支付领导者通过下一代 CASB 实现 PCI 合规性
公司规模
Large Corporate
地区
- America
国家
- United States
产品
- Bitglass CASB
技术栈
- Google's G Suite
- Bitglass AD sync agent
实施规模
- Enterprise-wide Deployment
影响指标
- Cost Savings
- Digital Expertise
技术
- 网络安全和隐私 - 云安全
适用行业
- 金融与保险
适用功能
- 商业运营
用例
- 网络安全
服务
- 云规划/设计/实施服务
- 网络安全服务
关于客户
该客户是支付和借记卡处理领域的领军企业。他们的员工队伍由正式员工和承包商组成，他们使用托管和 BYOD 手机和笔记本电脑。员工分布在不同地区，这增加了他们运营的复杂性。该公司已采用 Google 的 G Suite 进行标准化，但审计人员很难达到 PCI 合规性。合规团队对访问控制有特定要求，希望将承包商限制在浏览器访问和公司网络上，同时允许正式员工在托管设备和公司网络上完全访问，但限制 BYOD 上的访问。
挑战
这家支付和借记卡处理行业的领导者已将 Google 的 G Suite 作为标准，但很难让审计人员达到 PCI 合规性。由于公司员工中既有正式员工也有合同工，员工使用托管和 BYOD 手机和笔记本电脑，员工分布在各地，因此在达到 PCI 合规性方面面临巨大挑战。合规团队希望限制合同工只能通过浏览器访问公司网络，同时允许正式员工完全访问托管设备和公司网络，但限制 BYOD 的访问。
解决方案
Bitglass 提供了一套完整的开箱即用解决方案。Bitglass 解决方案包括 SAML 单点登录，因此客户终止了与 Okta 的合同，并将 Bitglass 配置为 G Suite 的身份提供商。安装 Bitglass AD 同步代理会自动在 Bitglass 上配置用户，从而镜像用户组和权限。在 Bitglass 控制台上配置 WYSWIG 访问控制策略可强制执行合规性所需的规则。Bitglass 独特的 AJAX-VM 技术意味着托管或非托管笔记本电脑上都不需要代理、配置或伪造证书。用户只需登录 G Suite，即可通过 Bitglass 代理服务自动重定向。
运营影响
Case Study missing?
Start adding your own!
Register with your work email and create a new case study profile for your business.
相关案例.
Case Study
Real-time In-vehicle Monitoring
The telematic solution provides this vital premium-adjusting information. The solution also helps detect and deter vehicle or trailer theft – as soon as a theft occurs, monitoring personnel can alert the appropriate authorities, providing an exact location.“With more and more insurance companies and major fleet operators interested in monitoring driver behaviour on the grounds of road safety, efficient logistics and costs, the market for this type of device and associated e-business services is growing rapidly within Italy and the rest of Europe,” says Franco.“The insurance companies are especially interested in the pay-per-use and pay-as-you-drive applications while other organisations employ the technology for road user charging.”“One million vehicles in Italy currently carry such devices and forecasts indicate that the European market will increase tenfold by 2014.However, for our technology to work effectively, we needed a highly reliable wireless data network to carry the information between the vehicles and monitoring stations.”
Case Study
Safety First with Folksam
The competitiveness of the car insurance market is driving UBI growth as a means for insurance companies to differentiate their customer propositions as well as improving operational efficiency. An insurance model - usage-based insurance ("UBI") - offers possibilities for insurers to do more efficient market segmentation and accurate risk assessment and pricing. Insurers require an IoT solution for the purpose of data collection and performance analysis
Case Study
Smooth Transition to Energy Savings
The building was equipped with four end-of-life Trane water cooled chillers, located in the basement. Johnson Controls installed four York water cooled centrifugal chillers with unit mounted variable speed drives and a total installed cooling capacity of 6,8 MW. Each chiller has a capacity of 1,6 MW (variable to 1.9MW depending upon condenser water temperatures). Johnson Controls needed to design the equipment in such way that it would fit the dimensional constraints of the existing plant area and plant access route but also the specific performance requirements of the client. Morgan Stanley required the chiller plant to match the building load profile, turn down to match the low load requirement when needed and provide an improvement in the Energy Efficiency Ratio across the entire operating range. Other requirements were a reduction in the chiller noise level to improve the working environment in the plant room and a wide operating envelope coupled with intelligent controls to allow possible variation in both flow rate and temperature. The latter was needed to leverage increased capacity from a reduced number of machines during the different installation phases and allow future enhancement to a variable primary flow system.
Case Study
Automated Pallet Labeling Solution for SPR Packaging
SPR Packaging, an American supplier of packaging solutions, was in search of an automated pallet labeling solution that could meet their immediate and future needs. They aimed to equip their lines with automatic printer applicators, but also required a solution that could interface with their accounting software. The challenge was to find a system that could read a 2D code on pallets at the stretch wrapper, track the pallet, and flag any pallets with unread barcodes for inspection. The pallets could be single or double stacked, and the system needed to be able to differentiate between the two. SPR Packaging sought a system integrator with extensive experience in advanced printing and tracking solutions to provide a complete traceability system.
Case Study
Transforming insurance pricing while improving driver safety
The Internet of Things (IoT) is revolutionizing the car insurance industry on a scale not seen since the introduction of the car itself. For decades, premiums have been calculated using proxy-based risk assessment models and historical data. Today, a growing number of innovative companies such as Quebec-based Industrielle Alliance are moving to usage-based insurance (UBI) models, driven by the advancement of telematics technologies and smart tracking devices.
Case Study
Enhancing Security and Compliance in Remitly's Global Money Transfer Service with Fastly
Remitly, an online remittance service, was faced with the challenge of securing its proprietary global transfer network. The company needed a security solution that could meet PCI requirements and protect customers' sensitive transactions through its mobile application. The solution had to be capable of defending against new and emerging attack types without impacting performance. Remitly also had to deal with irregular traffic patterns, such as a sudden spike in account transfers from a small network segment on the Pacific coastline of South America. The company needed to determine in real time whether such traffic indicated an attack or valid requests. A traditional web application firewall (WAF) would not be able to distinguish this traffic, potentially leading to customer frustration if the IP was blacklisted.
