American Multinational Finance Company
Background
This customer is a leading global financial services firm and one of the top 5 largest banking institutions in the world, headquartered in a major U.S. financial hub. With operations in over 100 countries, it offers a wide range of services, including investment banking, asset management, wealth management, and consumer and commercial banking. Serving millions of clients – from individuals to corporations and governments – the firm is recognized for its extensive global reach, innovation, and financial stability.
The Challenge
Customer faced a critical challenge related to Payment Card Industry (PCI) compliance. The company needed to send credit card information securely between themselves and a merchant, adhering to stringent PCI standards. Ensuring that sensitive data was protected from unauthorized access during transmission was essential to prevent potential breaches and avoid regulatory penalties.
To address this challenge, the customer required a robust solution capable of automatically detecting and redacting sensitive data before it was sent to merchants. Moreover, they needed a solution that could help them achieve and maintain compliance, demonstrated by passing rigorous PCI audits.
The Solution
To meet these requirements, customer chose PK Protect. Initially, the company purchased PK Protect for its encryption capabilities to protect highly sensitive data at rest across their vast data repositories. With PK Protect, they could ensure that sensitive information remained encrypted and protected on both endpoints and servers.
Automated discovery and redaction functionalities allowed the customer to identify and redact sensitive credit card information in compliance with PCI standards. This comprehensive solution enabled the secure transfer of data between the company and its merchants, ultimately facilitating a successful PCI audit.
Additionally, the company leveraged PKWARE’s capabilities on IBM z and i mainframes, extending secure data protection and encryption to their core enterprise systems.
Results
Implementing PK Protect provided customer with several significant benefits:
Reduced Data Risk Footprint: The company leveraged PKWARE for a major data cleanup initiative—a 10-year data deletion project. This project involved searching for and deleting files older than ten years across their data stores. As a result, they significantly reduced their data risk footprint, freeing up petabytes of storage and eliminating outdated and unnecessary sensitive information.
Enhanced Endpoint and Server Security: With PKWARE, customer extended protection to over 300,000 devices, including endpoints and servers. This comprehensive coverage significantly strengthened the company’s overall data security posture, ensuring that sensitive data remained protected across their vast network.
Streamlined Compliance and Audit Readiness: Automated data discovery and redaction processes provided by PKWARE simplified compliance efforts, helping customer to seamlessly pass PCI audits and maintain adherence to other regulatory requirements.
