promising scientific research.

Proactive insider risk management is critical to protecting sensitive IP from non-malicious, malicious, and compromised users. At the time of engaging with DTEX, the company was seeking to elevate its insider risk capability through a fully-fledged program and required a technology that would enable early insider risk mitigation without stifling employee innovation.


As a provider of life-changing medicines, this pharmaceutical company needed to strike the balance between security and innovation. Generative AI tools were showing much potential for employee productivity but were also introducing significant risk of data loss. The company needed to build a use case for managing this risk. This required an understanding of the context surrounding employee behavior, data movement, and application usage at a level that their existing DLP simply couldn’t provide. 

In an industry that is constantly innovating, the company needed a smarter and more robust way of detecting insider risk — quickly, easily, and at scale. They knew already that DLP is not the same as insider risk management. As a global enterprise driven by innovation, the organization was juggling 100s of research projects at the same time, and constantly updating DLP rules to identify sensitive data via keywords, which was neither sufficient nor sustainable.


Following a Proof of Value (PoV) exercise with DTEX, the company quickly saw how the DTEX Platform delivered enterprise-wide visibility across selected users in less than 24 hours, returned contextual behavioral intelligence and data usage in three days, and offered intent analysis of potential insider risks and negligent data users by the end of the first week.


The platform’s rapid deployment and enterprise-wide scalability were identified as key differentiators as well as its ability to selectively gather contextual intent telemetry from users with elevated risk scores based on data usage while leveraging pseudonymization for other, low-risk users.

The unique telemetry signals from the DTEX Platform have also enriched the company’s existing SIEM and NGAV tools by helping to reduce false positives and provide a complete forensic audit trail that supplements machine signals (TTPs) with human behaviors that lead to increased risk before, during, and after an event.

 Most importantly, the company can now identify and mitigate insider risk, proactively, in a way that does not get in the way of their ability to innovate and deliver for better patient outcomes.


  • Prioritized protection for the data that matters most: DTEX file lineage helped the organization understand which data was at greatest risk and which users or locations were creating the most exposure. This shifts the team away from broad, manual classification efforts and toward a more risk-based approach to protecting high-value IP.
  • Better context around employee-data interactions: By showing how people, applications, locations, and files interact, DTEX gave the insider risk team a clearer view of behavior surrounding sensitive data. This context helps distinguish routine business activity from actions that may signal negligence, misuse, or intent.
  • Support for pharma-specific insider risk use cases: The platform’s combination of out-of-the-box rules and customizable detection logic helped address use cases tied to IP theft, work-from-home risk, nation-state infiltration, and credential misuse. This gave the company flexibility to align insider risk detection with the realities of a global pharmaceutical environment.
  • Security that supports innovation instead of slowing it down: The company needed to protect medical formulas, patient data, and scientific research while still enabling productivity and responsible innovation. DTEX helped create a more balanced insider risk program by giving the team the behavioral intelligence needed to manage risk without over-restricting employees.

By leveraging the DTEX Platform, the pharmaceutical company was able to fill the technological gaps and transform its insider risk program. The company now enjoys 360-degree visibility around employee-data interactions, giving their insider risk team the privilege of time to identify and mitigate risk early to prevent IP loss occurring in the first place.

Ready to Learn More?