비즈니스 목표
업계에서 가장 큰 종합 보험사 중 하나는 의심할 여지 없이 리스크 관리의 중요성을 잘 알고 있습니다. 이 회사는 약 900만 명의 고객에게 비즈니스 및 개인 보험 서비스를 제공하고 있습니다.
더 안전한 세상을 만들기 위해서는 자체적인 사이버 위험 관리가 매우 중요합니다.
Insurance firms are ripe for cyberattacks, with a wealth of policyholder data and personally identifiable information (PII) at stake. Accordingly, the company’s infrastructure and cloud services team has a definitive goal: stay out of high-profile breach news.
The insurer has a 160-year brand reputation to uphold, and 9 million reasons to invest in security capabilities that reduce cyber risk and enhance resilience to attacks. Accordingly, the company's infrastructure and cloud services team has a definitive goal: stay out of high-profile breach news.
기술 과제
인상적인 성장의 핵심 요소인 인수 합병은 보험사의 하이브리드 공격 면을 확장했습니다. 실사 절차에도 불구하고 M&A 활동에는 위험이 내재되어 있습니다.
이 회사의 인프라 및 클라우드 서비스 총괄 관리자는 "환경을 스캔하는 과정에서 인수한 시스템과 전체적으로 패치할 수 없는 취약점을 수정해야 할 필요성을 발견했습니다."라고 설명합니다. "고부가가치 애플리케이션과 자산을 더 잘 보호하기 위해서는 더 엄격한 보안 제어가 필수적이었습니다."
“Since implementing Illumio, we've taken 5,000 exploitable vulnerabilities down to 9 across seven high-value applications and hundreds of workloads. It has proven to be invaluable to our risk mitigation strategy.”
Executive Manager of Infrastructure and Cloud Services
Anonymous Large Insurance Company
The team sought microsegmentation to protect the application workloads underpinning the business and to limit exposure to vulnerabilities.
They had specific requirements for a safe, seamless approach that would not break applications or threaten uptime. That's where Illumio came in.
일루미오의 지원 방법
The insurer turned to Illumio Segmentation, which ticked all the boxes for “safe and seamless” in its proof of concept. Illumio’s Zero Trust Segmentation has proven value in spades since deployment.
이 보험사는 비즈니스 크리티컬 애플리케이션에 대한 트래픽을 엄격하게 제어함으로써 수천 개의 취약점을 제거하고 악용 가능한 공격 표면을 99% 줄였습니다.
"Since implementing Illumio, we've taken 5,000 exploitable vulnerabilities down to 9 across seven high-value applications and hundreds of workloads," the executive manager says. "Illumio has proven to be invaluable to our risk mitigation strategy."
Illumio's real-time traffic map serves as a constant source of security, helping the infrastructure and cloud services team understand connections between applications and visualize the impact of policies before applying them.
“Zero Trust Segmentation with Illumio Segmentation is a simple process,” explains the executive manager. “From an operational perspective, our number one goal is to never break production, which we achieved with Illumio. Our cyber operations governance board is extremely pleased.”
"From the beginning, there was a sense that the Illumio team would do whatever it takes to support our team. Time and again, they've proven exceptional in their responsiveness, expertise, and partnership."
Manager of Security Services
Anonymous Large Insurance Company
결과 및 이점
With segmentation controls as a foil against vulnerabilities and attackers, the company has gained assurance that the business’s high-value assets are protected.
또한 팀은 Illumio Core가 다른 도구, 특히 CrowdStrike의 엔드포인트 탐지 및 대응(EDR)을 보완하는 역할을 한다고 보고 있습니다.
한 보안 서비스 관리자는 "제로 트러스트 세분화와 EDR은 공격을 방어하기 위한 강력한 두 가지 접근 방식을 제공합니다."라고 말합니다. "일루미오가 위반이 확산되는 것을 사전에 방지하면 EDR이 이를 탐지하고 대응하는 역할을 수행할 수 있습니다."
The team is strategizing on how they will leverage more Zero Trust Segmentation capabilities in the future and know they can always count on Illumio’s partnership.
“From the beginning, there was a sense that the Illumio team would do whatever it takes to support our team,” he says. “Time and again, they’ve proven exceptional in their responsiveness, expertise, and partnership.”
