In highly regulated industries, security isn't an isolated function—it's embedded into every interaction, system and outcome.
For RCM Technologies, that reality plays out across a diverse portfolio of customers spanning healthcare, aerospace, government, energy and life sciences. Each engagement brings its own requirements, standards and expectations for compliance. Many operate under strict regulatory frameworks, and they all depend on systems that must always perform reliably and securely.
As RCM has expanded globally, with operations spanning North America, Europe and Asia-Pacific, the infrastructure behind that work has had to evolve just as quickly. In environments where compliance is continuous and audits can happen at any time, security isn't a checkpoint. It's a constant.
Where complexity meets accountability
RCM's operating model reflects the industries it serves: distributed, highly specialized and constantly changing.
Aerospace programs. Healthcare systems. Government contracts. Energy infrastructure. Each comes with distinct data requirements, regulatory frameworks and expectations for how systems are secured and managed.
That diversity introduces complexity—not just in technology, but in operations.
VP of IT Security and Compliance at RCM Technologies Bryan Barahona said, “You have customers coming from all different industries. Every one of them has a different set of demands.”
As the business grew, so did the volume of systems and data moving across its environment. Security tools were already in place across endpoints, networks, email and cloud environments, but correlating activity across them required time, context and constant attention.
At the same time, expectations didn't slow down. Compliance requirements continued to expand. Customers needed assurance that their data was protected, and internal teams were responsible for maintaining that posture across a global footprint.
When scale changes the operating model
As RCM accelerated its transition to cloud-based infrastructure, including the migration of critical workloads into Azure and Azure Government, this complexity increased.
Cloud adoption brought agility and scale, but it also introduced new layers of visibility, patterns of activity, and requirements for monitoring and response.
The challenge wasn't a lack of capability—it was how those capabilities were managed together.
"It's not one or two people anymore," Barahona said. "Security is very complex now."
Maintaining consistent coverage across regions, managing continuous compliance demands and responding to activity in real time created an operational gap.
For a global organization, building and sustaining a traditional, internal-only security operations model wasn't practical. The environment required continuous visibility, coordinated response and the ability to operate across time zones without interruption.
Building a unified view of security operations
To address that challenge, RCM partnered with Lumen to unify its approach to detection and response—bringing together Microsoft's cloud-native security platform, managed security operations expertise from Lumen and Black Lotus Labs® threat intelligence into one unified operating model.
By deploying Lumen Defender℠ Advanced Managed Detection and Response (AMDR) with Microsoft Sentinel, RCM established a unified security operations platform for monitoring, investigation and response across its environment. The platform aggregates activity from endpoints, networks and cloud systems into a single operational view, allowing teams to prioritize and respond more effectively.
"We partner with Lumen because they give us that insight into what's happening—and that's critical," Barahona explained.
Lumen Defender AMDR with Microsoft Sentinel combines Microsoft's cloud-native security platform with managed security operations expertise from Lumen, delivering a unified approach to detection, investigation, threat hunting and response. This, in turn, enables greater visibility and operational consistency across RCM’s distributed environments while reducing the complexity often associated with managing security tools independently.
Delivered through global security operations centers owned by Lumen, the solution extends coverage across RCM's infrastructure with continuous 24/7 monitoring. Lumen Defender℠ Threat Feed, powered by Black Lotus Labs intelligence, adds an additional layer of network-informed threat intelligence, helping identify emerging threats and suspicious activity earlier.
Together, this approach creates a more connected view of the environment—one that aligns to the scale and diversity of RCM's operations.
Reducing noise and focusing on what matters
One of the most meaningful changes for RCM has been how security events are surfaced and managed.
In complex environments, volume isn't the problem—interpretation is.
Before adopting Lumen Defender AMDR with Microsoft Sentinel, RCM teams were navigating signals across multiple systems, each with its own context and level of urgency. Today, security telemetry is brought together within a unified operational model, allowing teams to focus on the events that matter most.
"We're able to focus on what the issues are instead of trying to sift through all the noise," Barahona explained.
This shift enhances how teams operate day to day. Instead of reacting to alerts in isolation, they can identify patterns, prioritize actions and respond with greater precision.
Extending security across time zones and teams
Operating globally means activity doesn't follow a consistent schedule. Systems are accessed at all hours, across multiple regions and by users in different environments.
Providing consistent oversight in that context requires more than internal resources alone.
By extending monitoring and response through Lumen Defender AMDR with Microsoft Sentinel, RCM has expanded its operational coverage—helping ensure visibility continues regardless of location or time zone.
That continuity allows internal teams to focus on higher-priority initiatives while maintaining confidence in the broader environment.
As Barahona describes it, the organization now has "more eyes and ears in the network" than ever before, enabling a level of awareness that would be difficult to achieve otherwise.
Building confidence today while preparing for what's next
For RCM's customers, security is directly tied to trust.
Even when data doesn't reside permanently within RCM systems, it often passes through them—requiring the same level of protection, monitoring and compliance. Customers need assurance that those controls are in place and functioning as expected.
With a more unified and visible security model, those conversations change.
"When we show our customers the tools and the partnership, it puts them at ease," Barahona said.
The ability to demonstrate a security operating model supported by Lumen Defender AMDR with Microsoft Sentinel, backed by Lumen security expertise and Microsoft technology, helps reinforce that confidence.
That confidence is critical in regulated industries, where validation is ongoing and expectations continue to rise.
Supporting growth with a scalable foundation
As RCM continues to expand, security must scale alongside the business.
New customers, markets and emerging technologies, including AI, are creating additional demands on infrastructure and security operations. At the same time, regulatory requirements continue to evolve, requiring organizations to adapt without sacrificing visibility, control or compliance.
With Lumen Defender AMDR with Microsoft Sentinel serving as the foundation of its security operations model, RCM is better positioned to meet those challenges. The organization can extend security visibility across a growing global footprint while maintaining the operational consistency needed to support highly regulated environments.
That scalability is particularly important as RCM continues its cloud journey. By bringing security operations, threat hunting, monitoring and response into a unified operating model, the company can adapt to new technologies and changing business requirements without introducing unnecessary complexity.
For Barahona and his team, the value extends beyond today's environment. It's about having a security strategy that can evolve alongside the business, with the flexibility to support future initiatives, from deeper cloud adoption to Zero Trust architectures and AI-driven innovation.
In RCM's world, security isn't just about protection.
It's what enables the work to happen.
To learn more about RCM Technologies’ transformation, read the full customer success story.
Visit our customer story library to learn how organizations in virtually every industry are achieving their business objectives.
This content is provided for informational purposes only and may require additional research and substantiation by the end user. In addition, the information is provided “as is” without any warranty or condition of any kind, either express or implied. Use of this information is at the end user’s own risk. Lumen does not warrant that the information will meet the end user’s requirements or that the implementation or usage of this information will result in the desired outcome of the end user. All third-party company and product or service names referenced in this article are for identification purposes only and do not imply endorsement or affiliation with Lumen. This document represents Lumen products and offerings as of the date of issue. Services not available everywhere. Lumen may change or cancel products and services or substitute similar products and services at its sole discretion without notice. ©2026 Lumen Technologies. All Rights Reserved.