Steps for Reducing Security Risk: Steps Our Customers Have Taken

Strong cybersecurity is crucial in a business environment that is increasingly connected in nature. As businesses operate more digitally, the cyber risk escalates. While most companies have at least some understanding of the need for effective cybersecurity measures, the risk of being attacked will always be present.

It’s essential for organizations to regularly review their security measures to make sure they’re in line with the current threat landscape and to close any gaps that are present. While it’s not practical to aim for an environment that is 100 per cent impenetrable, most organizations can improve their security posture without necessarily adding a high cost.

Fujitsu works with customers throughout South-East Asia to strengthen their security posture. We use a phased approach to create a roadmap for each customer:

1. Analyze and assess.
2. Detailed planning and design.
3. Prepare and remediate.
4. Develop and implement.
5. Deploy and manage.
This approach helps ensure that the solutions put in place map closely to the organization’s risk factors and protect their most important assets.

Here’s how Fujitsu has helped three customers reduce their security risks:
1. Digital workplace transformation to Microsoft Office 365

Starting with a consulting approach, we identified key security gaps facing this organization in its move to Office 365. This business had a traditional network and security infrastructure matching its on-premise architecture. In moving to Office 365, the business needed a security infrastructure that would support the cloud.

Change management was a significant part of the project since the move to Office 365 was a significant change for this customer. On the security side, Fujitsu provided security for Office 365 encompassing:
- • confidentiality with secure identity and access management
- • availability with global traffic management
- • secure connectivity with web filtering and bandwidth saving by the advanced secure gateway
- • security with internal and perimeter protection including next-generation firewall and advanced malware protection.

The result was a smooth transformation with confidentiality, integrity, and availability.

2. Payment Card Industry Data Security Standard (PCI-DSS) compliance

This organization required a security solution that would allow it to gain certification of PCI-DSS compliance with the right technical controls, security monitoring, and managed security service.

Working closely with the customer to understand their needs, Fujitsu created a solution that included:

• security information and event management (SIEM)
• file integrity monitoring (FIM)
• intrusion prevention system (IPS)
• multifactor authentication
• vulnerability assessments
• firewall management
• secure source code analysis.
After putting these solutions in place and adding managed security services, Fujitsu helped this customer achieve PCI-DSS compliance.

3. Security upgrade to mitigate risk

This customer had an outdated security solution in place that was creating unacceptable risk. Fujitsu started with a consulting approach to determine the overall gap and recommend a solution.

The first step was to align with the business strategy, proposing a new maturity level when it came to security. Then, Fujitsu examined the organization’s current security status and desired state. Finally, Fujitsu recommended a roadmap based on risk priority.

Fujitsu started with the essentials for the organization’s basic security infrastructure. This included elements such as Active Directory and file sharing, perimeter firewall and secure web gateway, endpoint protection and data center security, and SIEM.
Phase two of the implementation will involve detection, triage, and investigation. This will include internet and email advanced threat protection, intrusion prevention, and vulnerability management solutions. This client looked to Fujitsu to provide advice on the latest security solutions and also gained a strong service and consulting relationship. Fujitsu’s ability to offer a comprehensive roadmap for the future was crucial to the client’s requirements.

Working with a strong, trustworthy partner to create a secure organization is essential as legislation continues to catch up to the business reality that cybersecurity is a key risk that must be managed. To find out how Fujitsu can help you strengthen your cybersecurity posture and prepare for cybersecurity legislation in Thailand, contact us today.