Macnica to support deployment of CrowdStrike Falcon to up to 60,000 devices across the JR East Group

Macnica (Headquarters: Yokohama City, Kanagawa Prefecture, President: Kazumasa Hara, hereinafter Macnica) is a total Services & Solutions provider in semiconductors, networks, cybersecurity, and AI/IoT. We are pleased to announce that we have provided endpoint protection "CrowdStrike Falcon Platform" (hereinafter referred to as CrowdStrike) to JR East Information System (hereinafter referred to as JEIS).

■ Background of this support
As the technical group responsible for ICT for the JR East Group, JEIS supports Japan's important social infrastructure by providing a wide range of services, including Suica/station service solutions and railway business solutions. In the JR East Group, as a security infrastructure, East Japan Railway Company (hereafter referred to as JR East) and each company in the JR East Group separately implemented endpoint security measures. In the future, JEIS will start providing the JR East Endpoint Security Service (hereafter, JRE-ESS) to the JR East Group with the aim of building even stronger and unified security measures for the entire group. .

■ Reasons for using CrowdStrike
JEIS has selected CrowdStrike as its security platform for JRE-ESS. The three main selection criteria and evaluation points are listed below.
・It was necessary to appropriately share the operation work between JEIS and JR East Group companies. CrowdStrike has released multi-tenant management (Falcon Flight Control) that allows flexible management of permission assignments related to settings, making it possible to efficiently check the logs of each tenant.
・As a result of comparing multiple products for many requirements, including device control functions, CrowdStrike had the widest coverage.
・From the perspective of improving the efficiency of human resources and strengthening SOC, we wanted to manage CrowdStrike by linking it with SIEM (Security Information and Event Management) and ITSM (IT Service Management). CrowdStrike had a wealth of data integration and transfer options.

■ Effects of introduction
After the introduction, we have realized the following three effects.
・By centralizing asset information and vulnerability information, the load on human resources related to operation has been greatly reduced.
・The behavior of terminals that could not be grasped until now has been visualized, and the process of identifying the cause of suspicious behavior has been clarified.
・With the asset management function, it is now possible to smoothly isolate problems before detailed analysis of operation logs.

■ Future prospects
This time, JEIS has started the deployment of JRE-ESS assuming a maximum of 100 companies and 60,000 units for the JR East Group. In the future, when there is suspicious behavior on the terminal, we will use the real-time response (remote control) function to advance fast forensics (immediate cause investigation), aiming to improve operational efficiency. increase. Through these improvements, we plan to strengthen security operations and enhance agility.

Macnica made appropriate adjustments to ensure that there were no discrepancies between CrowdStrike Co., Ltd. and SIers in providing CrowdStrike Falcon, and supported the integration and construction of other products used in JRE-ESS. Going forward, we will continue to make use of our customer-focused technical support and support capabilities to support Japan companies in strengthening their security.

*Company names and product names mentioned in this text are trademarks or registered trademarks of Macnica and each company.
*The information published in the news release (including product price, specifications, etc.) is current as of the date of announcement. Please note that the information may be subject to change without prior notice.