Internal Threats -What is lost due to internal improprieties-

More than 60% ^*1 of internal improprieties are caused by negligence or negligence by “people” such as employees and contractors. In addition, the average loss amount per incident caused by internal criminals and malicious insiders was $755,760 (approximately 83.11 million yen)*1, and the damage was enormous. There is also the possibility of losing social trust due to security incidents.

ObserveIT Insider Threat Management (ITM) provided by Proofpoint is one of the internal fraud prevention solutions, and is based on the concept of "preventing 0.1% to protect 99.9% of good employees." You can score operations using a unique analysis algorithm and visualize risks. Unlike traditional follow-up security solutions, it has an immediate deterrent effect by displaying a warning screen to the user or terminating the app or logon session at the exact moment when an internal crime is being committed. It is possible to Macnica began handling ObserveIT in 2017 and has a track record of implementing it in government offices and major telecommunications carriers.

*1 Source: Japanese translation of the Ponemon Institute “Cost of Insider Threat Global Report 2020”

Actual operation screen

Click here for a detailed product overview

External threats - cyberattacks that exploit human vulnerabilities -

On the other hand, there is an increasing number of external cyber-attacks that exploit human vulnerabilities through phishing, business email compromise, etc., rather than attacking system vulnerabilities. According to Nihon Proofpoint's research, about 96% of external attacks are attacks via email, and about 99% of them are aimed at erroneous operations by "humans" ^*2.

Attackers are targeting the vulnerabilities of "people", and it is becoming difficult to completely detect and block them with security devices such as mail gateways alone.

Proofpoint next-generation email security stops malware as well as non-malware threats such as spoofed emails (BEC, also known as business email compromise). Deployable as a cloud service or on-premises, granular classifications such as spam, phishing, malware, adult, bulk, and spoofing are applied to control malicious and mass-distributed unwanted email. It is possible to set according to

It also has the ability to automatically isolate and quarantine dangerous content delivered as email, and once a dangerous message is found it can be removed from the user's Box before they even read it.

*2 Source: Proofpoint “HUMAN FACTOR REPORT 2019”

Click here for a detailed product overview

Security awareness training to strengthen “people”

As attacks targeting not only system vulnerabilities but also human vulnerabilities are on the rise, educating human resources who can flexibly respond to security threats is considered one of the countermeasure solutions for protecting companies from threats. increase.
Proofpoint Security Awareness Training Security awareness training is a SaaS-based training solution that teaches appropriate security knowledge and compliance awareness to target employees along the flow of (1) diagnosis, (2) education, (3) reinforcement, and (4) measurement. I'm here. Increase user awareness with personalized training based on industry-leading threat intelligence.

This SaaS-based solution and continuous training methodology was developed by Wombat Security Technologies (acquired by Proofpoint in March 2018) based on world-renowned research at Carnegie Mellon University. Practicing the PSAT training process can reduce phishing attacks and malware infections by up to 90%.
In addition, with educational content that can be customized in about 40 languages including Japanese, various risks from phishing attacks to internal threats can be explained, so even multinational companies can provide consistent and practical education. . Each module is 5 to 15 minutes on-demand, and the feature is that you can acquire cyber security knowledge like a game.

*3 Source: Proofpoint “US College Lowers Successful Phishing Attacks by 90%”

Click here for a detailed product overview