COVID restrictions prompt financial services company to look at reliable remote access solutions
An American financial services company has built a thriving business helping people navigate their way around lending institutions and credit bureaus. The company’s employees routinely have access to their clients’ personally identifiable information (PII), such as social security numbers, credit card numbers, IDs, credit history and more. From a security standpoint, access to the custom-built CRM platform where this data is housed is strictly controlled and restricted to authorized, managed devices within the physical location of the company’s offices. And, as a company that grew during covid, they needed to expand their call center team with outsourced resources located internationally.
As COVID persisted, the VDIs that had been implemented to support both groups of users cut into productivity. The issue led the company’s trusted digital transformation partner and vCISO, VictoryCTO’s John Cunningham, to identify a long-term secure access solution for the third-party contractors, while the full-time employees came back to the office. With Zero-Trust Application Access from the Silo Web Isolation Platform, the company could manage contractor devices and protect sensitive data while allowing contractors to access the data they need for productivity.
“We got a call from the CEO in March of 2020,” recalls John Cunningham, virtual Chief Information Security Officer at Victory. “He knew that with imminent lockdowns, their employees won’t be able to come to the office; and with the way security has been set up, the system won’t allow them to access critical applications from their home IPs either.” As a temporary workaround, Victory set up 150 Amazon WorkSpaces (AWS) — remote desktops that allow for secure and controlled access. The VDI helped the company avoid shutdown and allowed them to continue to provide services to their clients. But the expense and effort required to provision, maintain and monitor additional hardware and infrastructure proved too costly and cumbersome for the company.
“It’s a whole new computer that you have to set up,” explains Cunningham. “It’s rather difficult to put all the needed security controls on it, and monitor that everything is being used correctly. Updates to the base image systems had to be done in sync with the monthly billing cycle, which added even more complexity to the process,” he adds.