90%
Reduction in Time Spent Gathering and Reporting Security Information
Automated
Security Monitoring Replaced Manual Processes
Centralized
Security Alert Management
Alacriti is a fintech company specializing in payments. Alacriti’s unified platform, Orbipay, supports three payment-related use cases — electronic bill presentment and payments (EBPP), digital disbursements, and subscription billing. The technology enables clients to reduce costs, improve efficiency, and deliver innovative experiences to their customers.
Implementing Security Was Beginning to Take a LONG Time
Alacriti implements several security applications to collect compliance checks. Individually, Alacriti was mapping CIS (Center for Internet Security) benchmarking items with the cloud. However, this was a manual exercise. IAM (Identity and Access Management) user’s activity and PCI DSS (Payment Card Industry Data Security Standard) were manually reviewed and reported to Alacriti’s ticketing system. As Alacriti grew, gathering this information independently became a time-consuming ordeal.
Introducing AWS Security Hub
The decision was easy to make. Alacriti leveraged its own consulting business, Alacriti Consulting, to implement AWS Security Hub in 2019. AWS Security Hub gave Alacriti a comprehensive view of all their high-priority security alerts and security posture across their whole AWS account. With Security Hub, Alacriti now has a single place to aggregate, organize, and prioritize their security alerts, or findings, from their AWS services, like Amazon GuardDuty, Amazon Macie, AWS Identity and Access Management (IAM), and AWS Firewall Manager
More Efficiency Than Alacriti Could Have Hoped For
Alacriti was able to gain security of its platform with AWS Security Hub. AWS Security Hub continuously monitors Alacriti’s environment using automated security checks based on the AWS best practices and industry standards that Alacriti’s organization follows. Alacriti was able to reduce their time gathering and reporting information by 90%, cutting out the manual work for an automated process with real-time information.
