Realty Income is a REIT that acquires and leases freestanding, single-unit commercial properties across all 50 U.S. states, the United Kingdom, and eight other European countries. Managing over 15,500 properties with gross assets exceeding $83 billion, the attack surface is enormous: a sprawling portfolio of real estate assets, financial transactions, and tenant data spread across multiple continents. The threat model centers on protecting a high-value financial entity where the integrity of dividend distribution systems and the confidentiality of massive portfolio data are non-negotiable.
The security challenge here isn't a single cloud-native product; it's defending a distributed, asset-heavy enterprise. Think securing internal financial systems that underpin 672 consecutive monthly dividend payments, safeguarding acquisition and leasing data pipelines, and managing access across a geographically dispersed operation. The surface area includes operational technology in property management, corporate IT, and the complex financial infrastructure of a publicly traded S&P 500 Dividend Aristocrat with over 31 years of consecutive dividend increases.
This means the cybersecurity team operates at the intersection of enterprise IT security, financial systems protection, and data governance for a regulated, investor-facing organization. The work requires securing legacy and modern systems in a hybrid environment, ensuring business continuity for critical financial operations, and managing risk across a portfolio where a single breach could affect investor trust and financial stability. The scale is real estate; the stakes are financial integrity and operational resilience.
