Access to websites around the world is essential for business, and web security measures have become an urgent issue.

Established in 1996, Tokio Marine Tokio Marine dR Co., Ltd. is a member of the Tokio Marine Holdings, Inc., including Tokio Marine & Nichido Fire Insurance Co., Ltd., and is a group of experts who can accurately solve the various risks faced by modern companies. By collaborating with various research institutes and utilizing a database of accidents and disasters, the company provides advanced and highly specialized consulting that meets the needs of companies, from understanding the actual situation of risks to making proposals for improvement. is doing.

Due to the nature of the business of risk consulting, it is essential to constantly collect and utilize information and knowledge in various fields in order to improve the quality of our services. Regarding this point, Mr. Koichi Sekiguchi, Unit Leader of the ICT Planning Unit of the Corporate Planning Department, said, "the Company service menu includes overseas crisis management and information security consulting. Since we need to obtain the latest information as quickly as possible, we need to access websites around the world and collect information widely, even if it means taking some risks.”

However, it is out of the question for the company to be infected with malware at that time. Until now, the company has taken various security measures and implemented a multi-layered defense. Furthermore, based on the premise that malware intrusion cannot be prevented 100%, data backups are acquired multiple times. In addition, we have implemented security training that Member of the Board and temporary employees must attend, and have conducted monthly drills as if they had been subjected to a cyber attack. Takashi Kikuchi, chief researcher of the ICT Planning Office in the Corporate Planning Department, said, "We detect malware almost every month, and 90% of them came from websites. In some cases, it was installed on official sites, news sites, weather forecast sites, and other sites that we didn't think were particularly dangerous."

Therefore, the company prepared about 10 dedicated terminals for web browsing that access websites from physically separated networks. However, it is said that the usage rate of these terminals was low because it was necessary to go through procedures each time they were used, and the complexity of such procedures was disliked.

“In recent years, threats have become more sophisticated and sophisticated, and it is difficult to completely eliminate threats from websites with existing measures alone. I had a sense of crisis and the problem of
Data accumulated in-house can be said to be the lifeblood of the consulting industry. In particular, in the case of the company, in addition to photos, videos, maps, etc., there is also simulation data, etc., so the amount of data held is enormous. These data are the know-how of consultants themselves and cannot be replaced by others.
"If such data were to be encrypted by ransomware, the business would come to a complete halt. If the data were to be lost, it would lead to huge losses." (Mr. Sekiguchi)

Evaluated for its unique technology that eliminates the "possibility" of threats before intrusion and for not impairing convenience

In light of this situation, Tokio Marine dR Co., Ltd. has begun considering more drastic security measures. It was in the second half of 2016 that the specific product selection began, but Mr. Kikuchi said, "According to the log analysis of the internal system, malware was detected even from the site that the web filtering product judged to be safe. Therefore, we thought that it was impossible to prevent 100% of intrusions with conventional countermeasures, so we changed our thinking and instead of detecting and removing intrusive threats, we focused on the possibility of intrusion itself. I decided to find a way to get rid of it," he said.
From this stage, the company has been paying attention to "Menlo Security"'s unique isolation technology that separates and detoxifies the content itself on the web to ensure safety, and participated in a seminar held in February 2017. By touching on the overview, he said, he felt strongly that Menlo Security was the best choice.

In addition, virtual browsers and VDI were also options, but these require major changes to the system and the configuration becomes complicated. There was also the bottleneck that the procedure for downloading files from websites was complicated and less convenient.

“One of the reasons why physical web separation did not spread earlier was that it was inconvenient, so we decided that it was important not to make it as user-friendly as possible. In addition, since it is a SaaS, it is easy to introduce, and the total cost, including operation, is lower than other solutions.In addition, it has the advantage of being automatically up-to-date.” (Mr. Kikuchi)
The company started Menlo Security PoC in late August 2017. We actually connected to the company network and conducted tests of more than 100 items assuming business using some terminals. As a result, we were able to confirm that it can be used without problems, so we decided to officially adopt it in October.

Improves safety and security and allows you to concentrate on your original work Risks are visualized and effects can be measured

Tokio Marine dR Co., Ltd. DER completed the introduction of Menlo Security company-wide in December 2017. In conjunction with this, we explained to the company the changes and impacts on operations when browsing the Internet.
"By realizing an environment free from the risk of malware infection via the web, users can now access various websites with peace of mind, allowing them to concentrate on their core business," says Kikuchi.

Two years have passed since the introduction at the time of the interview, but Mr. Sekiguchi said, ``Many malware can be eliminated before they invade the company with Menlo Security. This year, it was zero. No actual damage has occurred. Because it is maintenance-free, there is no extra burden on the operation side, and you usually don't even notice its existence."

In addition, the ability to visualize site access and malware detoxification status for each risk is also significant.

"Menlo Security's reports have made it possible to visualize risks.By looking at these in chronological order, it has become possible to know changes and measure the effects.The results are reported to management every month. It only takes about 15 minutes a month to create it.Furthermore, it is also a great advantage that we are now able to proactively respond based on the visualized situation." (Mr. Sekiguchi)

Consider future security measures with Menlo Security at the core

Tokio Marine dR Co., Ltd. believes that the introduction of Menlo Security has completed its web security measures.
"Even in emails, when you access a URL link, the browser will start up and you can view harmlessly via Menlo Security, so it's safe. In the future, I would like to consider replacing existing security measures with Menlo Security at the core. (Mr. Sekiguchi)

And as for Macnica, he said, "They are familiar with products from various fields all over the world and are well versed in the compatibility of these products. We hope that they will continue to make the best proposals based on their expertise," he said.

User Profile