IBL Group has addressed Office 365 email security challenges, including internal threats, thanks to Grove and Mimecast.<\/p>\n
Challenge<\/strong><\/p>\n The IBL Group is the largest conglomerate in Mauritius. Formed in 2016, IBL Group was born from the merger of GML and Ireland Blyth Limited, two of the largest conglomerates in Mauritius at the time. Today, it employs more than 26,000 people in over 280 investment and operational companies, spanning logistics, banking, insurance, finance, retail and hospitality.<\/p>\n With so many businesses and users in its stable, IBL Group wanted an email system that was easy to manage and saw the value in shifting its on-premise email solution to Microsoft Office 365 in the cloud.<\/p>\n \u201cThe moment we did that, our attack surface increased substantially,\u201d said Mevin Goonmeter, IBL Group Infrastructure Operations Manager.<\/p>\n \u201cAt the time we were using the Advanced Threat Protection (ATP) security feature in Office 365, but we saw immediately that it wasn\u2019t enough. As a global enterprise with interests in nearly every industry, we get a lot of attention in the media \u2013 which also means a lot of attention from cybercriminals. We could see via our monitoring mechanism that our Office 365 accounts were being continuously targeted with brute force and impersonation attacks that were especially concerning.<\/p>\n \u201cIt was a massive wake-up call for us. We realised we were dangerously under-protected, and we had to act fast.\u201d<\/p>\n Solution<\/strong><\/p>\n Laurent Fayolle, IBL\u2019s Group IT Executive and Acting CIO, says the Group wanted more than an out-of-the-box solution from a vendor that they\u2019d never see again.<\/p>\n \u201cWe were looking for a partner more than anything else,\u201d he said.<\/p>\n \u201cWe didn\u2019t have any cybersecurity governance in place, and we needed a provider that could guarantee a certain level of protection as well as provide a certain level of comfort to the Audit and Risk Committee. They needed to guide us towards the right decisions, configure the system according to our needs, and be prepared to assist whenever we needed it.\u201d<\/p>\n IBL Group found that support in Grove, a Mimecast reseller and partner.<\/p>\n \u201cI met with Chad Bartlett from Grove and appreciated that he never once tried to sell me anything,\u201d added Fayolle.<\/p>\n \u201cHe asked intelligent questions and tried to understand the challenges we faced in the company and the country. \u201cThis type of cautious and skilled approach is something I\u2019ve yet to see from most local IT providers. Before we even spoke about solutions, Chad knew that he had to understand our business and challenges.\u201d<\/p>\n Goonmeter says IBL did due diligence on a number of solutions and took their time benchmarking and comparing different options. After a successful proof-of-concept covering 200 users, IBL Group signed a three-year contract for 2,000 users. It purchased Mimecast\u2019s Secure Email Gateway with Targeted Threat Protection, Continuity, Archiving and Sync and Recover, to improve its cyber resilience. It also adopted Mimecast Awareness Training, Internal Email Protect services, and Grove\u2019s 24\/7 Support service.<\/p>\n \u201cMimecast ticked all the boxes for us – monitoring, reporting, comfort, protection against all kinds of attacks, but especially impersonation attacks, alerts, a commitment to research and development, a high level of ethics, and \u2013 most importantly \u2013 a value-adding service,\u201d said Goonmeter.<\/p>\n \u201cWith Grove and Mimecast, it was always about more than the solution. We felt comforted by the fact that there would be a skilled team looking after our interests and guiding us to make the right decisions. What started out as a scope for protection from external threats and the ability to recover in the event of an attack, expanded to include internal threat protection and user awareness training \u2013 services that we weren\u2019t looking for in the beginning but that were proposed by Grove to help us address our challenges.\u201d<\/p>\n Results<\/strong><\/p>\n IBL Group saw immediate results after implementing Mimecast.<\/p>\n \u201cEven when we were in \u2018relaxed\u2019 implementation mode, we could already see the benefits in terms of the number of emails and attachments that were being blocked,\u201d said Goonmeter.<\/p>\n \u201cImplementation and fine-tuning happened so smoothly and, if there were any issues, Grove addressed them before they became problems. The entire experience was positive and one that we now want to make available to our investment companies.\u201d<\/p>\n An important part of improving their defences was adopting Mimecast Internal Email Protect.<\/p>\n \u201cWe noticed that quite a few threats came from within our perimeter, which is why we also opted to analyse our internal emails as well,\u201d said Fayolle.<\/p>\n \u201cIf we were to only protect the business from external threats, we would have only covered a portion of our attack surface, leaving us exposed. We now have full visibility of all emails and the assurance that emails sent between internal users are analysed. Infected emails and\/or attachments are automatically removed from users\u2019 inboxes.\u201d<\/p>\n Both Goonmeter and Fayolle are also excited about rolling out Mimecast Awareness Training.<\/p>\n \u201cWe haven\u2019t implemented this yet, but I\u2019ve seen the videos and I love the characters \u2013 and I\u2019m sure our users will also love the engaging content,\u201d said Goonmeter.<\/p>\n Fayolle, meanwhile, notes that security awareness training is a focus area for IBL Group because human error was often part of the attacks. No matter how effective your security technology is employee mistakes still pose a threat to your organisation.<\/p>\n \u201cIrregular sessions and boring \u2018death by presentation\u2019 don\u2019t work anymore,\u201d said Fayolle.<\/p>\n \u201cMimecast\u2019s training makes it interesting and will help to increase the level of security awareness across the organisation.<\/p>\n \u201cUsers are now responsible for closely inspecting the emails they receive and will be forced to think twice before clicking on a link or opening an attachment from an unknown sender.\u201d<\/p>\n Conclusion<\/strong><\/p>\n IBL Group\u2019s executives voted in 2018 that cybercrime was among the top risks facing the organisation.<\/p>\n \u201cIt\u2019s nothing new but the impact that cybercrime is having globally is worrying,\u201d said Fayolle.<\/p>\n \u201cWe had a reality check two years ago. We were lucky in that there was no major impact to the business, but it was an opportunity to fill the gaps in the business. We were under fire and we knew we were going to be in trouble if we didn\u2019t take the necessary steps to protect ourselves.\u201d<\/p>\n His advice to other businesses is not to wait until it\u2019s too late.<\/p>\n \u201cUnderstand your challenges, align your business objectives with your technology and cyber resilience strategy and find a partner who can support you and help you to find the right solution for your requirements,\u201d said Fayolle.<\/p>\n <\/p>\n","protected":false},"excerpt":{"rendered":" IBL Group has addressed Office 365 email security challenges, including internal threats, thanks to Grove and Mimecast. Challenge The IBL Group is the largest conglomerate in Mauritius. Formed in 2016, IBL Group was born from the merger of GML and Ireland Blyth Limited, two of the largest conglomerates in Mauritius at the time. Today, it […]<\/p>\n","protected":false},"author":25,"featured_media":26929,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[34,338,5,19,9059,13,262],"tags":[9759,10080,1568,2176,856,10073,9855,10072,5248,10074,10079,345,10075,2178,484,10078,10076,2110,10077,5247],"class_list":["post-26928","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-case-studies","category-case-study-newsletter","category-enterprise-security","category-regional-news","category-south-africa","category-top-stories","category-used","tag-archiving","tag-chad-bartlett","tag-continuity","tag-cyber-resilience","tag-email-security","tag-gml","tag-grove","tag-ibl-group","tag-internal-email-protect","tag-ireland-blyth-limited","tag-laurent-fayolle","tag-mauritius","tag-mevin-goonmeter","tag-microsoft-office-365","tag-mimecast","tag-mimecast-awareness-training","tag-mimecast-secure-email-gateway","tag-office-365","tag-sync-and-recover","tag-targeted-threat-protection"],"acf":[],"publishpress_future_workflow_manual_trigger":{"enabledWorkflows":[]},"_links":{"self":[{"href":"https:\/\/www.intelligentcio.com\/africa\/wp-json\/wp\/v2\/posts\/26928","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.intelligentcio.com\/africa\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.intelligentcio.com\/africa\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.intelligentcio.com\/africa\/wp-json\/wp\/v2\/users\/25"}],"replies":[{"embeddable":true,"href":"https:\/\/www.intelligentcio.com\/africa\/wp-json\/wp\/v2\/comments?post=26928"}],"version-history":[{"count":4,"href":"https:\/\/www.intelligentcio.com\/africa\/wp-json\/wp\/v2\/posts\/26928\/revisions"}],"predecessor-version":[{"id":26987,"href":"https:\/\/www.intelligentcio.com\/africa\/wp-json\/wp\/v2\/posts\/26928\/revisions\/26987"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.intelligentcio.com\/africa\/wp-json\/wp\/v2\/media\/26929"}],"wp:attachment":[{"href":"https:\/\/www.intelligentcio.com\/africa\/wp-json\/wp\/v2\/media?parent=26928"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.intelligentcio.com\/africa\/wp-json\/wp\/v2\/categories?post=26928"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.intelligentcio.com\/africa\/wp-json\/wp\/v2\/tags?post=26928"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}