Regional telecom provider

Challenge

The enterprise sought to put in place solutions that would ensure its cloud security overall, including with better visibility across its cloud infrastructures. Native tools were not an option because its cloud environment spanned both Amazon Web Services (AWS) and Microsoft Azure, requiring a multicloud security solution. To meet required compliance standards, the executive team had already standardized on a solution for cloud security posture management (CSPM). This piece of the organization’s security strategy addressed governance needs from a reporting perspective. However the cloud governance team, cognizant that identities and permissions are a major point of failure in cloud security, was concerned that a CSPM tool alone would not adequately reveal identity risk and sought to better secure their IAM operation. Cloud infrastructure entitlement management (CIEM) had gained their attention for its deep risk analysis of born-on-the-cloud identities and permissions.

At liberty to choose point security tools, the cloud applications team began researching CIEM solutions.

Solution

After comparing competitive offerings, followed by a demo and then a proof of concept, the telecom company chose Tenable Cloud Security, citing the benefit of an identity-first approach to addressing its IAM security concerns and the high accuracy of findings revealed in the evaluation phase.

Rollout was swift. To date, the telecom provider has implemented Tenable Cloud Security in two organizational groups, and work is underway to standardize the solution across their entire cloud environment. These teams are using Tenable’s CIEM and policy-based alerting capabilities to assess their cloud security posture, and for fine grained visibility and risk detection across identities, resources, network and permissions.

Use cases and ROI

The groups are using the platform to reduce excessive permissions and expand least privilege, integrating its guided recommendations and rightsized policies into development and engineering workflows for acting on by those teams. The enterprise is also using Tenable Cloud Security for anomaly detection use cases, alerting relevant stakeholders about unusual cloud activity to accelerate investigation and response.

Both groups credit Tenable with enormous time savings in prioritizing, and reducing cloud configuration and identity risk in their growing cloud environment.

Next steps

The enterprise next plans to better control user and developer access through Tenable’s Just-in-Time management, which curbs risk and streamlines developer access requests by automating the approval process and revoking the elevated privileges right after use. Spurred by their strong Tenable outcomes, the team is trialing the platform with a broader requirement – building a business case for gaining approval to standardize on Tenable for full CNAPP usage across the entire enterprise.

About Tenable Cloud Security

Tenable Cloud Security is the actionable cloud security platform (CNAPP), rapidly exposing and closing priority security gaps caused by misconfigurations, risky entitlements and vulnerabilities. These weaknesses are the epicenter of cloud risk. Tenable is a world leader at isolating and eradicating these exposures at scale across infrastructure, workloads, identities, data and AI services.