Forcepoint > Case Studies > BSE Secures Sensitive Data with Forcepoint DLP

BSE Secures Sensitive Data with Forcepoint DLP

Company Size

1,000+

Region

Asia

Country

India

Product

Forcepoint DLP

Tech Stack

Data Loss Prevention
User Behavior Analysis

Implementation Scale

Enterprise-wide Deployment

Technology Category

Cybersecurity & Privacy - Database Security
Cybersecurity & Privacy - Network Security

Applicable Industries

Finance & Insurance

Applicable Functions

Business Operation

Use Cases

Cybersecurity

Services

Software Design & Engineering Services
System Integration

About The Customer

Founded in 1875, BSE (formerly known as Bombay Stock Exchange Ltd.) is Asia’s first stock exchange. Today, BSE provides an efficient and transparent market for trading in equity, currencies, debt instruments, derivatives and mutual funds. It also provides a host of other services to capital market participants, including risk management, clearing, settlement, market data services and education. BSE ranks among India’s most critical infrastructure, according to the National Critical Information Infrastructure Protection Centre. It houses highly sensitive, critical corporate and trading data belonging to over 5,500 corporate houses listed on the exchange.

The Challenge

BSE, Asia’s first stock exchange, houses highly sensitive, critical corporate and trading data belonging to over 5,500 corporate houses listed on the exchange. It is one of India’s most critical infrastructures, and it is their responsibility to ensure the security and integrity of this sensitive data. They needed to maintain stringent, around-the-clock monitoring to secure the data from any possible internal or external threats. In an attempt to strengthen its security posture, BSE underwent a complete revamp of all its cybersecurity systems, opting to replace its existing security products with new, cutting-edge technology solutions, including for DLP, which is an integral part of BSE’s overall security strategy. BSE wanted a comprehensive solution that covered endpoint, network and e-mail.

The Solution

After careful evaluation, BSE decided to implement Forcepoint DLP, in order to provide end-to-end coverage across the entire network, end point and email. BSE found Forcepoint DLP to be built on new and more robust technology that provided both data leakage and user behavior analysis from a single solution. This feature, BSE realized, would help it move from a detection to prediction mechanism, critical in today’s constantly evolving threat landscape. Forcepoint DLP surpassed other DLP vendors because of it encompasses more than 1700 compliance, regulation and region policies, which would provide BSE with an easier deployment and, ultimately, faster ROI. It also provides Drip DLP functionality and advanced analytics through Incidence Risk Ranking (IRR) to reduce the problematically high number of false positives. Forcepoint DLP also offered seamless integration with BSE’s existing software and systems—including with O365—without any additional cost. Built-in OCR functionality and native encryption for USB were also provided at no additional cost.

Operational Impact

Through stringent monitoring, strengthened by a 24x7 support model with locally available TAC, Forcepoint DLP is helping BSE keep track of how and where data travels in and out of their organization.
Being able to track data movement has helped BSE prevent any unauthorized access of data, both accidental and malicious.
When a user tries to access and copy unauthorized data to an endpoint device (eg., pen drive, external storage drive, end user laptop), the system blocks the action and then sends an email or SMS alert to IT.
If a user tries to send any unauthorized data over email, a similar alert is generated and necessary action is taken, plugging all possible data loss points – endpoint, network and email—and thwarting any possible security breach.
BSE enjoys the flexibility to operate from anywhere, using Forcepoint DLP’s built-in incident workflow management to take action on DLP incidents without logging into the console.