EY US partners with CrowdStrike to modernise cyber operations

EY US has chosen CrowdStrike Falcon Next-Gen SIEM as the platform for its global cybersecurity managed services.

By adopting Falcon Next-Gen SIEM as its foundation, EY US aims to facilitate client migrations away from legacy Security Information and Event Management (SIEM) solutions, with a focus on supporting enterprises to modernise their security operations and respond to contemporary cyber threats more effectively.

Collaboration rationale

The transition is partly driven by the emergence of faster, AI-powered threats that are challenging to combat with older SIEM systems. According to statements from both organisations, the new platform will combine CrowdStrike's AI-native capabilities with EY US's managed services to deliver improved and swifter cybersecurity outcomes.

The companies highlight several key benefits for clients. One of these is what they describe as 'accelerated migration', with EY US professionals assisting enterprises in moving off legacy SIEM technology and realising increased efficiencies, including search speeds up to 150% faster than previous systems.

Additionally, Falcon Next-Gen SIEM brings together data from across the platform, third-party integrations, real-time threat intelligence, and automation powered by artificial intelligence. This unified approach aims to enhance enterprise-wide visibility, and boost detection and response times to security incidents.

EY's perspective

"Our clients need security that's faster, simpler and more effective," said Tapan Shah, EY Global and Americas Cybersecurity Managed Services Leader. "With EY US as the first mover in building our cyber managed services on Falcon Next-Gen SIEM, we see this as more than a technology upgrade - it's a strategic move to embrace AI security operations. EY US teams bring deep sector and AI experience, delivering high-impact cybersecurity outcomes that improve operations and efficiency across the enterprise."

Modern security operations

In addition to technological improvements, the partnership is expected to facilitate what EY refers to as a next-generation operating model. This model is designed to help clients derive greater value from data, reducing their operational overheads and increasing cost predictability while supporting accelerated adoption of AI-driven tools.

EY's global Security Operations Centre (SOC) experience underpins the managed services, designed to bolster both cyber and operational resilience for clients around the world. This includes 24/7 advanced defence capabilities across 160 countries, with offerings such as reduction of attack surface exposure, protection of digital identities, and ongoing cyber risk management.

As part of the arrangement, CrowdStrike's approach of consolidating data onto a single platform is intended to offer comprehensive visibility at scale, while managing the costs and complexity typically associated with older solutions.

CrowdStrike's view

"The agentic era is accelerating everything, and legacy SIEMs simply can't cope with threat landscape realities as well as enterprise data proliferation," said Daniel Bernard, Chief Business Officer at CrowdStrike. "By making Falcon Next-Gen SIEM the foundation of EY US global managed services, we're helping clients modernize faster and achieve outcomes legacy tools could never deliver."

Data consolidation and next steps

By standardising its managed services globally on Falcon Next-Gen SIEM, EY will utilise the system for both security and non-security data, a shift that the company hopes will supply clients with protection that is both timely and broad in scope.

The move is further supported by CrowdStrike's recent acquisition of Onum, a real-time data pipeline platform, expected to strengthen the Next-Gen SIEM's data processing capabilities.