Macnica provides Attack Surface Management service to SEGA SAMMY HOLDINGS - Highly accurate investigation identifies approximately 1,200 domains and uncovers risks, contributing to strengthening global governance -

Macnica (headquarters: Yokohama City, Kanagawa Prefecture; Representative Director and President: Kazumasa Hara; hereinafter "Macnica) announced today that it has provided the Attack Surface Management service (hereinafter "ASM service") to Sega Sammy Holdings Inc. (headquarters: Shinagawa Ward, Tokyo; Representative Director and President Group CEO: Satomi Haruki; hereinafter "Sega Sammy Holdings"), contributing to strengthening group governance.

■Background
SEGA SAMMY HOLDINGS is made up of approximately 60 group companies in Japan and overseas. For group companies that do not have their own IT departments, SEGA SAMMY Holdings' systems department manages IT assets, but the sheer number of assets made it difficult to accurately keep track of them all. IT assets that are not properly managed can lead to security incidents due to cyber attacks. In order to solve this problem, SEGA SAMMY Holdings implemented a service that investigated IT assets different from that provided by Macnica, but the survey results contained a lot of noise (information on IT assets not owned by the company), and it was found that the IT assets related to the company The time and cost required to sort out which company's IT assets belonged to each company in the group became a major problem.
Therefore, after looking for a service that had high survey accuracy, was easy to operate, and did not put a burden on the existing environment, we decided to introduce Macnica 's ASM service, which met our requirements.

■Features of ASM service
The ASM service is one of Macnica 's proprietary "Mpression Cyber Security Service™" solutions. Macnica 's security specialists investigate externally disclosed IT assets using the same perspective and techniques as cyber attackers.
The features of the ASM service are: (1) high-precision investigation, (2) almost no operational load, and (3) no load on the server.
① The ASM service provides highly accurate survey results similar to a medical checkup, as Macnica experts carefully examine the survey contents, excluding IT assets that are not related to the target company or its group companies.
② When implementing the ASM service, there is no need to prepare by interviewing each group company, and the survey results will be provided after sorting out which company's IT assets belong to the group. It is possible to deal with this by working together.
③ The ASM service does not send pseudo attack packets such as vulnerability diagnosis to the existing environment, so there is no load on the server.

<Overview of ASM service>

■ Introduction effect
As a result of the investigation, we identified approximately 1,200 domains owned by SEGA SAMMY HOLDINGS and its group companies, and among them, we were able to discover more than 10 IT assets that the system department had not yet grasped or that had risks. Servers using older versions of software with vulnerabilities, use of ports that should not be disclosed to the public, and inadequate device settings were found, some of which were critical risks. By visualizing these risky IT assets and promptly dealing with them, we were able to make a significant contribution to strengthening the governance of the group.

By providing ASM services, Macnica will contribute to the proper management of IT assets and efficient risk management, and will strive to reduce the damage caused by cyber attacks for Japanese companies.

[Click here for details of the case]
https://www.macnica.co.jp/business/security/manufacturers/mpressioncss/case_05.html

[Click here for product inquiries]
Macnica
TEL: 045-476-2010
Email: sec-service@macnica.co.jp

*Company names and product names mentioned in this text are trademarks or registered trademarks of Macnica and each company.
*The information published in the news release (including product price, specifications, etc.) is current as of the date of announcement. Please note that the information may be subject to change without prior notice.