Fortinet Acquires Next DLP Strengthens its Top-Tier Unified SASE Solution Read the release

Fintech Achieves Employee Education; Alert Reduction

Achieving instant visibility and 50% reduction in alerts for Financial Services business.
Global Investment

Smarter Employees, Safer Data

Challenge

The security team's outdated DLP had bad compatibility with Microsoft, difficult policy creation, caused poor system performance, and lacked effective user education.

Learn more

Solution

Reveal's lightweight agent proved perfect for this FinTech firm, who got better endpoint performance, data control, and user experience on the front and back ends.

Learn more

Result

Accelerated business development, simplified GDPR compliance, data classification, and enhanced security with simple policy creation. Cut policy violations by 50%.

Learn more
man and woman discussing content on laptop

About the global investment firm

This customer is part of a large, international financial services organization responsible for billions of dollars in investments in thousands of public companies. In addition to protecting their customers’ funds, they must ensure the confidentiality of proprietary information on their portfolio companies and are subject to GDPR and other privacy regulations.
Man sitting at desk looking at computers

Challenge

The organization’s security team had mature processes but was unhappy with their existing, legacy Data Loss Prevention (DLP) solution. That solution worked poorly with their Microsoft Office applications, required complex, and granular policies which limited flexibility. The legacy agent also imposed too much of a burden on system resources, slowing down machines and impacting user productivity.
 
The team identified several requirements for a replacement DLP solution. First, it must work well across their application portfolio, including GitHub and Microsoft Office apps. The solution must also provide a lightweight agent with low overhead on the endpoint to eliminate end user friction. This included a requirement that the solution would only make use of system calls and access the minimum resources needed to fulfill existing policies, including the ability to enforce “never block” policies. Finally, the security team needed a solution that would help educate users on how to handle sensitive data safely and support a positive security culture.
hands typing on laptop

Solution

The team was intrigued by Reveal’s unique approach to DLP, including its lightweight agent and machine learning on the endpoint. They also saw value in its ability to read and act upon the Microsoft Information Protection (MIP) data sensitivity labels already in use. They decided to run a competitive proof of concept with Reveal and Microsoft DLP. To assess impact on the users’ experience, the security team chose to not notify trial users that the agent was deployed. After two weeks, the team found that Reveal had no impact on endpoint performance or user experience while still delivering more data visibility and control into insider risk and DLP use cases. Reveal delivered more comprehensive DLP coverage and a solution that better matched their needs than their legacy solution or what Microsoft DLP could.

Result

enhanced compliance

Enhanced GDPR Compliance

Meeting compliance regulations like GDPR was simplified with Reveal’s built in templates. The security team enabled the GDPR policy and had instant visibility into data subject to regulation. Previously they had to spend several days to manually create, code, and troubleshoot a policy pack. They found that off the shelf policies were close, but still needed modifications to fully address their needs. With Next this process was greatly simplified.
Download customer story
accelerated growth

Accelerated Business Growth

Reveal’s ability to instantly identify and classify sensitive data as it is created and used protects sensitive data across all file types, without affecting endpoint performance. Reveal proved capable of quickly classifying data across the enterprise– not just Microsoft apps – including in exceptionally large files in GitHub, web browsers, and SaaS applications. This real-time protection let them accelerate roll-out and full adoption of a new web-based credit application with the confidence that any sensitive data would be seen without the gaps from their legacy data discovery and classification process. The business development team was thrilled to get this new revenue stream online and delivering value months faster than they previously could.
Download customer story
positive security culture

Positive Security Culture

Finally, the team valued Reveal’s ability to present policy reminders automatically when users attempt prohibited actions and require acknowledgement of company policies. This supported their efforts to build a security culture without requiring intervention from the security team. Within the first 10 days, they noticed a 50% drop in policy violations that they attributed to the positive reinforcement from these educational messages. Over time these reinforcing messages have continued to drive educated users, reduce alerts, and reduce risk.
Download customer story
Click email header 2

See how Next protects your employees and prevents data loss