{"id":105185,"date":"2024-02-16T10:11:09","date_gmt":"2024-02-16T10:11:09","guid":{"rendered":"https:\/\/www.intelligentcio.com\/eu\/?p=105185"},"modified":"2024-02-19T10:22:12","modified_gmt":"2024-02-19T10:22:12","slug":"yamaha-finds-harmony-in-semperis-ad-security-solutions","status":"publish","type":"post","link":"https:\/\/www.intelligentcio.com\/eu\/2024\/02\/16\/yamaha-finds-harmony-in-semperis-ad-security-solutions\/","title":{"rendered":"Yamaha finds harmony in Semperis\u2019 AD Security Solutions"},"content":{"rendered":"\n

Yamaha Music has implemented two solutions from Active Directory specialist Semperis to detect and respond to current threats, and to rapidly recover Active Directory in the event of a compromise.<\/em><\/strong><\/p>\n\n\n\n

Yamaha Music Europe\u2019s globally distributed infrastructure allows employees to access IT resources from anywhere, at any time. But growing concerns about access control and modern cyberthreats introduced a sour note.<\/p>\n\n\n\n

Beginning as a reed organ manufacturer in 1887, the company soon expanded into the production of pianos and guitars, and later the manufacturing of phonographs, professional electronics and hi-fi players. Yamaha is known as the world\u2019s leading maker of musical instruments.<\/p>\n\n\n\n

The founding of Yamaha Music Europe GmbH in Germany in 1966 marked the company\u2019s entry into European manufacturing. Acquisitions of German music software and hardware maker Steinberg and Austrian piano maker B\u00f6sendorfer solidified Yamaha\u2019s presence in the German market. The company\u2019s European arm now has about 800 employees across sales, service and musical education, with branches from Sweden to Italy.<\/p>\n\n\n\n

Like many global businesses, Yamaha today faces a symphony of cybersecurity challenges. Its highly heterogeneous IT infrastructure must connect headquarters with regional branches, home offices and mobile workers. The company uses standard products, such as Microsoft 365, as well as in-house solutions to keep its workforce connected – both on-prem and in the cloud – whether operating in the office, on the road or at home.<\/p>\n\n\n\n

This constant demand for high connectivity, reliability and performance goes hand in hand with a different challenge: increasing cybersecurity threats.<\/p>\n\n\n\n

A familiar tune: Balancing access and risk<\/strong><\/p>\n\n\n\n

Christian-Martin Schulz, Senior Network Engineer, Yamaha Music Europe, and his experienced team of 12 are responsible for maintaining secure, high-performance access to Yamaha\u2019s corporate network. Schulz is also an active member of the company\u2019s German works council. As such, he is well versed in the importance of data protection and the problems inherent in managing access and authorisations across the enterprise.<\/p>\n\n\n\n

These priorities prompted Schulz to evaluate the security of Yamaha\u2019s identity infrastructure. Like 90% of companies worldwide, the company uses Microsoft Active Directory (AD) as its central directory service.<\/p>\n\n\n\n

Through the course of his duties at Yamaha, Schulz developed a passion for cybersecurity. He began searching for ways to check the security status of the company\u2019s identity infrastructure.<\/p>\n\n\n\n

\u201cWe\u2019ve been using AD since Windows NT,\u201d Schulz said. \u201cIt\u2019s the central authentication point for all systems. Without AD, practically nothing works: no remote connections, no access.\u201d<\/p>\n\n\n\n

Evaluating Active Directory security his research eventually led him to Purple Knight, a free tool for assessing the security of AD and Entra ID (formerly Azure AD) environments. He learned that Purple Knight is a leading community tool for detecting indicators of exposure (IOEs) and indicators of compromise (IOCs) in hybrid AD infrastructures.<\/p>\n\n\n\n

Schulz downloaded Purple Knight, a free Semperis tool, and began using the tool to conduct a comprehensive series of tests against the most common and effective attack vectors.<\/p>\n\n\n\n

Purple Knight detects risky configurations and vulnerabilities, generates a security posture report across five categories, and provides recommendations for prioritising remediation actions. The tool checks for more than 130 IOEs and IOCs and returns a security score that enables an organisation to assess its security status, considering possible threats. The average score for first-time Purple Knight users is 68%, a value that always gives reason to deal more intensively with the topic.<\/p>\n\n\n\n

\u201cAfter Purple Knight\u2019s analysis, we set out to improve our own status quo,\u201d Schulz explained. \u201cBecause if a cyberattacker actually got to our Active Directory, we would have to rebuild everything. So, to optimise our security, we started looking for the reasons for the vulnerabilities and what was actually missing.\u201d<\/p>\n\n\n\n

In the spotlight: Threat detection and AD recovery<\/strong><\/p>\n\n\n\n

Two areas proved especially critical for the company: detection and response to current threats, and rapid recovery of Active Directory in the event of an actual compromise. Yamaha Europe decided to implement two solutions from Active Directory specialist Semperis: Directory Services Protector and Active Directory Forest Recovery.<\/p>\n\n\n\n

\u201cWe\u2019re not huge,\u201d said Schulz, explaining Yamaha Music Europe\u2019s decision to work with Semperis. \u201cFor us, it was important to find a solution that fits and a partner who guarantees fast support.\u201d<\/p>\n\n\n\n

When the time came to deploy the solutions, installation took just one day, utilising previously submitted server specifications.<\/p>\n\n\n\n

Continuous Active Directory monitoring Semperis Directory Services Protector is the industry\u2019s most comprehensive identity threat detection and response (ITDR) platform. The need to deploy an ITDR platform stems from the simple fact that, according to research, nine out of 10 cyberattacks on enterprises involve Active Directory.<\/p>\n\n\n\n

Attackers target Active Directory mainly through misconfigurations or security vulnerabilities. Sophisticated ITDR solutions like those from Semperis provide continuous monitoring and an overview of the current security posture, and if a compromise should occur, these solutions enable the organisation to undo malicious changes.<\/p>\n\n\n\n

Unlike tracking tools that rely solely on security protocols and agents on domain controllers, Directory Services Protector monitors multiple data sources. Most importantly, the tool monitors the Active Directory replication stream – the only reliable way to capture every change, regardless of how attackers try to cover their tracks.<\/p>\n\n\n\n

\u201cIt is extremely time-consuming for network administrators to search for new threats or detect misconfigurations on their own. Directory Services Protector now relieves us of this concern,\u201d explains Schulz.<\/p>\n\n\n\n

Operational resilience through rapid recovery<\/strong><\/p>\n\n\n\n

\u201cWhile there is no such thing as 100% protection for IT systems, our job as network managers is primarily to make attacks as difficult as possible,\u201d Schulz points out.<\/p>\n\n\n\n

If, despite all precautionary measures, an attacker manages to penetrate Active Directory, it is vital to get the infrastructure up and running again as quickly as possible. This is the purpose of the second product Yamaha implemented: Active Directory Forest Recovery.<\/p>\n\n\n\n

In a worst-case scenario, a ransomware or wiper attack might be able to take down an organisation\u2019s domain controllers, for example. In such cases, the restoration of the compromised AD forest using traditional, manual methods can take days or even weeks. Plus, companies still face the risk of malware reinfection via corrupted back-ups.<\/p>\n\n\n\n

\u201cThe failure of Active Directory inevitably leads to a standstill in business activities,\u201d explains Schulz. \u201cRapid recovery is therefore the most urgent task. We are able to avoid this stress with the use of Active Directory Forest Recovery.\u201d<\/p>\n\n\n\n

This Semperis solution increases operational reliability through three basic functions.<\/p>\n\n\n\n

\u25cf Easily set up a replica of the Active Directory production environment<\/p>\n\n\n\n

\u25cf Automate the entire recovery process, to reduce downtime<\/p>\n\n\n\n

\u25cf Prevent the reintroduction of malware, by restoring Active Directory to a known safe state<\/p>\n\n\n\n

In addition, Active Directory Forest Recovery automates the organisation of back-ups, keeping them up to date and reducing the amount of storage space required.<\/p>\n\n\n\n

Striking a hopeful note with proactive identity-first security<\/strong><\/p>\n\n\n\n

The Semperis solutions\u2019 capabilities were the deciding factor in Yamaha\u2019s purchasing decision. However, a second component was also an essential factor for Schulz.<\/p>\n\n\n\n

\u201cFast and competent support is also enormously important to us,\u201d he said.<\/p>\n\n\n\n

Schulz\u2019s experience with Semperis has enabled him to strike a hopeful note regarding risk mitigation for Yamaha Music Europe. The company is currently planning to extend Semperis\u2019 support to its cloud resources.<\/p>\n\n\n\n

\u201cIt became clear to me that security is a never-ending process that requires proactive action,\u201d Schulz said.<\/p>\n","protected":false},"excerpt":{"rendered":"

Yamaha Music has implemented two solutions from Active Directory specialist Semperis to detect and respond to current threats, and to rapidly recover Active Directory in the event of a compromise. Yamaha Music Europe\u2019s globally distributed infrastructure allows employees to access IT resources from anywhere, at any time. But growing concerns about access control and modern […]<\/p>\n","protected":false},"author":62,"featured_media":105186,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[17482,93],"tags":[9381,19898,6576,19900,19897,19899],"class_list":["post-105185","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cybersecurity","category-top-stories","tag-active-directory","tag-ad-security-solutions","tag-cyberthreats","tag-risk-reduction-2","tag-yamaha","tag-yamaha-music-europe"],"acf":[],"publishpress_future_workflow_manual_trigger":{"enabledWorkflows":[]},"_links":{"self":[{"href":"https:\/\/www.intelligentcio.com\/eu\/wp-json\/wp\/v2\/posts\/105185","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.intelligentcio.com\/eu\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.intelligentcio.com\/eu\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.intelligentcio.com\/eu\/wp-json\/wp\/v2\/users\/62"}],"replies":[{"embeddable":true,"href":"https:\/\/www.intelligentcio.com\/eu\/wp-json\/wp\/v2\/comments?post=105185"}],"version-history":[{"count":2,"href":"https:\/\/www.intelligentcio.com\/eu\/wp-json\/wp\/v2\/posts\/105185\/revisions"}],"predecessor-version":[{"id":105390,"href":"https:\/\/www.intelligentcio.com\/eu\/wp-json\/wp\/v2\/posts\/105185\/revisions\/105390"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.intelligentcio.com\/eu\/wp-json\/wp\/v2\/media\/105186"}],"wp:attachment":[{"href":"https:\/\/www.intelligentcio.com\/eu\/wp-json\/wp\/v2\/media?parent=105185"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.intelligentcio.com\/eu\/wp-json\/wp\/v2\/categories?post=105185"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.intelligentcio.com\/eu\/wp-json\/wp\/v2\/tags?post=105185"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}