Macnica Solutions provides container security solution "Prisma Cloud" to JCB - Speeding up business construction in a secure cloud-native environment -

Macnica Solutions Corp. (hereinafter referred to as Macnica Solutions, head office: 1-5-5 Shin-Yokohama, Kohoku-ku, Yokohama, Kanagawa Prefecture, President: Yoshihide Hatakeyama) supports everything from the introduction to operation of IT systems for companies, including security measures, networks, and DX. is Palo Alto Networks' container security solution "Prisma (R)", which is affiliated with JCB Corporation (Headquarters: Minato-ku, Tokyo, Representative Chairman of the Board, Chairman and Executive Officer: Ichiro Hamakawa) as a Next Wave partner. We are pleased to announce that we have launched ``Cloud''.

In recent years, in promoting DX (digital transformation), the use of web application configuration technologies such as "Microservices *3" and "container technology *4" has been attracting attention as a realization element of cloud native *1 and DevOps *2. However, since the container technology itself and the characteristics of its operation are significantly different from conventional computing methods, it is necessary to implement countermeasures against container image vulnerabilities that cannot be detected by conventional vulnerability scanning, runtime protection, and compliance compliance. Security measures for the entire life cycle are extremely important.

Macnica Solutions has provided continuous technical support since introducing CWPP (Cloud Workload Protection Platform) into the JCB environment through Prisma Cloud. In addition, with Macnica Solutions' extensive DX experience, we continuously provided support for various settings of CWPP and cooperation with other products. With the introduction of "Prisma Cloud," JCB will automatically detect vulnerabilities throughout the entire development lifecycle without degrading system performance, reduce operational burden, and speed up safe and efficient application construction and operation. has been realized. Prisma Cloud has the functions of both "CWPP (Cloud Workload Protection Platform)" that monitors and protects container workloads, and "CSPM (Cloud Security Posture Management)" that prevents configuration and input errors that pose a risk of incidents on the cloud. I am.

This time, JCB focused on accelerating business construction in its DX efforts, aiming to shorten the application release cycle. At the center of this, we have built the JCB Digital Enablement Platform (JDEP), a next-generation system platform that utilizes a cloud-native environment, and by utilizing Prisma Cloud as a security measure for the entire lifecycle, we have achieved the following: it was done.

Effect of Prisma Cloud on JCB's JDEP

Container image vulnerability countermeasures	Vulnerability and compliance checks are performed at build time with the image scanning function. Minimize rework due to security checks by addressing early in the development lifecycle.
runtime protection	Real-time anomaly detection and protection for the runtime of running containers.
Compliance compliance	Compliance with PCIDSS (Payment Card Industry Data Security Standard), a credit card information security standard.
Accelerate incident response	By linking Prisma Cloud and the Chat tool, immediately notify the relevant parties when an incident occurs. Enable ChatOps.

Macnica Solutions will continue to support Japanese companies in promoting DX using cloud-native environments and strengthening security measures throughout the development lifecycle.

*1: A general term for typical technologies (containers, etc.) used to give organizations the ability to build and run scalable applications in modern and dynamic environments such as public clouds, private clouds, and hybrid clouds. .
*2: Generic name for efforts to continuously improve processes through close cooperation between developers (Dev) and operators (Ops) in order to continue delivering software value to users reliably and promptly.
*3: An optimal development method for cloud-native application development that subdivides applications into mutually independent minimum components and reduces their weight.
*4: A technology that virtualizes the execution environment of applications such as Docker. Compared to conventional virtual machines, it has advantages such as less resource consumption and faster startup.