Recruitment Firm Delivers Services Faster With Security Diagnostic Testing
-
Upload
dell-enterprise -
Category
Services
-
view
31 -
download
2
Transcript of Recruitment Firm Delivers Services Faster With Security Diagnostic Testing
Business need
Intelligence Ltd. wanted to improve
service delivery and avoid delays in
new platform rollouts. To do so, it
needed the tools to diagnose and
track vulnerabilities across its portfolio
of websites.
Solution
The recruitment firm worked with
Dell SecureWorks to implement a
ticket-based process to catalog and
prioritize security testing, such as
penetration testing, web application
testing, and mobile application testing
to prevent delays to upgrades and
new releases.
Benefits• Implementation of ticket
system reduces diagnostic costs
by 20 percent
• Manual work tasks are
eliminated through access to
diagnostic services
• Rapid testing within one week
speeds up release of upgrades and
new services
• Boost in confidence of personal
data security across company’s
sites and services
Solutions at a glance• Security Services
Recruitment firm delivers services faster with security diagnostic testingIntelligence Ltd. partners with Dell SecureWorks to protect private information across its recruitment services and websites
Customer profile
Company Intelligence Ltd.
Industry Services & Consulting
Country Japan
Employees 5,400
Website www.inte.co.jp
“ The identification of possible vulnerabilities is the last step in the process before making a service or a new release live on the website. We get speedy diagnostics at a reasonable cost with Dell SecureWorks, which means we can time our releases to meet the demands of our business. This is something we are really happy about.”
Jun Ootomo, Director, Business Innovation Office, Intelligence Ltd.
2
“ Simply pointing out vulnerabilities is fine, but unless the person has specialized knowledge, they might not be able to communicate adequately to the creative people and designers, which could result in delays. We were impressed with the way Dell SecureWorks presented findings and recommendations in the report, and how easy recommendations were to implement.” Eiko Kuronita, Business Innovation Office, Intelligence Ltd.
There is intense competition in the personnel services industry, and in order to build and grow its business, Intelligence strives to get the most out of its investments in IT. The company’s IT strategy involves building synergies across three areas: workflow, knowledge and people. The Business Innovation (BI) Office at Intelligence runs the IT strategy for the whole company. As a recruitment firm, Intelligence is responsible for securing personal information, and the company is aware that any risk to its data could endanger the whole business.
Intelligence manages over 30 websites, and each time a new service is rolled out to a particular site, or the website undergoes upgrades or changes, the IT team at Intelligence runs a set of security diagnostics. Designers are continually adding new functions and making improvements to enhance the user experience through quicker response times, better usability and higher-quality services. As a result, the company is engaged in testing vulnerabilities every month – from a single page on the web, to large-scale projects. The BI Office is inundated with requests from business divisions within the company, asking for the testing of new releases and updated web pages for vulnerabilities before they go live. This workload is only increasing.
The time taken for checking new releases and services for vulnerabilities meant that the delivery of new business services was being delayed. Occasionally, a decision was taken
to release new content and to have the vulnerability diagnostics run at a later date, which sometimes led to a service being removed after it had been launched.
Balancing security demands with new service deliveryThe company wanted to implement a new solution that would provide security diagnostic services, reduce the workload on the teams involved in those processes, and increase awareness about security issues. Intelligence began discussions with Dell on engaging Dell SecureWorks to provide technical security assessment services. As a diagnostic service, the technical security assessment service from Dell SecureWorks helps companies maintain the quality of their service delivery, as well as improve the speed of service provision. Intelligence had a pre-existing relationship with Dell through the deployment of hardware, and had built up significant trust during this time.
As the second-largest recruitment agency in Japan,
Intelligence Ltd. (Intelligence) offers clients and candidates a
total recruitment solution, which includes full-time, temporary
and part-time staffing, and outsourcing. The company,
headquartered in Tokyo, was founded in 1989 and operates as
a subsidiary of Temp Holdings Co. Ltd.
Products & Services
Services
Dell SecureWorks
– Web Application Assessment
– Penetration Testing
– Mobile Application Security Assessment
3
The company requested an external IP penetration test to be conducted. The resulting diagnostic report was easy to understand, and this was one of the core reasons for the company’s selection of Dell SecureWorks. Eiko Kuronita, BI Office, Intelligence Ltd., says, “The penetration testing report generated by Dell SecureWorks set out the areas where we had to make changes in a clear and simple format. Simply pointing out vulnerabilities is fine, but unless the person has specialized knowledge, they might not be able to communicate adequately to the creative people and designers, which could result in delays. We were impressed with the way Dell SecureWorks presented findings and recommendations in the report, and how easy recommendations were to implement.”
Rapid diagnosis meets service release scheduleThe security diagnostics run by Dell SecureWorks cover a variety of fields, from identifying vulnerabilities in web applications, to running penetration tests from external IPs, as well as examining iOS/Android applications and externally connected APIs. As the number of smartphone users continues to grow, Intelligence has increased the number of its web services that function on smartphone-optimized websites. Due to this, the company benefits from Dell SecureWorks running diagnostics on both iOS and Android applications.
The comprehensive annual agreement is based on a ticket-based system, which means that a single page on the web will receive rapid attention and undergo a diagnostic check. A diagnostic team is committed to work on a specific release and ensure that the new service or update can go live with no delays. This approach releases the BI Office from the task of creating orders for these frequent events. This has delivered a 20 percent reduction in costs compared to when these checks were manually ordered. Furthermore,
when these tests were handled as individual cases, budgets had to be amended and approved, and the entire process might have taken over a month to complete. With the ticket-based approach, the process is completed within a week.
Jun Ootomo, Director, BI Office, Intelligence Ltd., says, “The identification of possible vulnerabilities is the last step in the process before making a service or a new release live on the website. We get speedy diagnostics at a reasonable cost with Dell SecureWorks, which means we can time our releases to meet the demands of our business. This is something we are really happy about.”
Generating security awareness across the companyIntelligence enjoys a host of benefits with regard to security through the engagement of Dell SecureWorks. At regular monthly meetings, Dell SecureWorks shares updates with the BI Office and the development teams that detail the diagnostic processes that must be implemented for the following month. Awareness and involvement in security diagnostics at the workplace are increasing as a result. Moreover, as the diagnostics reports are sent through to people working in administration, these departments are coming to understand the emphasis that the company has placed on security, as well as its importance.
Kuronita says, “We have seen an increased awareness about security at the workplace since we started using Dell SecureWorks. It really seems like people are understanding why these diagnostic processes are important and necessary.”
An executive summary report is issued to Intelligence once every six months. At the same time, Dell SecureWorks hosts a security seminar aimed at making further improvements to creative and development processes. Valuable information is shared, such
4
as knowledge management, analysis of conventional and nonconventional data types, information sharing and workflow, the influence of global threats, and ways to use the information effectively. With support from the Dell SecureWorks team, Intelligence is working on creating a secure coding guide that contains this important information for its creative teams.
Developing new services with built-in securityLooking to the future, Intelligence plans to further develop its close relationship with Dell SecureWorks from its current focus on diagnostics into a full-scale consulting relationship. The aim is to increase skills across the creative and development sides of the business, so websites and new releases can be
created without security vulnerabilities. Ootomo says, “When it comes to security management, there will be areas where the Temp Group excels, and areas where Intelligence will excel. If we can bring these together, I can see how the entire corporate group stands to benefit from working with Dell SecureWorks and its diagnostic cycle.”
Ootomo adds, “We are not in this for short-term gains – our motto is to develop broad, deep and long-lasting relationships with our customers. People turn to us when they are having difficulty finding a position or if they are not enjoying their current job and are seeking an alternative. Going forward, our aim is to continue to strive in the development of our services.”
Dell, the Dell logo and SecureWorks are trademarks of Dell Inc. Other trademarks and trade names may be used in this document to refer to either the entities claiming the marks and names or their products. Dell disclaims any proprietary interest in the marks and names of others. Availability and terms of Dell Software, Solutions and Services vary by region. This case study is for informational purposes only. Dell makes no warranties—express or implied—in this case study. Reference Number: 10022204 © June 2015, Dell Inc. All Rights Reserved
View all Dell case studies at Dell.com/CustomerStories
“ We have seen an increased awareness about security at the workplace since we started using Dell SecureWorks. It really seems like people are understanding why these diagnostic processes are important and necessary.” Eiko Kuronita, Business Innovation Office, Intelligence Ltd.