News Sophos scales CS for 600k customers, threat response under 4 hours
## How Sophos Built CS Ops for 600k Customers
Teresa Anania (now CCO at Verint, formerly SVP Customer Experience at Sophos) built customer success into a revenue engine at scale. Sophos protects 600,000 organisations globally, runs over $1B in ARR, and operates 24/7 CS ops because cyber threats do not wait for business hours.
The threat landscape shifted. AI accelerated attack speed and sophistication. Attackers now move in 3 to 4 hours, logging in rather than breaking in. Sophos structured CS to respond before customers know there is a problem. By the time a support ticket arrives, you have already failed your customer.
## The Attribution Model
Anania ties CS touchpoints directly to retention and expansion. No vanity metrics. She tracks which CS activities drive renewals, upsells, and churn prevention. Dynamic segmentation assigns coverage based on risk, spend, and growth potential, not just ACV hard lines.
For early-stage companies without perfect data: start at the end of the renewal cycle. Automate what you can measure. Crawl, walk, run.
## Structure and Scale
Sophos uses a two-by-two matrix: customer risk versus revenue potential. High-touch CSMs for enterprise accounts showing growth signals. Digital-led motions for stable mid-market. The customer should never feel your org chart.
Anania hires for "humble confidence", a specific combination of expertise without ego. Her 5-to-1 scorecard evaluates how CS earns trust over time. Inner and outer feedback loops turn NPS data into cross-functional action, not just a CS slide.
## ANZ Context
Australia ranks among top countries for Sophos adoption. The company maintains ANZ presence with global 24/7 operations supporting the region. No specific ANZ headcount disclosed, but rapid MDR expansion (37% customer growth in 2024, 26,000+ MDR customers globally) suggests scaling in customer-facing ops.
Sophos holds #1 rankings in G2's 2026 reports for Endpoint Protection, XDR, MDR, and Firewall across enterprise, mid-market, and SMB segments. Privately held following management buyout. Competing in a cybersecurity market projected to hit $267.7B by 2026.
## What This Means
Retention is an all-company play. CS attribution models tie activity to revenue. Dynamic segmentation beats rigid ACV lines. If you are building CS at scale: measure what moves the number, automate the repeatable, and structure coverage around customer outcomes, not your reporting lines.