Managed Threat Detection [log] for Microsoft Sentinel
Penguin Random House
Customer Profile
Industry: | Employees: |
 |  |
Publishing | 12,330 |
Revenue: | Country: |
 |  |
~4.22B € | UK |
The Challenge
As companies grow, the cost of storing data on-premises becomes increasingly untenable. That’s why Penguin Random House decided to move their on-premises environment and email to the cloud. But as the largest global trade publisher in the world, Penguin Random House also had to protect the sensitive data of customers and best-selling authors as well as fulfill regulations like GDPR.
The Project
The customer began seeking out a new solution that would…
- Secure sensitive data. Gaining visibility into where data lives and who has access enables the security team to proactively take mitigative action.
- Enforce regulatory compliance. Because it operates in the UK, Penguin Random House needs to follow strict data privacy regulations, including GDPR.
- Decrease manual labor. With over 300 TB of data across 9 million folders, they needed a way to locate specific data quickly and accurately to fulfill Data Subject Access Requests.
- Scale with intent. They needed to protect enterprise data on-premises and in the cloud throughout the work-in-progress lifecycle.
After testing numerous potential solutions in their environment, Varonis Data Security Platform proved to be the best fit. Orange Cyberdefense, helped to properly implement and configure the Varonis Data Security Platform in Penguin Random House’s environment. The team highly values this collaborative partnership. She explains the unexpected benefits of having two highly responsive, knowledgeable partners who are happy to help.
A robust data security solution
The setup emphasizes proactive risk mitigation. By enabling security teams to lock down sensitive data and implement and enforce least privilege, companies like Penguin Random House can move to the cloud with confidence.
The Solutions provided
Services provided:
- Consulting
- Implementation and configuration
The implemented solutions include:
- DatAdvantage for Windows, Directory Services, SharePoint Online, and OneDrive to map data access activity across file and email systems.
- Data Classification Engine for Windows, SharePoint, SharePoint Online, and OneDrive to find sensitive data stored on-premises and in the cloud.
- Policy Pack to enhance Data Classification Engine with GDPR patterns.
- DatAlert to monitor and alert on file and email systems for abnormal user behavior indicative of a potential threat.
- Automation Engine to automate large remediation projects by locking down files with global (everyone) access.
- DatAnswers to quickly fulfill Data Subject Access Requests (DSARs) required under GDPR
Benefits
- Decrease manual labor: quick and secure access to over 300 TB of data across 9 million folders
- Full compliance with data protection and monitoring requirements enforced
- Scalability: enterprise data protected on-premises and in the cloud for work-in-progress lifecycle
- Safely enabling the move to the productivity of Microsoft 365
Deborah Haworth
CISO, Penguin Random House
It’s been a three-way partnership. Orange Cyberdefense adds a lot of value to the process by being able to directly answer questions and providing the first line of support and advice for us.
They take the ‘heavy lifting’ out of the equation, which enables our technical team to focus on addressing the underlying issues.
Read the full story.
If you are interested in all the details of the project you can download this case study as a PDF.
Give me the details!
