Highland Spring Group, the business behind the UK’s number one bottled water brand, has selected Acumen Cyber to provide round-the-clock cybersecurity monitoring, threat detection and incident response.
The partnership will see Glasgow-based Acumen Cyber deliver its managed security services to Highland Spring, helping the company strengthen its existing defences while giving its internal IT team more time to focus on strategic security improvements.
Founded in 1979 and headquartered in Blackford, Perthshire, Highland Spring Group produces approximately 600 million litres of bottled water annually and employs around 500 people.
The company has already invested significantly in its IT infrastructure and cybersecurity capabilities but recognised the need for additional specialist support to maintain continuous monitoring and respond to emerging threats.
Strengthening Cybersecurity Across Operations
Under the agreement, Acumen Cyber will provide 24/7 threat monitoring, investigation and response through its CREST-accredited Security Operations Centre (SOC) in Glasgow.
The service combines security information and event management (SIEM), automation, threat intelligence and proactive threat hunting to help identify and respond to suspicious activity.
Highland Spring’s IT team will work directly with UK-based security engineers, providing access to specialist expertise without having to manage round-the-clock security operations internally.
The partnership is also intended to improve visibility of security risks and give Highland Spring’s team more capacity to strengthen infrastructure, address vulnerabilities and develop its longer-term cybersecurity strategy.
Tracy Holbein, IT Manager at Highland Spring Group, said maintaining reliable operations was central to the decision.
“Keeping our operations running reliably is essential to Highland Spring. This partnership will give us round-the-clock specialist support and more time for our own team to focus on preventing problems and strengthening our security.”
She added: “Acumen stood out because of the rapport between our teams and their enthusiasm for working with us. That gave us confidence that we could build a close and productive partnership.”
Engineer-Led Security Proves Deciding Factor
Highland Spring selected Acumen Cyber following an extensive tender process, with the provider’s technical expertise, engineer-led approach and security platform playing an important role in the decision.
The ability to work directly with the engineers responsible for delivering the service was particularly attractive, alongside Acumen’s CREST accreditation and fixed, predictable pricing.
Another deciding factor was Acumen’s approach to continuously validating security controls against real-world attack techniques, helping customers understand how effectively their defences would perform during an actual incident.
Mark Robertson, CEO of Acumen Cyber, said the partnership would focus on building a close working relationship with Highland Spring’s existing team.
“Our role is to work as an extension of Highland Spring’s team, with named security engineers who understand the business and take responsibility for strengthening its defences.”
He added: “That means continually improving protection as threats evolve and backing confidence with evidence. We continuously validate our detection capabilities against real-world attack techniques, using the findings to improve the security we deliver.”
Supporting Long-Term Cyber Resilience
The agreement reflects Highland Spring’s continued investment in cybersecurity as part of its wider business operations.
For businesses with complex production, distribution and supply chain requirements, maintaining reliable systems and access to specialist security expertise is an important consideration.
Acumen Cyber’s managed detection and response service is designed to provide continuous oversight while helping internal teams take a more proactive approach to identifying and reducing cyber risk.
The partnership also builds on Acumen’s growing customer portfolio, with the company providing managed cybersecurity, continuous security testing, incident response, threat intelligence and strategic advisory services from its Glasgow headquarters.
