Confidential Financial Services Company

Challenge

• As an organization in fintech, this company must meet a high standard of security and compliance. Its security team was looking to streamline the company's security across multiple SaaS platforms.

Solution

• Nightfall simplifies compliance for this company by providing single pane of glass functionality. Nightfall is a single dashboard providing insights and remediation capabilities for data exposure risk across all of critical SaaS platforms.

Managing cross-functional data protection

We spoke with a security operations analyst at this confidential financial services company. He works with the Application Security Department, Security Operations Department, and the Government and Regulatory Control (GRC) and Compliance Department to manage multiple facets of security: endpoint, data, and cloud security, as well as compliance. When this company onboards a new platform or app, it’s up to the analyst to implement and configure each one and ensure the implementation meets the company’s security and compliance standards.

This company has three goals for protecting customer data: reducing security risks, increasing peace of mind for the company and their customers, and securing the company’s platform environment. These needs led the information security and I.T. teams to search for a data security solution that was fast and easy to implement. “We didn't want a heavyweight agent that would bog down our processors,” the analyst says. “We also wanted it to be customizable.”

Nightfall was the right mix of customizable, lightweight, and easy-to-use data protection.

Nightfall provides one set of detection rules for all apps

Managing data security and compliance across the entire company's digital ecosystem is a challenge for the analyst's teams. Nightfall unites data detection and classification from Slack, Github, Jira, and Confluence into one interface and gives them a deeper understanding of their attack surface and threat risk. With Nightfall, they can apply the same detection rules across all their scans and each of their collaboration tools. 

“Nightfall DLP has improved [our] security posture by allowing us to discover data being transmitted within our various platforms,” the analyst says. “Now it’s easier for us to figure out what data is being shared. We can take action on data that we classify as sensitive. This allows us to be more proactive and less reactive.”

The versatility of Nightfall’s DLP solutions for each of the company's platforms gives their security team the flexibility they need to scale up data security policies across the company. “Many DLP tools we looked into weren’t versatile, or easily implemented,” the analyst says. “We found Nightfall covered all of those things, plus gave us more functionality, like adding our own regexes for specific classifications.”

Nightfall brings flexible and customizable DLP

Nightfall DLP simplifies data protection in the cloud. This security team can maintain compliance with essential financial industry standards like PCI. The flexibility of customizable rules for data detection and classification allows them to adapt to new requirements. Overall, Nightfall contributes to increased efficiency for the security teams.

“Nightfall enabled this company to be more hands-off and more productive,” the analyst says. “The automated actions and capturing of the different classifications we have defined gives us ability to look deeper into our data and understand where it's going.”