To move beyond the find-and-fix mentality and continue building a resilient security program, Lionbridge is integrating continuous automated red teaming (CART) into its security program by investing in IBM Security Randori Attack Targeted. By identifying the most problematic areas of their attack surface, the team can run valuable, authentic red and blue team cyberattack scenarios efficiently and at scale.
By adopting Randori Attack Targeted, the Lionbridge Trust team validates whether tools and security processes work as expected. To begin this journey, Lionbridge partnered with the Randori Hacker Operations Center to define an organizational objective. Through this definition, and a combination of automated and human validation, Lionbridge uncovered gaps, such as misconfigured alert rules, password rotation policy issues and users who gained more permission than they needed .
The Randori platform provides the clarity Lionbridge needs to confidently uncover exposures, action the findings and validate that mitigations are implemented as expected. Through continuous discovery and validation, the Lionbridge Trust team can validate and communicate their risk reduction efforts to the company’s board of directors, proving the return on investment of internal initiatives, such as employee awareness training and internal security control efforts.
“As a Chief Trust Officer, I want to have the confidence to tell our executive team exactly where we stand,” says Graham. “IBM Security Randori enables me to have those conversations around our attack surface and overall program effectiveness, demonstrating how we are improving the detection and incident response capabilities of our internal and managed partner teams.”