How StepChange Improved Cybersecurity with ANS’s Managed SOC Service
Background
StepChange is a debt advice charity focused on helping people access support when they need it most. As more clients use digital channels to seek advice and guidance, the organisation’s ability to keep services secure, trusted and available has become central to its long-term strategy.
Its 2030 strategy depends on building a resilient digital service that can support greater accessibility while protecting sensitive client data. For StepChange, cybersecurity is fundamental to maintaining trust with people who rely on its services during difficult financial circumstances.
“A 24/7/365 Security Operations Centre (SOC) plays a critical role in supporting StepChange’s 2030 strategy, particularly around building a resilient, secure and trusted digital service for our clients.”
Stephen Curtis-Spence, Cyber Security Manager, StepChange
Challenge
As StepChange expanded its digital channels, the organisation needed to strengthen its ability to monitor, detect and respond to cyber threats around the clock. Maintaining service availability was essential, but scaling internal security operations to provide continuous coverage would have placed additional pressure on internal teams.
The charity wanted to move from a more reactive position to a proactive security model. That meant improving visibility across critical systems, reducing alert noise, prioritising genuine threats and keeping pace with a cyber threat landscape that continues to evolve.
“For us, the business need was clear: protect client data, support secure digital growth, maintain operational resilience and align with regulatory and compliance obligations.”
Stephen Curtis-Spence, Cyber Security Manager, StepChange
Solution
StepChange selected ANS to provide a managed Security Operations Centre service aligned to its environment, risk profile and long-term digital strategy. ANS worked with StepChange to refine detection rules, improve processes and adapt the service as the charity’s requirements evolved.
ANS delivered continuous security monitoring and alerting, advanced threat detection and correlation, incident response support, and tailored detection controls designed around StepChange’s operational needs. This gave the organisation an always-on security capability without requiring a significant increase in internal headcount.
“ANS took the time to understand our environment and requirements, worked closely with us to refine detection rules and processes, and adapted the service as our needs evolved. This partnership approach has been key to successfully embedding the service.”
Stephen Curtis-Spence, Cyber Security Manager, StepChange
Outcomes
With the ANS SOC service in place, StepChange has strengthened its ability to identify, prioritise and respond to threats. The organisation now has greater visibility across its estate, stronger detection capability and increased confidence in its overall security posture.
The security and operational benefits include improved detection capability, faster identification and response to threats, greater visibility of security events across the estate, reduced risk exposure and increased confidence in our security posture.
These improvements directly support StepChange’s ability to provide safe, uninterrupted services to clients. The service also enables the charity to support digital transformation initiatives with a stronger security foundation, giving teams actionable insight into security trends and risks.
“With the ANS SOC service in place, we are now able to detect and respond to threats in near real-time, maintain 24/7 security coverage without significantly increasing internal headcount, and continuously improve detection through evolving use cases.”
Stephen Curtis-Spence, Cyber Security Manager, StepChange
