{"id":15084,"date":"2022-06-07T14:32:05","date_gmt":"2022-06-07T13:32:05","guid":{"rendered":"https:\/\/www.intelligentcio.com\/apac\/?p=15084"},"modified":"2026-07-22T15:04:32","modified_gmt":"2026-07-22T14:04:32","slug":"bayad-secures-its-digital-transformation-with-aqua-security","status":"publish","type":"post","link":"https:\/\/www.intelligentcio.com\/apac\/2022\/06\/07\/bayad-secures-its-digital-transformation-with-aqua-security\/","title":{"rendered":"Bayad secures its Digital Transformation with Aqua Security"},"content":{"rendered":"\n<p><strong><em>Bayad, a leading payment platform in the Philippines, is utilizing Aqua\u2019s portfolio of cloud-native security solutions to ensure security and compliance of its digital wallet platform, biller aggregator service and bills payment platforms.<\/em><\/strong><\/p>\n\n\n\n<p>Bayad (CIS Bayad Center, Inc.) is the largest multi-channel payment platform in the Philippines, and the country\u2019s pioneer in outsourced payment collection.<\/p>\n\n\n\n<p>Bayad offers a suite of solutions ranging from dependable bill collection for corporate partners to reliable, convenient payment services for the public. Bayad emphasizes security of sensitive data and high availability, which allow businesses and customers to confidently accomplish their financial and commercial interests.<\/p>\n\n\n\n<p>Bayad uses Aqua\u2019s portfolio of cloud-native security solutions to ensure security and compliance of its digital wallet platform, biller aggregator service and bills payment platforms.<\/p>\n\n\n\n<p><strong>The challenge<\/strong><\/p>\n\n\n\n<p>Bayad has been investing in a shift to cloud-native application methodologies, using container and serverless technologies to increase agility, scalability and resilience of key applications.<\/p>\n\n\n\n<p>As part of this initiative, the organization must enable developers to focus on writing code while eliminating roadblocks to secure deployment. Operating in a highly regulated industry required Bayad to overcome some critical challenges, including:<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>Ensure that stakeholders, from development to security, have visibility into the risk posture and compliance status of development artifacts, running applications and cloud environments.<\/li><li>Detect and resolve information leakage across the application and cloud ecosystem.<\/li><li>Facilitate an evolution from legacy systems that are unable to meet the growing demands and expectations of the market.<\/li><\/ul>\n\n\n\n<ul class=\"wp-block-list\"><li>Establish unified security standards and security control points for more than a thousand functions across multiple web applications, mobile applications and APIs.<\/li><\/ul>\n\n\n\n<ul class=\"wp-block-list\"><li>Support compliance requirements of the Banko Sentral ng Pilipinas (Central Bank) and PCI-DSS certification.<\/li><\/ul>\n\n\n\n<p>By shifting to a cloud-native architecture, we could generate greater business value and deliver on customer expectations more quickly.<\/p>\n\n\n\n<p>\u201cGoing serverless enables us to run our new Bayad applications smoothly,\u201d explains Lawrence Ferrer, President and CEO, \u201cpaving the way to an improved payment experience for Filipinos as they continue to navigate their way in the new normal.\u201d<\/p>\n\n\n\n<p><strong>The evaluation<\/strong><\/p>\n\n\n\n<p>When evaluating potential tools to overcome Bayad\u2019s challenges and elevate its standard for cloud-native security, stakeholders from the cybersecurity department identified solution requirements and selection criteria. These included:<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>Security controls that support automation across agile DevOps workflows and cloud-native development pipelines.<\/li><\/ul>\n\n\n\n<ul class=\"wp-block-list\"><li>Extensive integration support for a variety of Amazon tools and services, including AWS CodePipeline, AWS CodeBuild and Amazon Landing Zone.<\/li><\/ul>\n\n\n\n<ul class=\"wp-block-list\"><li>Ability to analyze container images and prioritize vulnerabilities for remediation.<\/li><\/ul>\n\n\n\n<ul class=\"wp-block-list\"><li>Ability to detect security risks in serverless functions, supporting Lambda and Fargate.<\/li><\/ul>\n\n\n\n<ul class=\"wp-block-list\"><li>Ability to detect, prevent and respond to anomalous activity at runtime.<\/li><\/ul>\n\n\n\n<p>\u201cGiven Bayad\u2019s direction for cloud adaptation,\u201d states Mel Migri\u00f1o, Meralco Group CISO, \u201cwe had to prioritize security controls in this new environment to ensure that the environment remains secure and intact.\u201d<\/p>\n\n\n\n<p>Bayad\u2019s evaluation included market research to establish a viable short list of potential vendors, followed by providing requirements to candidates, collecting detailed responses from each<\/p>\n\n\n\n<p>and accomplishing a cost-benefit analysis.<\/p>\n\n\n\n<p>\u201cBased on the assessment of our team,\u201d continued Migri\u00f1o, \u201cAqua offers the capabilities that best match our environment from containers all the way to serverless.\u201d<\/p>\n\n\n\n<p>Additionally, the team regarded the strong solution competency and rapid response to communications by Aqua\u2019s local partner as positively influential in their evaluation.<\/p>\n\n\n\n<p><strong>The solution<\/strong><\/p>\n\n\n\n<p>Bayad selected Aqua\u2019s cloud-native application protection platform to secure its Digital Transformation. The chosen Aqua solutions and critical capabilities include:<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>Container image vulnerability scanning<\/li><li>Serverless function security scanning<\/li><li>Cloud security posture management (CSPM)<\/li><li>Cloud workload protection and runtime security<\/li><li>Risk-based insights (vulnerability prioritization and triage)<\/li><li>Flexible security policies with audit\/enforce modes<\/li><li>Deep integration with key Amazon solutions for DevOps<\/li><\/ul>\n\n\n\n<p>At inception, Bayad involved stakeholders from security, development and cloud deployment teams. Initial implementation activities were deliberate and gradual, accelerating for subsequent<\/p>\n\n\n\n<p>projects.<\/p>\n\n\n\n<p>\u201cIn the first application integration,\u201d explained Migri\u00f1o, \u201cwe held weekly project meetings and daily deployment and troubleshooting activities with the local Aqua partner to ensure the<\/p>\n\n\n\n<p>successful integration of the solution.\u201d<\/p>\n\n\n\n<p>With Aqua, Migri\u00f1o and team are able to assess security risks in the pipeline before applications get pushed into production.<\/p>\n\n\n\n<p>This includes detecting and remediating vulnerabilities in container images and serverless functions, security misconfigurations in cloud environments, and the presence of hidden secrets and sensitive data in application artifacts.<\/p>\n\n\n\n<p>Aqua is also being used to extend security controls into production environments, where Aqua detects and prevents anomalous or disallowed behaviors at runtime.<\/p>\n\n\n\n<p>Additionally, Bayad is better prepared to adhere to industry best practices and compliance requirements, supporting principles of least privilege, detecting anomalies at runtime, and hardening cloud infrastructure.<\/p>\n\n\n\n<p>\u201cUsing the Aqua solution has helped prevent potential exposure of sensitive information, credentials, and keys that could have led to account takeover and system compromise,\u201d said Lawrence Ferrer, President and CEO.<\/p>\n\n\n\n<p>As a result of their relationship with Aqua and its local partner, Bayad has realized its vision for greater security of critical applications, protection of sensitive business and customer data, and compliance with industry requirements.<\/p>\n\n\n\n<p>\u201cWith Aqua, we now have visibility on the vulnerabilities of our cloud-native applications,\u201d stated Migri\u00f1o, \u201cand it helps us prioritize remediation of these so our security operations<\/p>\n\n\n\n<p>team is not overwhelmed.\u201d<\/p>\n\n\n\n<p>\u201cWe are satisfied with the Aqua product and its feature enhancements,\u201d expressed Ferrer. \u201cWe also like the visibility and support given by their local partner. In the past 12 months, we<\/p>\n\n\n\n<p>have expanded Aqua\u2019s footprint twice and added new capabilities to our implementation.\u201d<\/p>\n\n\n\n<div class=\"wp-block-image\"><figure class=\"alignleft size-full is-resized\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/www.intelligentcio.com\/apac\/wp-content\/uploads\/sites\/44\/2022\/06\/Mel-Migrino^J-Meralco-Group-CISO-W.jpg\" alt=\"\" class=\"wp-image-15085\" width=\"272\" height=\"272\" srcset=\"https:\/\/www.intelligentcio.com\/apac\/wp-content\/uploads\/sites\/44\/2022\/06\/Mel-Migrino^J-Meralco-Group-CISO-W.jpg 334w, https:\/\/www.intelligentcio.com\/apac\/wp-content\/uploads\/sites\/44\/2022\/06\/Mel-Migrino^J-Meralco-Group-CISO-W-300x300.jpg 300w, https:\/\/www.intelligentcio.com\/apac\/wp-content\/uploads\/sites\/44\/2022\/06\/Mel-Migrino^J-Meralco-Group-CISO-W-150x150.jpg 150w\" sizes=\"auto, (max-width: 272px) 100vw, 272px\" \/><figcaption><strong>Mel Migri\u00f1o, Meralco Group CISO<\/strong><\/figcaption><\/figure><\/div>\n\n\n\n<p><em>We asked Mel Migri\u00f1o, Meralco Group CISO, further questions to find out more.<\/em><\/p>\n\n\n\n<p><strong>Can you describe how your legacy systems were falling short of your company\u2019s requirements?<\/strong><\/p>\n\n\n\n<p>Once we had made the decision to move to a fully cloud-native architect, we were experiencing several challenges with our existing systems. We found that there was a lack of visibility on workloads and the cloud environments. We were wasting time verifying components in the registry.<\/p>\n\n\n\n<p>On a broader level, we wanted systems more suited to our transition from DevOps to DevSecOps and provide assurance to our stakeholders that new practices brought by this transition are effective and stable.<\/p>\n\n\n\n<p><strong>What was the thinking behind the decision to \u2018go serverless\u2019 and move to a cloud-native architecture?<\/strong><\/p>\n\n\n\n<p>We decided several years ago to take a proactive stance to carry out our Digital Transformation journey. The appeal of \u2018going serverless\u2019 and moving to a cloud-native environment was that it offered our developers more agility when building and running applications.<\/p>\n\n\n\n<p>We also wanted to take advantage of the inbuilt benefits of the serverless environment &#8211; it\u2019s more scalable and flexible, which lets us focus on writing the code that will create the most business value. We can now run new Bayad applications more smoothly, which leads to an improved experience for our customers.<\/p>\n\n\n\n<p><strong>With Aqua, you are able to assess security risks in the pipeline before applications get pushed into production. Why is this so important to you?<\/strong><\/p>\n\n\n\n<p>The shift to the left is a vital part of our overall security strategy. It\u2019s becoming widely recognized that security needs to be prioritized at the earliest possible stage, to catch potential security risks before they can become a true danger. That is the best way to reduce outages that would have a detrimental business effect.<\/p>\n\n\n\n<p>Also, as a major contributor to the country\u2019s critical infrastructure, we wanted to show our millions of customers and business partners that our services are resilient.<\/p>\n\n\n\n<p><strong>Can you explain how Bayad has been able to achieve greater security of critical applications and protection of sensitive data?<\/strong><\/p>\n\n\n\n<p>With Aqua, we have better visibility on the vulnerabilities of our cloud-native applications. This allows us to prioritize remediation of these, which prevents our security operations teams from being overwhelmed.<\/p>\n\n\n\n<p><strong>Can you explain how Bayad is now better prepared to adhere to industry best practices and compliance requirements?<\/strong><\/p>\n\n\n\n<p>We are now better able to secure our data and digital platforms through Aqua\u2019s robust functionality, which is a key imperative for adhering to industry best practices. Aqua\u2019s solution helps us prevent the potential exposure of sensitive information, credentials and keys that could have led to account takeovers or system compromise.<\/p>\n\n\n\n<p>Furthermore, Aqua\u2019s solution provides much greater visibility, which is vital in highly regulated industries. We are now able to monitor the entire application lifecycle, which is crucial for enforcing compliance.<\/p>\n\n\n\n<p><strong>Why did you choose to work with the vendor?<\/strong><\/p>\n\n\n\n<p>We did our research! We established a viable short list of potential vendors, then provided our requirements to candidates and collected detailed responses from each. Aqua offered the best capabilities to match our journey to serverless.<\/p>\n\n\n\n<p>We were also impressed by the fast and helpful communications from Aqua\u2019s local partner, and with the customer service and support they have provided throughout the process.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Bayad, a leading payment platform in the Philippines, is utilizing Aqua\u2019s portfolio of cloud-native security solutions to ensure security and compliance of its digital wallet platform, biller aggregator service and bills payment platforms. Bayad (CIS Bayad Center, Inc.) is the largest multi-channel payment platform in the Philippines, and the country\u2019s pioneer in outsourced payment collection. [&hellip;]<\/p>\n","protected":false},"author":18,"featured_media":15086,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[10,18,51,59,44,54],"tags":[3346,3347,79,232,264],"class_list":["post-15084","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-analysis-case-studies","category-enterprise-security","category-intelligent-technology-newsletter","category-south-east-asia","category-top-stories","category-used","tag-aqua","tag-bayad","tag-cloud","tag-philippines","tag-security-2"],"acf":[],"publishpress_future_workflow_manual_trigger":{"enabledWorkflows":[]},"_links":{"self":[{"href":"https:\/\/www.intelligentcio.com\/apac\/wp-json\/wp\/v2\/posts\/15084","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.intelligentcio.com\/apac\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.intelligentcio.com\/apac\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.intelligentcio.com\/apac\/wp-json\/wp\/v2\/users\/18"}],"replies":[{"embeddable":true,"href":"https:\/\/www.intelligentcio.com\/apac\/wp-json\/wp\/v2\/comments?post=15084"}],"version-history":[{"count":5,"href":"https:\/\/www.intelligentcio.com\/apac\/wp-json\/wp\/v2\/posts\/15084\/revisions"}],"predecessor-version":[{"id":15473,"href":"https:\/\/www.intelligentcio.com\/apac\/wp-json\/wp\/v2\/posts\/15084\/revisions\/15473"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.intelligentcio.com\/apac\/wp-json\/wp\/v2\/media\/15086"}],"wp:attachment":[{"href":"https:\/\/www.intelligentcio.com\/apac\/wp-json\/wp\/v2\/media?parent=15084"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.intelligentcio.com\/apac\/wp-json\/wp\/v2\/categories?post=15084"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.intelligentcio.com\/apac\/wp-json\/wp\/v2\/tags?post=15084"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}