Healthcare

Chris Castaldo, Crossbeam CISO, and his team are committed to keeping their business, customers, partners and, most importantly, their data safe from cyber threats. The team sought a single solution that could show exactly who and what has access to data, put guardrails around that data, and ultimately could ensure protection of data against cyber threats. They had processes in place to do this arduous task manually, but it required the use of valuable time, money, and resources that could be reallocated to other critical business tasks. They needed a robust data security posture management (DSPM) solution that could tell them at any time where their data was, who had access to it, and what it was being used for.

The team’s ultimate goal was to ensure all their data was protected, while also having the ability to see who has access to what data at any given time. This was especially important for SOC2 audits. They also wanted to be able to determine, from a hacker’s point of view, which of their applications could be compromised. They had evaluated products that could determine some of this from an outside perspective, but they wanted something that really started from the inside—that is, security from the data out. Why wait for a cyber threat actor to get to the data before deploying protections? Crossbeam wanted a product that started with data protection.

Chris and his team evaluated a few different data security posture management solutions before selecting Symmetry Systems’ DataGuard. The other companies that the Crossbeam team looked at viewed data security from the outside in—that is, from the perimeter—to defend against attacks, rather than approaching security based on the attacker’s main objective—the data. For Crossbeam’s AWS cloud environment, DataGuard fit perfectly into their “security-from-the-data-out” ideology. Chris and the Crossbeam team saw the immediate benefit to a solution that offered improved data visibility, reduced data sprawl, and helped the Crossbeam security team prioritize their data security risks.

One of the greatest challenges DataGuard has solved for Crossbeam is the ability to see how data was being used and who was using it. Prior to deploying DataGuard, Crossbeam had no automated way to monitor data access and activity—everything was time and resource intensive. With DataGuard, Crossbeam can easily show auditors who accesses which data, how much privileged access they have, and if there are any errors in the data. The solution offers high, precise visibility into what is happening to the data.

After deployment and at the request of Crossbeam, Symmetry Systems used DataGuard to look for system weaknesses. According to Chris, during the test, the moment someone tried doing something they weren’t supposed to, DataGuard alerts for anomalous behavior were triggered, demonstrating DataGuard’s full capacity to actively and accurately protect the organization’s data.