Genesis Financial Solutions

Varonis provides insight to Genesis Financial Solutions’ sensitive data

PDF download




THE CUSTOMER

Location: Beaverton, Oregon

Industry: Financial

Products: DatAdvantage and DatAlert

Genesis Financial Solutions is the leader in providing access to second-look financing for credit-challenged customers.

genisis

We often hear that we have a strong data ownership program in place. It’s something we’ve been focused on for a while, but it would not have been possible to reach this level without Varonis. Manually this process would have taken additional staff and weeks to create, but with Varonis I can do it myself in a matter of minutes. If you have a lot of sensitive data and you don’t know definitively who has access to which files, I don’t think there’s another business software out there that does what Varonis DatAdvantage is doing.

— Matt Farnham – Information Security Officer, Genesis Financial Solutions

BUSINESS REQUIREMENTS:

  • Insider threats and least privilege: Genesis Financial Solutions wanted a solution that could alert on unusual behavior and implement a least privilege model so that employees only have access to the data they need.
  • Data access and insights: The company needed a solution to provide insight into where all its sensitive data is held, who owns it, who has access, and who is using that access.
  • Compliance: The financial institution is regulated and must follow certain policies and federal guidelines for ownership and access.

THE VARONIS SOLUTION / RESULTS

As a financial institution, lender and America’s largest second-look and supplemental point-of-sale financing provider, Genesis Financial Solutions understands the importance of data protection, control, security and compliance. While the company was meeting its compliance guidelines, it needed a solution to provide insight into where its sensitive data is held, who owns it, who has access, and who is using and possibly abusing that access. After an extensive search, Genesis Financial Solutions found and implemented Varonis DatAdvantage and DatAlert.

DATA OWNERSHIP

Matt Farnham, Information Security Officer at Genesis Financial Solutions, said, “We often hear that we have a strong data ownership program in place.  It’s something we’ve been focused on for a while, but it would not have been possible to reach this level without Varonis. Manually this process would have taken additional staff and weeks to create, but with Varonis I can do it myself in a matter of minutes. If you have a lot of sensitive data and you don’t know definitively who has access to which files, I don’t think there’s another business software out there that does what Varonis DatAdvantage is doing.”

DATA CONTROL AND LOSS PREVENTION

With the help of Varonis DatAdvantage, Genesis Financial Solutions is able to implement a least privilege model so that employees only have access to the data they need to do their job. It also makes it easy to identify who has access and set alert triggers for any unusual activity, anomalies or lack of use that could indicate potential threats.

Farnham added, “During the implementation process, it was eye opening to see how granularly Varonis could show us who had access to which files. Now if a file is encrypted, moved or deleted, we’ll be able to remediate it quickly. This is particularly useful for recent malware gaining traction, like ransomware. We run ransomware tests often, and the Varonis blog is a great source for rules to test.”

ALERTING HELPS DETECT POTENTIAL VULNERABILITY

Varonis DatAlert provides Genesis with another valuable detection capability. “The alerting gives us peace of mind,” Farnham said. “For example, we have an alert set up around administrative access. Whenever a new user is assigned administrative privileges, we get an alert. So far, every time it’s happened, it’s been a legitimate new user to our help desk or infrastructure team. But I know that DatAlert works, and I’m glad to get that e-mail, because if somebody were given administrative privileges incorrectly, or some kind of malware took over someone’s account privileges, we would know right away.”

                                                                                                                     ***

Varonis Risk Assessments quickly show you where your most vulnerable data is stored, who is accessing it, and what needs to be done to secure it. Find out more here.