Recruitment Firm Delivers Services Faster With Security Diagnostic Testing

4
Business need Intelligence Ltd. wanted to improve service delivery and avoid delays in new platform rollouts. To do so, it needed the tools to diagnose and track vulnerabilities across its portfolio of websites. Solution The recruitment firm worked with Dell SecureWorks to implement a ticket-based process to catalog and prioritize security testing, such as penetration testing, web application testing, and mobile application testing to prevent delays to upgrades and new releases. Benefits Implementation of ticket system reduces diagnostic costs by 20 percent Manual work tasks are eliminated through access to diagnostic services Rapid testing within one week speeds up release of upgrades and new services Boost in confidence of personal data security across company’s sites and services Solutions at a glance Security Services Recruitment firm delivers services faster with security diagnostic testing Intelligence Ltd. partners with Dell SecureWorks to protect private information across its recruitment services and websites Customer profile Company Intelligence Ltd. Industry Services & Consulting Country Japan Employees 5,400 Website www.inte.co.jp “The identification of possible vulnerabilities is the last step in the process before making a service or a new release live on the website. We get speedy diagnostics at a reasonable cost with Dell SecureWorks, which means we can time our releases to meet the demands of our business. This is something we are really happy about.” Jun Ootomo, Director, Business Innovation Office, Intelligence Ltd.

Transcript of Recruitment Firm Delivers Services Faster With Security Diagnostic Testing

Business need

Intelligence Ltd. wanted to improve

service delivery and avoid delays in

new platform rollouts. To do so, it

needed the tools to diagnose and

track vulnerabilities across its portfolio

of websites.

Solution

The recruitment firm worked with

Dell SecureWorks to implement a

ticket-based process to catalog and

prioritize security testing, such as

penetration testing, web application

testing, and mobile application testing

to prevent delays to upgrades and

new releases.

Benefits• Implementation of ticket

system reduces diagnostic costs

by 20 percent

• Manual work tasks are

eliminated through access to

diagnostic services

• Rapid testing within one week

speeds up release of upgrades and

new services

• Boost in confidence of personal

data security across company’s

sites and services

Solutions at a glance• Security Services

Recruitment firm delivers services faster with security diagnostic testingIntelligence Ltd. partners with Dell SecureWorks to protect private information across its recruitment services and websites

Customer profile

Company Intelligence Ltd.

Industry Services & Consulting

Country Japan

Employees 5,400

Website www.inte.co.jp

“ The identification of possible vulnerabilities is the last step in the process before making a service or a new release live on the website. We get speedy diagnostics at a reasonable cost with Dell SecureWorks, which means we can time our releases to meet the demands of our business. This is something we are really happy about.”

Jun Ootomo, Director, Business Innovation Office, Intelligence Ltd.

2

“ Simply pointing out vulnerabilities is fine, but unless the person has specialized knowledge, they might not be able to communicate adequately to the creative people and designers, which could result in delays. We were impressed with the way Dell SecureWorks presented findings and recommendations in the report, and how easy recommendations were to implement.” Eiko Kuronita, Business Innovation Office, Intelligence Ltd.

There is intense competition in the personnel services industry, and in order to build and grow its business, Intelligence strives to get the most out of its investments in IT. The company’s IT strategy involves building synergies across three areas: workflow, knowledge and people. The Business Innovation (BI) Office at Intelligence runs the IT strategy for the whole company. As a recruitment firm, Intelligence is responsible for securing personal information, and the company is aware that any risk to its data could endanger the whole business.

Intelligence manages over 30 websites, and each time a new service is rolled out to a particular site, or the website undergoes upgrades or changes, the IT team at Intelligence runs a set of security diagnostics. Designers are continually adding new functions and making improvements to enhance the user experience through quicker response times, better usability and higher-quality services. As a result, the company is engaged in testing vulnerabilities every month – from a single page on the web, to large-scale projects. The BI Office is inundated with requests from business divisions within the company, asking for the testing of new releases and updated web pages for vulnerabilities before they go live. This workload is only increasing.

The time taken for checking new releases and services for vulnerabilities meant that the delivery of new business services was being delayed. Occasionally, a decision was taken

to release new content and to have the vulnerability diagnostics run at a later date, which sometimes led to a service being removed after it had been launched.

Balancing security demands with new service deliveryThe company wanted to implement a new solution that would provide security diagnostic services, reduce the workload on the teams involved in those processes, and increase awareness about security issues. Intelligence began discussions with Dell on engaging Dell SecureWorks to provide technical security assessment services. As a diagnostic service, the technical security assessment service from Dell SecureWorks helps companies maintain the quality of their service delivery, as well as improve the speed of service provision. Intelligence had a pre-existing relationship with Dell through the deployment of hardware, and had built up significant trust during this time.

As the second-largest recruitment agency in Japan,

Intelligence Ltd. (Intelligence) offers clients and candidates a

total recruitment solution, which includes full-time, temporary

and part-time staffing, and outsourcing. The company,

headquartered in Tokyo, was founded in 1989 and operates as

a subsidiary of Temp Holdings Co. Ltd.

Products & Services

Services

Dell SecureWorks

– Web Application Assessment

– Penetration Testing

– Mobile Application Security Assessment

3

The company requested an external IP penetration test to be conducted. The resulting diagnostic report was easy to understand, and this was one of the core reasons for the company’s selection of Dell SecureWorks. Eiko Kuronita, BI Office, Intelligence Ltd., says, “The penetration testing report generated by Dell SecureWorks set out the areas where we had to make changes in a clear and simple format. Simply pointing out vulnerabilities is fine, but unless the person has specialized knowledge, they might not be able to communicate adequately to the creative people and designers, which could result in delays. We were impressed with the way Dell SecureWorks presented findings and recommendations in the report, and how easy recommendations were to implement.”

Rapid diagnosis meets service release scheduleThe security diagnostics run by Dell SecureWorks cover a variety of fields, from identifying vulnerabilities in web applications, to running penetration tests from external IPs, as well as examining iOS/Android applications and externally connected APIs. As the number of smartphone users continues to grow, Intelligence has increased the number of its web services that function on smartphone-optimized websites. Due to this, the company benefits from Dell SecureWorks running diagnostics on both iOS and Android applications.

The comprehensive annual agreement is based on a ticket-based system, which means that a single page on the web will receive rapid attention and undergo a diagnostic check. A diagnostic team is committed to work on a specific release and ensure that the new service or update can go live with no delays. This approach releases the BI Office from the task of creating orders for these frequent events. This has delivered a 20 percent reduction in costs compared to when these checks were manually ordered. Furthermore,

when these tests were handled as individual cases, budgets had to be amended and approved, and the entire process might have taken over a month to complete. With the ticket-based approach, the process is completed within a week.

Jun Ootomo, Director, BI Office, Intelligence Ltd., says, “The identification of possible vulnerabilities is the last step in the process before making a service or a new release live on the website. We get speedy diagnostics at a reasonable cost with Dell SecureWorks, which means we can time our releases to meet the demands of our business. This is something we are really happy about.”

Generating security awareness across the companyIntelligence enjoys a host of benefits with regard to security through the engagement of Dell SecureWorks. At regular monthly meetings, Dell SecureWorks shares updates with the BI Office and the development teams that detail the diagnostic processes that must be implemented for the following month. Awareness and involvement in security diagnostics at the workplace are increasing as a result. Moreover, as the diagnostics reports are sent through to people working in administration, these departments are coming to understand the emphasis that the company has placed on security, as well as its importance.

Kuronita says, “We have seen an increased awareness about security at the workplace since we started using Dell SecureWorks. It really seems like people are understanding why these diagnostic processes are important and necessary.”

An executive summary report is issued to Intelligence once every six months. At the same time, Dell SecureWorks hosts a security seminar aimed at making further improvements to creative and development processes. Valuable information is shared, such

4

as knowledge management, analysis of conventional and nonconventional data types, information sharing and workflow, the influence of global threats, and ways to use the information effectively. With support from the Dell SecureWorks team, Intelligence is working on creating a secure coding guide that contains this important information for its creative teams.

Developing new services with built-in securityLooking to the future, Intelligence plans to further develop its close relationship with Dell SecureWorks from its current focus on diagnostics into a full-scale consulting relationship. The aim is to increase skills across the creative and development sides of the business, so websites and new releases can be

created without security vulnerabilities. Ootomo says, “When it comes to security management, there will be areas where the Temp Group excels, and areas where Intelligence will excel. If we can bring these together, I can see how the entire corporate group stands to benefit from working with Dell SecureWorks and its diagnostic cycle.”

Ootomo adds, “We are not in this for short-term gains – our motto is to develop broad, deep and long-lasting relationships with our customers. People turn to us when they are having difficulty finding a position or if they are not enjoying their current job and are seeking an alternative. Going forward, our aim is to continue to strive in the development of our services.”

Dell, the Dell logo and SecureWorks are trademarks of Dell Inc. Other trademarks and trade names may be used in this document to refer to either the entities claiming the marks and names or their products. Dell disclaims any proprietary interest in the marks and names of others. Availability and terms of Dell Software, Solutions and Services vary by region. This case study is for informational purposes only. Dell makes no warranties—express or implied—in this case study. Reference Number: 10022204 © June 2015, Dell Inc. All Rights Reserved

View all Dell case studies at Dell.com/CustomerStories

“ We have seen an increased awareness about security at the workplace since we started using Dell SecureWorks. It really seems like people are understanding why these diagnostic processes are important and necessary.” Eiko Kuronita, Business Innovation Office, Intelligence Ltd.