Leading insurer reduces cyber risk

Firm cites superior visibility into user and host activity as well as integration into broader cybersecurity ecosystem among differentiators in selecting Corvil.

  • 6 years ago Posted in
One of America’s most highly rated financial institutions, with more than $80 billion in assets under management, has implemented Corvil Security Analytics to deliver real-time network traffic visibility, user activity analysis and network forensics to provide more comprehensive cyber threat detection and faster incident response.  

For the security team within this financial services firm, ensuring the security and compliance of sensitive data about millions of online customers was a strategic priority.  With more than 80 percent of breaches stemming from inadvertent or malicious insiders, cyber attacks have the potential to wreak financial, reputational and compliance havoc.  According to reports, the number of cyber attacks against financial services companies has risen by more than 80 percent in the last year.  

In recognizing risks posed by its increasingly complex digital operations and looking for greater visibility within the network perimeter, the firm sought to fortify its security fabric. Following a competitive selection process, Corvil was enlisted to help mitigate risks associated with evasive threats. Among these threats are those that can often hide deep within normal network communications and seemingly appropriate user behavior, such as that of the firm’s workforce and thousands of remote representatives.  Providing granular insights and integrated workflows, Corvil enabled faster and more complete investigations and threat hunting, resulting in more effective and efficient end-to-end security operations.  

Deployed across multiple data centers, Corvil’s continuous packet capture, analysis, threat-matching, prioritization, and alerting extended the scope of threat detection across the corporate network.  The security team gained uniquely granular and contextualized insights into user and threat activity which drastically minimized the manual effort required for forensic investigation.

Dan Kennedy, Corvil VP and GM, Americas, said: “Incomplete or shallow information about suspicious activity can often be worse than none at all, owing to the tremendous overhead on security teams who must determine whether a breach has occurred and the impact thereof.  We have seen how empowering security analysts, of all levels, with greater insight can reduce attacker dwell times and improve the productivity of even high caliber security teams such as this customer.”  

Corvil delivered intelligent integration with other best-of-breed security tools, extending the firm’s protection fabric from the perimeter, across the network, and into endpoints, enabling the firm to:

  • Operationalize the use of threat intelligence for faster breach detection
  • Streamline and unify file extraction, threat analysis, and perimeter response with a leading next generation firewall provider
  • Simplify tracking of attack indicators and processes across the network and within hosts with Carbon Black Cb Response
  • Deliver further correlation of events and faster investigation through bidirectional workflows with a leading machine data analytics SIEM platform

Corvil’s combination of unique insight and integration was a key differentiator during the competitive selection process. It enabled faster, more comprehensive response and maximized the value of their security ecosystem.   

The advanced persistent threat landscape coupled with heightened regulatory oversight and stakeholder demands for utmost assurances from those charged with handling their sensitive data have caused cybersecurity technology budgets to surge[3],” said  David Murray, Corvil Chief Marketing and Business Development Officer. “However a disparate and siloed set of cybersecurity technologies introduces greater levels of complexity to already overburdened security teams.  Time and time again, customers and analysts tell us that solutions designed to participate in a wider security ecosystem of data collection, analytics and policy enforcement are intrinsically more valuable. This latest win demonstrates that our strategy to design interoperable, best-of-breed solutions addresses this pressing market demand.”

Research shows ‘game needs to be changed,’ with security innovation years behind that of the...
73% of organizations lack automated patch management, and 62% experienced incidents involving...
Quest Software has signed a definitive agreement with Clearlake Capital Group, L.P. (together with...
Dell EMC PowerProtect Cyber Recovery for AWS provides a fast, easy-to-deploy public cloud vault to...
Aqua’s cloud native application protection platform becomes the only solution that protects cloud...
54% of organisations working on a security transformation project now or in the next 12 months.
Node4 has released its Mid-Market IT Priorities Report 2021. The independent report reveals that...
Zscaler Zero Trust exchange cloud-based architecture enables superior green security capabilities...