2020/04/13Press Release
～Robust protection for privileged IDs, which are responsible for more than 80%* of data breaches～
Digital Arts Consulting, Inc. (headquartered in Chiyoda-ku, Tokyo; Tadao Matsumoto, President & CEO; hereinafter "Digital Arts Consulting"), a CISO service (security consulting service) for enterprise environments that require advanced cyber security measures, has signed a distributor agreement with CyberArk Software, Inc. (headquartered in Chiyoda-ku, Tokyo; Kiminori Tomoda, President & CEO; hereinafter "CyberArk"), which provides CISO services (security consulting services), has concluded a distributorship agreement with CyberArk Software K.K. (headquartered in Chiyoda-ku, Tokyo; Kiminori Tomoda, President; hereinafter "CyberArk"), and will start providing "Privileged Access Management Platform Construction Support Service CyberArk will start providing "Privileged Access Management Platform Construction Support Service" to protect companies from cyber attacks that target critical information assets by stealing and abusing privileged accounts.
Comprehensive security measures in enterprises have become an urgent need, regardless of industry or company size, and have necessitated the introduction, management, and operation of multiple security products and functions. Among them, a common cause of information security breaches and targeted attacks that pose a particularly high business risk is the misuse of privileged accounts. Privileged accounts are accounts with special privileges that ordinary users do not have (e.g., Windows=Administrator, Linux=root, etc.). If this account is stolen or abused, it is possible to bypass the monitoring of various security tools and start/stop the system, change settings, create/add/delete users, install/distribute applications, etc. Studies have shown that at least 80% of corporate data breaches involve the use of privileged accounts.
Such privileged accounts are at risk of being stolen or misused by attackers, and there is also the risk of information leakage from within the organization through misuse of privileged accounts by people inside the organization. For this reason, "privileged access management" to protect privileged accounts is an important security measure not only against external attacks, but also against internal leaks, and is being implemented mainly by global companies.
CyberArk PAS, CyberArk's privileged access management solution, is the "most comprehensive" and "most robust" solution for centrally managing privileged accounts and isolating and protecting them from existing systems using the company's patented Vaulting Technology®. More than 5,000 companies, including more than 50% of the world's leading Fortune 500 companies, have adopted it as a key security measure to stave off serious business impact.
However, the establishment and operation of privileged access management requires human resources who are highly knowledgeable about cyber security and who are capable of organizing operations, identifying issues, and supporting implementation design, implementation, and operation in combination with the solution in accordance with the actual conditions of the client's business.
Digital Arts Consulting combines our consulting experience and knowledge in the field of cyber security with "Cyber Sanitation Support Service," "Cloud Composition Management Platform Construction Support Service," and "NIST SP800-171 Compliance Support Service" to provide a one-stop service as our unique security service. We are able to provide our clients with concrete solutions to their business issues, taking into account actual implementation and operation, by offering our unique one-stop security services by combining our experience and knowledge in the field of cyber security consulting.
* The Forrester WaveTM: Privileged Identity Management, Q4 2018 (November 14, 2018), a Forrester Research report, reported that at least 80% of data breaches to businesses exploit privileged accounts.
Digital Arts Consulting consultants will organize the fit and gap between the customer's security guidelines, basic information security policy, etc., and current operations, IT assets, and operating systems. Then, a solution architect will join to analyze the risk of privileged accounts of the security solution currently in operation or to be newly introduced, to visualize the current situation, organize the customer's requirements considering the actual business, and propose a solution (building a hypothesis). We also present a solution proposal (hypothesis development) to customers who are unsure of the appropriateness of their security measures.
Solution architects from Digital Arts Consulting will provide Proof of Value (POV) support for the hypotheses identified in the risk assessment service, visualize customer value in consideration of the actual business, and identify the following functions provided by the privileged access management platform and formulate a conceptual design that meets the customer's needs. We then identify the following functions provided by the privileged access management platform that meet the customer's needs, and formulate a conceptual design. Then, our implementation and support engineers will provide implementation and operation design, construction, and maintenance/operation services utilizing the extracted functions.
Risk-based authentication information security and session management to protect the enterprise from attacks
Combines Zero Trust access, biometric multi-factor authentication, and just-in-time provisioning in a single SaaS solution to provide secure access to CORE PRIVILEDGED ACCESS SECURITY at remote vendors
Controls, manages, and audits access to applications using privileged access tied to non-persons.
Prevent attackers from moving horizontally by stealing credentials at endpoints by controlling applications by applying minimal privileges
SaaS-type solution that provides simplified access to securely store, rotate, and isolate authentication information and monitor sessions. Enhances security and IT operations to quickly reduce business risk.
Simplifies secure storage of cloud credentials, rotation, privileged account separation, and session monitoring. Can be deployed without in-house expertise.
Secure and centralized management of credential scanning (vulnerability and compliance scanning) with Tenable.io. Can be deployed without in-house expertise.
Digital Arts Consulting will combine its newly launched privileged access management platform construction support service with its existing services in order to strengthen security in corporate systems, which will become increasingly important in the future, and to propose an optimal management environment through the use of ICT.
CyberArk's patented "Vaulting Technology®" isolates and protects privileged accounts that exist in almost all IT systems and IoT devices, from endpoint devices to on-premise servers, networks, cloud services, and social infrastructure, as well as in the security products that protect them. Vaulting Technology®" isolates and protects privileged accounts from existing systems. Furthermore, it protects against malware attacks by isolating and managing sessions, continuously monitoring privileged access (detection and notification of unauthorized login), recording investigations during access, managing SSH keys, and controlling which commands privileged accounts can use. These comprehensive solutions protect all privileged accounts, credentials, and secrets used in your on-premise, hybrid cloud, DevOps environment, and endpoints.
CyberArk is the global leader in Privileged Access Management, protecting data, infrastructure and assets at critical layers of IT security across the enterprise, in the cloud and DevOps pipeline. CyberArk offers the industry's most complete solution for mitigating the risks posed by privileged credentials and secrets.
With a corporate philosophy of "contributing to a more convenient, comfortable, and secure Internet life," Digital Arts, Inc. is a domestically produced security software company that provides information security solutions centered on Webmail and files for businesses, public offices (government offices and schools), and homes. A domestic security software manufacturer.
Since launching the first domestically produced web filtering software in 1998, the company has been providing information security products that provide countermeasures against external attacks and internal information leaks. Taking advantage of its strength in domestic self-development, the company is engaged in product planning, development, sales, and support, and aims to provide security products that protect customers from unknown threats based on its unique web filtering database, which supports the foundation of its products, and its technical capabilities patented in 27 countries and regions around the world. The company is a leading provider of security products that protect customers from unknown threats.
https://www.daj.jp/
・About Digital Arts Consulting, Inc.
Digital Arts Consulting, Inc. was established on April 1, 2016 as a strategic subsidiary of Digital Arts, Inc. by bringing together members who specialize in IT strategy consulting to management divisions.
In recent years, cyber-attacks against companies and government agencies from outside and leaks of confidential information from within have become recognized as serious problems not only in Japan but also worldwide, and the need for support for the introduction of security products has been increasing. In order to respond flexibly and promptly to the needs of the market, Digital Arts mainly provides support for the introduction of cyber security measures, especially for major companies in the manufacturing, financial, and pharmaceutical industries, while leveraging its customer base and know-how cultivated in the information security industry.
https://con.daj.jp/
*Digital Arts Consulting, DigitalArtsConsulting, and various logos and icons related to the Company and its products are trademarks or registered trademarks of Digital Arts Consulting, Inc.
*Other company and product names mentioned above are trademarks or registered trademarks of their respective companies.