What challenges did WTW face before AI implementation?

Increasingly sophisticated cyber threats from nation-state actors and organized crime. Complex regulatory environment (UK CP 26/23, DORA Act, FSB toolkit) adds compliance burden. Third-party and supply chain risks (e.g., SolarWinds attack). Talent shortages and the need for faster detection and automated response. Difficulty correlating signals across multi-vendor, multi-cloud environments.

What was the impact of the AI solution?

Enhanced threat detection speed and accuracy (AI-driven). Increased compliance and reduced incident reporting times. Reduced operational risk and supply chain vulnerabilities. Improved efficiency for security analysts and incident responders.

Source

MicrosoftLive sourceProductionEvidence: Medium50/100

Financial Firms Strengthen Cyber Resilience Amid New Regulations

Use case typeRisk assessmentUpdated Jun 13, 2026

UK financial services firms are increasingly targeted by sophisticated cyber threats while responding to new regulatory standards like the UK's CP 26/23 and the EU DORA Act. Microsoft Cloud for Financial Services provides integrated SIEM, XDR, compliance, and Copilot for Security to defend against nation-state and criminal attacks, supply chain vulnerabilities, and third-party risks. The solution unifies security event management, investigation, and compliance processes, with real-world deployment by WTW and partners like BlueVoyant. Microsoft Purview, Sentinel, Defender, and Copilot for Security use generative AI to automate anomaly detection, incident response, and compliance management, addressing talent shortages and improving time-to-detection. The stack fosters a consolidated approach to cyber defense for the complex, multi-cloud environments typical in the sector.

Organization: WTW
Industry: Finance
Location: United Kingdom
Published: June 2024

Reported outcomes

Strategic outcomes

Risk & complianceImproved compliance management and reportingRisk & complianceReduced operational and supply-chain riskSpeed & agilityFaster threat detection and responseScale & capacityUnified security across complex environments

Why do we believe this deployment?Customer identity, provider attribution, maturity, and source checks

Customer: WTW
Provider: Microsoft
Maturity: Production
Linked source: Microsoft Industry Blog

Reduced operational risk and supply chain vulnerabilities

Customer identity supportedSource describes one deploymentMaturity supported

Primary read

Use case focus

Showing 3 of 3

1threat detection
2incident response automation
3compliance management

Increasingly sophisticated cyber threats from nation-state actors and organized crime.
Complex regulatory environment (UK CP 26/23, DORA Act, FSB toolkit) adds compliance burden.
Third-party and supply chain risks (e.g., SolarWinds attack).
Talent shortages and the need for faster detection and automated response.
Difficulty correlating signals across multi-vendor, multi-cloud environments.

Adopted Microsoft Sentinel for unified SIEM and incident management.
Implemented Defender XDR and Copilot for Security for generative AI-driven defense and automation.
Purview Insider Risk Management and Compliance Manager address insider and regulatory challenges.
Integrated approach reduces vendor complexity and improves threat response.
Partnered with BlueVoyant for deployment and managed services.

Technologies

Defender Copilot for Security Azure AI Purview

Enhanced threat detection speed and accuracy (AI-driven).
Increased compliance and reduced incident reporting times.
Reduced operational risk and supply chain vulnerabilities.
Improved efficiency for security analysts and incident responders.

Architecture

Integration of Microsoft Sentinel (SIEM), Defender XDR, and Copilot for Security across SIEM/XDR stack; Purview for insider risk and compliance; centralized management for unified cyber operations; partners provide transformation, managed deployment, and incident response.

Sources & evidence1

Evidence: Medium50/100Evidence strength