Executive Summary
A U.S. regional financial institution needed to strengthen its data-protection posture while meeting SOX, GLBA, PCI DSS, and Federal Reserve Board (FRB) mandates. Pellera Technologies delivered a holistic strategy anchored by IBM Guardium — closing federal audit findings, reducing false positives, and establishing a governed, scalable data-protection program built to mature over time.
The Challenge
A U.S. regional financial institution needed to strengthen its data-protection posture while meeting SOX, GLBA, PCI DSS, and Federal Reserve Board (FRB) mandates. Despite investments in Zscaler, Proofpoint, and formerly Symantec DLP, the program lacked a cohesive strategy, consistent governance, and operational maturity, with limited visibility into sensitive data, high false-positive rates, gaps from removed Symantec endpoint agents, and findings from FRB audits.
The Solution
Pellera delivered a holistic strategy that improved existing investments and closed gaps with complementary technology:
01
Strategy & Roadmap
Defined a phased approach and long-term program governance, informed by a maturity assessment.
02
IBM Guardium (GDP + VA)
Deployed Guardium for database activity monitoring plus a Vulnerability Assessment application to identify, prioritize, and remediate database risks.
03
Netwrix DLP
Implemented Netwrix DLP to meet regulatory requirements and close the gaps left by removed Symantec endpoint agents.
04
Symantec DLP Optimization
Tuned policies to cut false positives, optimized incident response, enhanced Network Discover scans, and added Symantec DLP Cloud Service for Email.
The Results
The engagement moved the bank from fragmented tooling to a governed program:
Closed FRB audit findings
Resolved federal regulatory findings identified during an FRB audit.
Fewer false positives
Reduced performance issues and significantly lowered false positives in Symantec DLP.
Cloud email visibility
Gained visibility into sensitive data across cloud email environments.
Sustainable roadmap
Established a well-defined program positioned to mature over time.
Value Delivered
Pellera moved the bank beyond point-in-time compliance toward a proactive, governed, and scalable data-protection program.
Conclusion
Pellera pairs IBM Guardium with deep data-security expertise to turn complex compliance challenges into resilient, governed data-protection programs. Learn more about our data security services and schedule a consultation today.
