Success Story
Protecting an Innovative and Evolving Enterprise
Tower Defends Critical Systems during a Far-Reaching Digital Transformation with Risk-Based Prioritization from Qualys
Global insurance and asset management
950
Employees
International
SNAPSHOT
Leading general insurance provider, offering cover for homes, cars, contents, businesses and more Founded 1869 in Dunedin, New Zealand
Headquartered in New Zealand, with offices in Fiji, Samoa, American Samoa, Tonga, and the Cook Islands
950 employees
Website: tower.co.nz
Products: Cybersecurity Asset Management, Enterprise TruRisk Management (ETM), PCI Compliance, Threat Protection, TotalCloud, Vulnerability Management, Detection & Response (VMDR)
Summary
Born and bred in New Zealand, Tower has been supporting their customers when they need it most for more than 155 years. In that time, they’ve grown to operate across New Zealand and the Pacific Islands, supporting more than 300,000 customers. A focus on continuous innovation and investment in large-scale digital transformation has enabled the business to evolve rapidly, in line with the latest technology and customer expectations.
Products
Cybersecurity Asset Management, Enterprise TruRisk Management (ETM), PCI Compliance, Threat Protection, TotalCloud, Vulnerability Management, Detection & Response (VMDR)
Products: Cybersecurity Asset Management, Enterprise TruRisk Management (ETM), PCI Compliance, Threat Protection, TotalCloud, Vulnerability Management, Detection & Response (VMDR)
Pull Stats
Helps protect more than 2,000 endpoints
Improves prioritization of remediation work
Reduces vulnerability management costs
Business Background
As part of Tower’s digital transformation, the business moved away from legacy systems on the mainframe to responsive, cloud-first services on Kubernetes, targeting an effective way to protect the new workloads while ensuring regulatory compliance.
As a business committed to continued investment in technology, digital and data, for Tower, it’s about thinking ahead to ensure the business is future ready for its customers and communities.
Quote 1
As a forward thinking business we’re focused on keeping pace with the evolving needs of our customers and business. When we set out to find an exposure detection and response solution, almost every supplier we spoke with recommended Qualys as the market-leading vendor. More than a decade since we first adopted the platform, Qualys continues to help us expand and enhance our capabilities.
- Darren Beattie, Head of Information Security, Tower
Business Challenges
Protect thousands of endpoints, including servers, laptops and workstations
Address regulatory compliance requirements, including the Payment Card Industry Data Security Standard (PCI DSS)
Detect vulnerabilities in APIs and software libraries for fast-growing cloud-native workloads
Move beyond CVSS scores to enable a risk-based approach to remediation and hardening
Understand the possible financial impacts of cyber threats on business-critical systems
Improve operational cost-efficiency by replacing multiple third-party scanning tools with a single-vendor solution
As a forward thinking business we’re focused on keeping pace with the evolving needs of our customers and business. When we set out to find an exposure detection and response solution, almost every supplier we spoke with recommended Qualys as the market-leading vendor. More than a decade since we first adopted the platform, Qualys continues to help us expand and enhance our capabilities.”
THE BUSINESS CHALLENGE
Qualys Solution
By harnessing the Qualys Enterprise TruRisk Platform, Tower can rapidly detect and remediate vulnerabilities across its estate while demonstrating full compliance to industry regulators.
“Tower is constantly innovating and looking for ways to do things more efficiently and effectively so, when we first started with Qualys, we wanted to understand risk exposure across our cloud and on-premises environments to prioritize remediation work based on accurate threat intelligence,” says Beattie. “Qualys enabled us to achieve all that and more. Today, Qualys TruRisk™ scores are at the heart of our approach to communicating and mitigating risk - including presenting the potential financial impacts of these decisions to our risk committee.”
Building on its early vulnerability management success, Tower augmented its capabilities with additional Qualys solutions, including PCI Compliance and Cybersecurity Asset Management.
Robert Kehl, Tower Senior Security Operations Specialist, says: “I’ve worked with several major cybersecurity tools on the market. Every solution on the Qualys platform speaks the same language, which means we start seeing the benefits very quickly whenever we add new capabilities.”
In the latest phase of its journey with Qualys, Tower is piloting Qualys TotalCloud™ to help protect its cloud-native applications throughout their lifecycle. The company is also preparing to adopt Qualys Enterprise TruRisk Management, creating Tower’s first risk operations center.
Beattie says, “With TotalCloud, we can offer our developers fast and comprehensive insight into their Kubernetes security posture in a single place. Central visibility from TotalCloud will eliminate the need for several of the third-party tools we’re using now. And by enabling a unified risk operations center with Qualys Enterprise TruRisk Management, we’ll be able to work ever more closely with the business - providing deeper insights into threats affecting their specific product sets.”
Quote 2
“As security practitioners, everything we do is about managing risk. With Qualys Enterprise TruRisk Management, we can provide daily or even hourly risk insights to our business units and help them understand the potential financial impact of delaying remediation work. Making data-driven decisions using Enterprise TruRisk Management is going to be a game-changer - as a business we are always thinking ahead to ensure Tower is future ready for our customers and communities, so we’re excited to get started.”
“As security practitioners, everything we do is about managing risk. With Qualys Enterprise TruRisk Management, we can provide daily or even hourly risk insights to our business units and help them understand the potential financial impact of delaying remediation work. Making data-driven decisions using Enterprise TruRisk Management is going to be a game-changer - as a business we are always thinking ahead to ensure Tower is future ready for our customers and communities, so we’re excited to get started.”
Qualys Difference
Helps organize remediation based on rich context including business risk and threat intelligence, improving prioritization by 91%
Delivers rapid insights into vulnerabilities across on-premises and cloud assets using Qualys Cloud Agents
Reduces operational costs by 20% by building on the Qualys platform rather than acquiring third-party tools
Promotes better-informed risk decisions by offering context-rich insights to teams throughout the business
Address all core regulatory and audit requirements, including frameworks such as PCI DSS
Lays the foundation for a unified risk operations center with Enterprise TruRisk Management
More info on featured products
ABOUT QUALYS
Qualys, Inc. (NASDAQ: QLYS) is a pioneer and leading provider of disruptive cloud-based security, compliance and IT solutions with more than 10,000 subscription customers worldwide, including a majority of the Forbes Global 100 and Fortune 100. Qualys helps organizations streamline and automate their security and compliance solutions onto a single platform for greater agility, better business outcomes, and substantial cost savings. For more information, please visit qualys.com. Qualys, Qualys VMDR® and the Qualys logo are proprietary trademarks of Qualys, Inc. All other products or names may be trademarks of their respective companies.
