Macnica provides SSPM solution "Adaptive Shield" to NEC - Visualizes SaaS configuration deficiencies and enables secure operation -

Macnica (Headquarters: Yokohama, Kanagawa Prefecture, President: Kazumasa Hara, hereinafter referred to as "Macnica"), a total Services & Solutions provider in semiconductors, networks, cybersecurity, and AI/IoT, is pleased to announce that NEC Corporation (Headquarters: Minato-ku, Tokyo, Board Director Executive Officer President and CEO: Takayuki Morita, President and CEO: Takayuki Morita, NEC) is pleased to announce that it has provided Adaptive Shield, a dedicated solution for SaaS Security Posture Management (SSPM).

■ Background
Aiming to transform itself into a next-generation digital platform, NEC is promoting DX by rapidly expanding the use of SaaS within the company. Until now, when introducing SaaS, we have implemented sufficient security measures such as strict screening and investigation of secure settings, so that problems such as incidents due to improper settings have not occurred. However, as the types of SaaS and the number of users increased rapidly, it became difficult to respond with conventional methods. In addition, since each SaaS has a separate operation department, there was also the issue of differences in security baselines. Under such circumstances, in response to a series of security incidents in Japan and overseas due to improper SaaS settings around 2021, we decided to consider a mechanism for realizing secure operation of SaaS. In order to eliminate concerns such as whether the company's SaaS really maintains secure settings and whether settings are correctly checked when new services and functions are added, Adaptive Shield, which performs SaaS setting audits introduced.

■What is Adaptive Shield?
Adaptive Shield is an SSPM specific solution for SaaS configuration audits. For safe utilization of SaaS, we provide a function to continuously check mainly security settings and compliance with various compliances.

The decisive factors for introducing Adaptive Shield at NEC are as follows.
・More than 30 types of SaaS are supported, and the number of security audit items is overwhelmingly larger than that of tools for checking cloud settings.
・Evaluate settings comprehensively and objectively, and check the real-time status on the dashboard, such as how many high-risk setting errors remain
・ Secure operation is possible by centrally implementing regular audits four times a year and constant monitoring using the alert function for multiple SaaS settings.

■Effects of implementation and future prospects
At NEC, the introduction of Adaptive Shield has enabled the automatic auditing of configuration tasks that previously relied on the knowledge and know-how of each SaaS operations department, using unified standards. This has enabled them to keep up with SaaS updates without incurring additional man-hours, leading to improved quality and a significant reduction in the operational burden.
In addition to increasing the number of SaaS audited by Adaptive Shield, NEC has partnered with Macnica to release a customer service using Adaptive Shield (SaaS Security Configuration Management Professional Service) in February 2022. Going forward, NEC aims to continue to provide this service widely, taking advantage of the know-how it has gained from its own implementation and operation experience.

As the primary domestic distributor of Adaptive Shield, Macnica will continue to support our customers' secure SaaS operations by leveraging the specialized knowledge we have accumulated.

[Click here for details of the case]
https://www.macnica.co.jp/business/security/manufacturers/adaptiveshield/case_01.html

*Company names and product names mentioned in this text are trademarks or registered trademarks of Macnica and each company.
*The information published in the news release (including product price, specifications, etc.) is current as of the date of announcement. Please note that the information may be subject to change without prior notice.