15 Seconds Can Feel Like Forever

For PRISA Media, Spain’s largest Spanish-language media group with brands like El País, Cadena SER, and AS, there’s one golden rule: downtime is not an option. In the news business, even a split second can cost trust. Five minutes of elpais.com being offline? Instantly trending on social media. Fifteen seconds of dead air on the radio? Millions notice in real time.

“Cybersecurity isn’t just about financial protection for us. It’s what keeps us on air when the world is listening,” says CTO Pablo Delgado.

But reality looked different: “I lost sleep over our slow response times. Our platform would alert us before the SOC did—our supposed shield,” recalls Jorge Tomé, Director of Cybersecurity. “We were simply too slow. That wasn’t sustainable.”

Turning Point

PRISA Media found itself in a classic trap: their security platform kept evolving, but the traditional SOC lagged behind. Alerts came in, but the response? Slow, late, and often outpaced by the tech itself. The result: mounting pressure, constant uncertainty, and fading confidence in their own defenses. Something had to change.

Rethinking SOC

At the end of 2023, PRISA Media hit reset. With glueckkanja and the “Wide & Deep” model, they brought in an approach that covers both breadth and depth—from the Microsoft stack to firewalls.

  • Wide: Full visibility across the Microsoft suite, with Defender XDR and Sentinel at the core.
  • Deep: Integration into firewalls, RDP access, and more, so nothing slips through.

A Microsoft Engagement Workshop kicked things off. In a live Proof of Concept, PRISA Media saw the difference: the SOC delivered what had always been missing.

“We signed the contract at the end of October, and by December 1st, we were live. From zero to 100% security in just a few weeks,” says Juan José Fernández, Regional Manager Iberia at glueckkanja.

The highlight: telemetry was up and running in just 15 minutes. What was supposed to be a two-hour session became a showcase for seamless onboarding.

Doubts? Quickly Gone.

Of course, there were doubts: “We had no references for glueckkanja in Spain. A German provider, new to the market—that raised questions,” says Delgado.

Two things won them over: the quality of the team—right from presales, the same experts who would later run operations were on hand. And the speed—rather than long transitions, the SOC was nearly fully operational in just two weeks.

“That was surprising, reassuring—and honestly, a real gamechanger,” says Tomé.

From Reactive to Proactive

The biggest shift? Everyday operations. Before, SOC meant getting an alert and reacting manually. Now, it’s: threat detected, analyzed, automatically stopped. The SOC just sends a confirmation.

“We had tears in our eyes when we got the first report: threat detected, blocked, neutralized. And we didn’t have to lift a finger,” Tomé recalls.

For the internal team, that means more time for prevention, strategy, and analysis—instead of firefighting.

Microsoft’s Security Perspective

“Spain is a fast-moving market. With 84 billion signals a day and 7,000 password attacks per second, we need partners who can deploy our technologies locally, quickly, and effectively,” says Almudena Valenciano, Director Media & Retail at Microsoft Ibérica.

“Working with PRISA Media shows how Microsoft Defender and Sentinel not only protect, but set new standards for response speed. glueckkanja has proven that international expertise and local know-how go hand in hand.”

Today, PRISA Media’s SOC responds in under two minutes—often automatically. For the cybersecurity team, that means peace of mind, focus, and real control.

“We sleep soundly again,” sums up Jorge Tomé.

Bottom Line: Security Without Compromise

PRISA Media proves that security in media is more than defense—it’s the foundation for credibility and continuity.

Key takeaways:

  • Speed matters: If your platform reacts faster than your SOC, it’s time for a change.
  • Proof of Concept builds trust: Test live, then decide—doubts disappear.
  • Automation is a must: Only an SOC that acts on its own frees up teams for prevention.
  • Local presence is key: Global tech plus a regional team makes all the difference.

PRISA Media hasn’t just strengthened its own security. This project is a blueprint for any organization that needs to deliver in real time—and can’t afford a second of downtime.

Video Casestudy Prisa

PRISA Media boosts cybersecurity with Managed SOC & Microsoft Security

PRISA Media relies on glueckkanja and Microsoft Security for a Managed SOC that stops threats in real time. This keeps radio, news, and platforms always on air and secure.

About PRISA Media

PRISA Media is the leading Spanish-language media group, reaching millions of readers, listeners, and users worldwide. Its portfolio includes renowned brands like El País, Cadena SER, AS, and Los40. With a presence in Spain, Latin America, and the US, PRISA Media shapes public opinion far beyond national borders. As a multimedia company with print, radio, and digital platforms, it carries a special responsibility: news and content must always be available, reliable, and secure—downtime is not an option.