Resources

Press Releases

Standard Bank Leverages RiskIQ Product Suite to Automate the Defense of its Digital Presence

May 3, 2018

SAN FRANCISCO – May 3, 2018RiskIQ, the global leader in digital threat management, today announced that Standard Bank has deployed its suite of products to automate the discovery and threat analysis of brand infringement, cybercrime and web-based attacks against its digital presence.

Standard Bank Group, the largest African banking group by assets, offers a full range of banking and related financial services. With a presence in 20 countries across the African continent as well as other selected emerging markets, Standard Bank is committed to creating an entirely digital experience for its customers in all geographies.

Like many other global financial service providers, Standard Bank’s digital journey has increased its online presence across web, mobile and social channels, making it difficult to bring all digital assets under the scope of their security program. For example, their central security team lacked visibility into legitimate mobile applications published in the primary app stores being copied and distributed through secondary and affiliate app stores, which could be modified to be malicious, leading to brand and customer impact.

To automate the discovery and threat analysis of the full digital presence, Standard Bank selected RiskIQ as its digital threat management partner, using both RiskIQ Digital Footprint™ and RiskIQ External Threats™ solutions.

“The intelligence provided by RiskIQ has enabled visibility and collaboration between our central and decentralized teams to continually improve our security posture and protect the bank and our customers from cyber threats,” said Robin Barnwell, Head: PBB IT Security. “RiskIQ has now become the CMDB for our Digital Footprint assets.”

RiskIQ now provides Standard Bank in-depth information about its digital assets and highlights potential risks. The Standard Bank security team uses this information to ensure compliance with corporate standards and central visibility of all digital assets, alerting them to changes such as new redirections appearing on webpage links. The team also uses RiskIQ intelligence to clean up domain and certificate registrations and find and update older untrusted certificates across its web estate.

Meanwhile, to uncover brand-related threats, Standard Bank uses Mobile Threats and Domain Infringement, both part of RiskIQ’s External Threats solution. Using the intelligence provided by Mobile Threats, the security team can track where apps are published and request the removal of apps that end up in unauthorized stores, as well as identify and track mobile apps not owned by them that leverage their brands. The Standard Bank team also uses the Domain Infringement module to identify newly-registered domains that infringe on its brand. In conjunction with the marketing team, the Standard Bank security team has recently started monitoring the social media accounts — including corporate accounts, brand accounts, and the social profiles — of key executives, which can be used in phishing and credential-harvesting campaigns and can affect user trust and brand perception.

Given its success with RiskIQ solutions, Standard Bank has gained visibility into its digital presence across web, mobile and social channels and can work with the business to proactively address areas of weakness.

To read the full case study, visit: https://www.riskiq.com/case-study/standard-bank-improves-digital-asset-management-threat-protection-riskiq.

About RiskIQ

RiskIQ is the leader in digital threat management, providing the most comprehensive discovery, intelligence, and mitigation of threats associated with an organization’s digital presence. With more than 75 percent of attacks originating outside the firewall, RiskIQ allows enterprises to gain unified insight and control over web, social and mobile exposures. Trusted by thousands of security analysts, RiskIQ’s platform combines advanced internet data reconnaissance and analytics to expedite investigations, understand digital attack surfaces, assess risk and take action to protect the business, brand and customers. Based in San Francisco, the company is backed by Summit Partners, Battery Ventures, Georgian Partners and MassMutual Ventures.

Visit https://www.riskiq.com or follow us on Twitter. Try RiskIQ Community Edition for free by visiting https://www.riskiq.com/community/.

###

© 2018 RiskIQ, Inc. All rights reserved. RiskIQ is a registered trademark of RiskIQ, Inc. in the United States and other countries. All other trademarks contained herein are property of their respective owners.