Successful PCI data processing cloud migration
Predictable cost model with 5-year license agreement
Simplified licensing reduced administrative workload, including automated retailer onboarding
Full PCI security compliance and payment security

Challenge

Continue to protect PCI data in a move to the cloud to relieve infrastructure cost increases, while consolidating disparate software licenses.

Details

Need to streamline licenses in preparation for cloud migration

With nearly 70,000 employees and over $500 billion in assets, this financial services provider is seen as a trusted financial partner by millions of customers around the world. The financial services provider, including its payment processing subsidiary, has been a Voltage SecureData customer for a long time. Voltage SecureData simplifies PCI security compliance and payment security with format preserving-encryption (FPE) and tokenization.

The Vice President of Information Security Technology explains further: “Over the years, several divisions of our organization engaged with OpenText™ Cybersecurity and we really expanded our use cases with Voltage SecureData. Today, we leverage Voltage SecureData to secure POS devices for our customers, provide credit card payment protection, protect sensitive PCI data, and we implemented a tokenization project in our European divisions, which proved very effective. However, the result of growing our Voltage SecureData use cases over many years was a complex tangle of support contracts. This inherent complexity was highlighted by a recent requirement to move PCI data processing to the cloud. Aside from our wish to streamline license management, we also need to consider OpenText Cybersecurity’s own cloud strategy. The different divisions leveraging Voltage SecureData all use different cloud platforms. While our corporate standard is Azure, it was important that other cloud environments, such as AWS and Google Cloud Platform (GCP), are supported too, as we’ll be operating in a mixed cloud environment for some time to come.”

In close partnership with OpenText Cybersecurity, we constructed a five-year unlimited subscription license. This flexibility, combined with a per-event pricing model, alleviates our incremental infrastructure cost concerns, and gives us a predictable cost model. It enables us to move to a cloud environment with ease while vastly reducing our administrative workload.

Vice President of Information Security Technology
Major Financial Services Institution

Full cloud-based data protection with predictable cost model

The Voltage SecureData licenses were off-cloud and the financial services provider had full responsibility for maintaining and supporting the underlying infrastructure. Each year would bring new and separate contract negotiations to renew the licenses.

The payment processing subsidiary has a requirement to regularly add retailers into its payment processing environment and license them for Voltage SecureData to secure their transactions. This would be a manual and costly process each time. Overall, the financial services provider needed to modernize and simplify multiple use cases across the organization. This could be achieved with an enterprise, unlimited license for tokenization and an unlimited license for moving data to the cloud. The team wanted to leverage full data protection for cloud-based data warehouses with a predictable cost model.

The financial services provider was happy to see that Voltage SecureData can work natively in Azure, AWS, and GCP. This would ensure that their application team could protect data wherever it resides within the cloud infrastructure. Voltage SecureData provides a single solution that can be used off-cloud, and in public and private cloud environments, making key management and PCI compliance easy and cost effective.

“In close partnership with OpenText Cybersecurity, we constructed a five-year unlimited subscription license,” says the Vice President of Information Security Technology. “This flexibility, combined with a per-event pricing model, alleviates our incremental infrastructure cost concerns, and gives us a predictable cost model. It enables us to move to a cloud environment with ease while vastly reducing our administrative workload.” The Voltage SecureData cloud implementation also streamlined onboarding of new retailers to the payment processing environment. They all automatically leverage the new agreement with no need to issue individual transaction order letters, as was the case in the off-cloud model.

License consolidation strengthens strategic partnership

Consolidating disparate use cases and licenses prompted strategic partnership discussions with the financial services provider. Its own, as well as OpenText Cybersecurity’s corporate direction very much includes the cloud, and this collaboration strengthened the relationship between the two. The Vice President of Information Security Technology concludes: “This was a real team effort between our own key stakeholders and OpenText Cybersecurity, including the OpenText Cybersecurity executive team. We felt supported throughout and had a full understanding of the commitment and partnership offered by OpenText Cybersecurity. The new cloud-based five-year subscription license will vastly simplify the way we do business in the future. The collaboration streamlined our move to the cloud, and, thanks to Voltage SecureData, we feel confident that our customers’ sensitive data is protected wherever it moves within our organization.”

The collaboration streamlined our move to the cloud, and, thanks to Voltage SecureData, we feel confident that our customers’ sensitive data is protected wherever it moves within our organization.

Vice President of Information Security Technology
Major Financial Services Institution

About Major Financial Services Institution

With nearly 70,000 employees and over $500 billion in assets, this financial services provider is seen as a trusted financial partner by millions of customers around the world.