Intelligent CISO Issue 15 | Page 12

news Capillary Technologies strengthens data security commitment to customers s a leading cloud-based CRM, loyalty and e-commerce platform provider, Capillary Technologies has put its customers’ security requirements at the forefront. A Capillary has achieved the world’s highest security standards with the Payment Card Industry Data Security Standard (PCI DSS) certification, to ensure that its customers’ data is highly secure at all times, no matter where they shop. The PCI DSS certification mandates organisations to have a secure network with more than 300 data protection procedures and standards including firewalls, anti-virus, SIEM and data loss prevention, in addition to ongoing scans and vulnerability assessments every quarter. “Being a CRM, loyalty and an e-commerce platform provider means that Capillary is involved in financial transactions in one form or another, while holding sensitive customer information and business data,” said Shailendra Singh, CISO at Capillary Technologies. “To put this into perspective, we process around US$15 billion worth of happy retail purchases every year for more than 400 brands across 30 countries. “The onus is on us to keep this sensitive data secure and give our customers peace of mind. “The way forward was to ensure that we meet world-class data security standards and the PCI DSS Certification is one way to ensure that our customers are always consumer ready and that their data is safe at all times.” 12 PULSE SECURE PUBLISHES STATE OF ENTERPRISE SECURE ACCESS REPORT ulse Secure, a leading provider of software- defined secure access solutions, has published its 2019 State of Enterprise Secure Access report that quantifies threats, gaps and investment as organisations face increasing hybrid IT access challenges. P The survey of large enterprises in the US, UK and DACH uncovers business risk and impact resulting in a pivot towards extending zero trust capabilities to enable productivity and stem exposures to multi- cloud resources, applications and sensitive data. Key findings The global survey found the most impactful incidents were contributed by a lack of user and device access visibility and lax endpoint, authentication and authorisation access controls. Over the last 18 months, at least half of all companies across every region had dealt with malware, unauthorised/vulnerable endpoint use and mobile or web apps exposures. Nearly half experienced unauthorised access to data and resources due to insecure endpoints and privileged users, as well as unauthorised application access due to poor authentication or encryption controls. Issue 15 | www.intelligentciso.com