About Molecule to Medicine
Molecule to Medicine is a forward-thinking biotechnology group advancing life-saving research using cloud technolgies together with laboratory best practices. As their infrastructure grew more complex within their extensive cloud deployments, they recognized the critical need for comprehensive security oversight and continuous compliance monitoring to protect their valuable research data and maintain regulatory adherence.
The Challenge
Molecule to Medicine faced several critical security and compliance challenges as they scaled their biotechnology research operations:
- Limited visibility across their Amazon Web Services cloud estate
- No centralized security posture management to identify misconfigurations and vulnerabilities
- Lack of continuous compliance monitoring for Cyber Essentials, GDPR and ISO 27001 requirements
- Difficulty tracking identity and access management across multiple cloud accounts
- No strategic cyber security leadership to guide security initiatives and respond to emerging threats
- Manual security reviews consuming valuable time and resources
The Solution: Horizon360 Deployment
skyPurple Cloud deployed our Orca Security managed security service, providing enterprise-grade protection tailored for regulated life sciences organisations:
1. Cloud Security Posture Management (CSPM)
Implemented continuous monitoring across multiple un-managed AWS accounts to identify misconfigurations, compliance drift, and security vulnerabilities in real-time.
- • Automated scanning of all cloud resources and services
- • Real-time alerts for security misconfigurations
- • Prioritized remediation guidance based on risk severity
- • Integration with existing DevOps workflows
2. Identity & Access Management (IAM) Monitoring
Deployed comprehensive IAM oversight to track user permissions, detect privilege escalation, and enforce least-privilege access principles across all platforms.
- • Continuous monitoring of user permissions and roles
- • Anomaly detection for suspicious access patterns
- • Automated alerts for privilege escalation attempts
- • Regular access reviews and permission optimization
3. Attack Surface Monitoring
Implemented external scanning of public-facing assets to identify exposed services, open ports, and potential vulnerabilities before attackers could exploit them.
- • Continuous external attack surface discovery
- • Vulnerability scanning and threat assessment
- • SSL/TLS certificate monitoring and validation
- • Shadow IT discovery and remediation
4. vCISO Reporting & Strategic Guidance
Provided ongoing virtual Chief Information Security Officer (vCISO) services, delivering executive-level security reporting and strategic cyber security direction.
- • Monthly executive security reports for board presentations
- • Compliance framework mapping (SOC 2, HIPAA, ISO 27001)
- • Strategic security roadmap development
- • Incident response planning and guidance
- • Audit preparation and evidence collection
5. Future Phase - Dark Web & Phishing Defence
Establish continuous monitoring of dark web forums and phishing campaigns targeting the organisation and its employees.
- • Dark web monitoring for leaked credentials
- • Phishing campaign detection and alerting
- • Brand impersonation tracking
- • Employee credential compromise notifications
Implementation Approach
Phase 1: Discovery & Assessment (Week 1-2)
Conducted comprehensive security assessment across all cloud accounts, identifying existing vulnerabilities, compliance gaps, and priority areas for immediate remediation.
Phase 2: Deployment & Configuration (Week 2-4)
Deployed Orca Security monitoring infrastructure across all AWS accounts on day 1 - with customized rules, alert thresholds, and compliance frameworks tailored to biotechnology requirements.
Phase 3: Optimization & Training (Week 4-6)
Fine-tuned monitoring rules, trained internal teams on security dashboards and reporting, and established ongoing communication channels for security guidance.
Results & Ongoing Impact
Ongoing Services & Support
skyPurple Cloud continues to provide Molecule to Medicine with comprehensive managed security services through:
- Monthly security reports and compliance status updates
- Quarterly security reviews and risk assessments
- Continuous monitoring and threat detection
- Incident response support and guidance
- Security awareness training for staff
- Regular security roadmap updates and strategic planning
Conclusion
The deployment of Orca Security for Molecule to Medicine demonstrates how comprehensive, managed cloud security services can transform an organisation's security posture without the overhead of building internal security operations capabilities.
By combining advanced security technology from partners like Orca Security with expert vCISO guidance and continuous monitoring, skyPurple Cloud has enabled Molecule to Medicine to maintain enterprise-grade security across their multi-cloud estate while focusing their resources on advancing life-saving biotechnology research. This ongoing partnership exemplifies how the right security partner can provide both technical excellence and strategic guidance for regulated industries.