June 2021 Summaries

GDPR is a comprehensive privacy law that regulates how organizations handle personal data in the European Union. It came into effect on May 28, 2018, and applies to companies with operations or servers physically located in the EU, as well as those processing personal data of EU residents. GDPR requires organizations to implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, but is non-prescriptive on how these measures are implemented. Security under GDPR encompasses all aspects of security, including protection against malicious actors, service availability, data integrity, and disaster recovery. GDPR also has accountability requirements, which require organizations to demonstrate compliance through documentation or other written records. A solution like Twingate can help with GDPR compliance by providing a Zero Trust Network Access (ZTNA) solution that offers secure access to private network resources, fine-grained access, and multi-factor authentication.

Cyberattacks are increasing in frequency due to their profitability for cybercriminals, with Coalition's claims team seeing a 35% rise in funds transfer fraud and a 67% increase in business email compromise attacks. The COVID-19 pandemic has changed the targets and methods used by attackers, with remote work opening up new vulnerabilities. Cybersecurity is about managing risks to data and information systems, and security controls help proactively reduce these risks. Coalition focuses on holistic risk management through prevention, including risk assessment, knowledge sharing, and partnerships with vetted solutions like Twingate. Twingate provides secure remote access, enabling robust least privilege access controls, protecting against common network attacks, and providing visibility into network access activity. Coalition's cyber insurance offers protection from extreme losses if security controls fail, with dedicated claims and incident response teams available 24/7 to help navigate security incidents. The combination of proactive risk mitigation and dedicated support is unique, allowing policyholders to report incidents without triggering a claim in many cases.

TwinGate is introducing a device trust framework to help organizations move beyond the traditional all-or-nothing approach to securing network access. The new framework provides visibility across any operating system and platform, collects device context from multiple sources, and treats device trust as a dynamic, calculated status. This allows for more nuanced policies to be created, taking into account factors such as device type, location, and network request. TwinGate's Security Policies framework will also incorporate controls that take into account device context information from EDR, MDM, and other sources. The company has recently launched its Trusted Devices feature, which enables admins to mark devices as trusted, allowing for more granular control over user access. With this launch, TwinGate aims to provide a modern zero-trust architecture that is more secure and maintainable than traditional VPNs, with significant cost savings and improved security posture for customers.