HOW INCOMM PAYMENTS ENHANCED ITS SECURITY POSTURE THROUGH AXONIUS.
InComm Payments, a technology innovator for prepaid products like gift cards and other payment devices, is involved in industries like retail, healthcare, tolling & transit, mobile payments, and financial services. Headquartered in Atlanta, Georgia, InComm Payments has over 500,000 points of distribution, 402 global patents, and a presence in more than 30 countries.
Walking into a new position includes lots of promise, expectations, and challenges. And for anyone involved in asset management, the expectations — and especially the challenges — are multiplied.
“Trying to find or mitigate one asset is like trying to find a needle in a haystack,” said Tiffanie Johnson, a former technical security project manager at InComm Payments. “It’s very difficult and sometimes that haystack is on fire.”
When Johnson started at InComm Payments, her first project involved payment card industry (PCI) compliance. And while on the project, she worked with the Axonius cybersecurity asset management platform for the first time.
“Anyone that’s worked with PCI knows how complex and challenging it could be,” Johnson said. “It was a lot of pressure. But they said this is the tool we have, and being able to see all the assets in real time was a game changer.”
In previous roles, Johnson recalled challenges navigating IP addresses or creating an entire SaaS database. Using the Axonius platform helped Johnson cut more than half the time it took to complete her work.
InComm Payments, a global payments technology company, implemented the Axonius platform to help with issues like compliance, security tool coverage gaps, vulnerability tracking, and asset scoping.
The Axonius platform is utilized by various departments across the organization. The IT department, for example, uses Axonius to manage data and hardware, ensuring all workstations have the security platforms they need.
Having an accurate, up-to-date asset inventory is a critical element to InComm Payments’ everyday operations — and security posture.
“A lot of the time, we have security platforms that we have to have in place to keep all the payment solutions secure,” she continued. “Making sure we have that visibility and in real time is everything to us.”
Through true visibility into their assets, InComm Payments has evolved its security practices. Specifically, by having a better understanding of whether all devices, cloud instances, and users are managed and secured, the company has enhanced its security posture, according to Johnson.
With Axonius, senior leaders at InComm Payments also have visibility into the company’s security efforts through weekly reports that help to identify trends, prioritize action, and measure progress.
“It helps every department in every way,” she said. “It’s not just a security tool — it’s literally a tool for everyone.”
Along with having real-time visibility, InComm Payments leveraged the Axonius platform to expedite projects.
Johnson managed projects for various teams. They were often given six months to a year to complete a project. With Axonius, Johnson said many projects were completed within three months.
“Overall, it’s increased our workflow by 30%, which says a lot about having this type of tool,” she said. “It’s literally at our fingertips, which has been completely amazing. Axonius has enabled us to move faster and complete more tasks at a better pace.”
When she previously reviewed projects, Johnson would look at details like the length of time, the teams involved, and communication. Now the amount of person-hours involved has “completely dropped off,” she said. “I can now download a CSV, send it off to another team for review, and then they send everything right back to me.”
Teams from InComm Payments meet with Axonius customer service weekly to discuss any issues or problems that crop up. For example, InComm Payments team members were shown how to create queries and make changes in the Axonius Enforcement Center. Johnson added that Axonius customer service quickly responds to requests, whether it’s an email or a call.
The Axonius and AWS partnership provides joint customers like InComm a more efficient approach to manage their ever-evolving asset security posture, inclusive of AWS infrastructure and AWS security services.
With the AWS native integration, customers extend the Axonius asset security posture and visibility across the AWS infrastructure — from EC2 instances to EBS volumes, Lambda functions, databases, IAM policies, and much more — on every AWS region. The integration also correlates insights from AWS security services — such as vulnerability findings from GuardDuty and security control insights from SecurityHub — with other IT and Security solutions to reduce their attack surface as they move more assets into the cloud.
As an AWS partner, Axonius integrates with many AWS services including Macie, SecurityHub, GuardDuty, and Inspector to help customers mitigate threats, navigate risk, decrease incident response time, automate action, and inform business-level strategy.
See the Axonius Platform for yourself with an interactive product tour, where we'll guide you through key applications of our Cybersecurity Asset Management and SaaS Management solutions.
Request a demo to learn how the Axonius Platform provides a system of record for all digital infrastructure helping IT and security teams manage an always-expanding sprawl of devices, users, software, SaaS applications, cloud services, and the tools used to manage and secure them.