Email Encryption case study - Trend Micro

Data Protection for UK Industry Body
for Life, Pensions, and Investments
Origo customers use Trend Micro Email Encryption to simplify and facilitate
”convenient paperless transactions.
Trend Micro Email Encryption is a key enabler for our customers… financial services providers
can now more securely communicate with their customers and confidently take advantage of
cost-effective electronic communications.
”
– Richard Clark, Head of Commercial Marketing
Origo Services
EXECUTIVE SUMMARY
Customer Name: Origo
Industry: Financial Services
Location: Edinburgh, UK
Website: www.origoservices.com
Number of Employees: 45
Number of Email Users: 50,000+
CHALLENGE:
• Encourage the use of cost-saving electronic
business processes throughout the financial
services market in the UK
• Secure email communications between
platforms, life companies, pension providers,
and advisors
• Offer a simple, cost-effective solution that
encourages adoption
SOLUTION:
• Trend Micro Email Encryption
BUSINESS RESULTS:
• Improves customer service with the speed of
electronic delivery, while avoiding the costs of
postal services
• Avoids risk of non-compliance with industry
regulations, and the consequential very large
fines and penalties
• Lowers up-front and operating costs for email
encryption compared to PKI-based solutions
• Easily coexists with other in-place security
solutions (infrastructure and software agnostic)
• Simplifies data protection for users and
administrators (no management of encryption
keys; easy downloads for senders)
Challenge
The technology experts at Origo work within the UK’s platform, life, pensions, and
investment sectors of the financial services industry to collaboratively identify and
address cost and efficiency issues. The company’s standards and services help the
industry drive the adoption of best-in-class eCommerce practices and ultimately better
serve customers.
For more than 20 years, Origo has built relationships within the financial services
industry. The company’s innovations include the Unipass service, which is now used by
approximately 30,000 financial advisors for safe, easy, and efficient online activities. A
unique online digital identity gives secure access to each advisor without the administrative
nightmare of managing usernames and passwords.
While the initial introduction of Unipass elegantly addressed secure access requirements,
financial services providers still faced the challenges of adequately securing email
communications. Within the UK, governance bodies strictly police financial institutions.
The fines levied for breaches of the Data Protection Act can be millions of pounds, and
directors can face jail time. Origo’s team evaluated a number of different secure email
systems and technology approaches. They found, unfortunately, that most of these
solutions would result in operational difficulties since providers and advisors used highly
diverse infrastructures, systems, and email solutions.
Solution
Origo determined that solutions based on public key infrastructure (PKI) technology
imposed too much administrative overhead for customers, and wanted a solution that
was easy for IT teams as well as financial advisors. “Our number one priority was ease
of use,” explained Garry Miller, General Manager, at Origo Secure Internet Services
Ltd. “With other vendors, you have to pre-register and get encryption keys. Since our
customers, and in turn their customers, have very different infrastructures, we needed a
solution that was agnostic to the user environment. With Trend Micro Email Encryption,
the hosted key service allows us to avoid the complications of registration and keys.
Users can create their own keys based on the destination email address.”
With break-through Identity-Based Encryption (IBE), Trend Micro Email Encryption
is a scalable robust solution based on AES 256-bit and elliptic curve cryptography for
exceptional security. Recipients of encrypted emails do not need a software client to view
secure email, and since there is no pre-registration or storage of keys, there is no up-front
infrastructure cost for either senders or receivers.
Page 1 of 2 • CASE STUDY • Financial Services

“Email Encryption is simpler to introduce compared to other solutions that require a lot of
infrastructure to support them,” said Miller. “When we initially tested it in house, however,
we looked very closely for potential downsides. We were concerned about encrypted
email having problems with our customers’ firewalls and other in-place security solutions,
but Trend Micro Email Encryption has allowed us to achieve the level of interoperability
that our customers require.”
Origo now offers Email Encryption as the basis of its Unipass Securemail service, which
gives the financial services industry the peace of mind that comes from encryption
capabilities. Email users can send encrypted emails, and recipients are instructed to go
to the registration service. Once they identify themselves, they are given a key. Since all
steps are automated, the solution places no burden on IT teams, and encryption is easy
and straightforward for users.
Results
Since the introduction of its Unipass Securemail service, Origo has been able to promote
secure email practices within the UK financial sector. “Unipass Securemail is an important
product in our portfolio,” said Richard Clark, head of Commercial Marketing at Origo.
“It has many touchpoints across the organizations that rely on it for cost-effective, secure
communications—customer service, new business development, finance—all of these
teams benefit from secure email. Trend Micro Email Encryption is a key enabler for our
customers, and our customers are the ultimate winners since financial services providers
can now more securely communicate with their customers and confidently take advantage
of cost-effective electronic communications.”
Email Encryption has also proven to be a cost-effective alternative to competing solutions.
“We believe that Trend Micro Email Encryption is about one-third of the cost of competing
PKI solutions, in terms of management,” explained Miller. “Ease of use also drives down
costs—other solutions are more complicated compared to the straightforward process that
users can now follow without any help from IT.”
The Origo team cited the relationship with Trend Micro as contributing to the successful
introduction of this service. “Identity-Based Encryption is a great new technology,” said
Miller. “Email Encryption makes it possible to take advantage of the latest encryption
advancements, and due to our relationship with Trend Micro, we are able to address the
concerns of those large organizations that understand the risks associated with lost data.”
By making Unipass Securemail available to providers, Origo underscores its commitment
to helping financial companies lower operating costs by exchanging confidential information
with their key stakeholders in an easy, secure, and efficient manner. As part of the launch
of the Email Encryption service, Origo surveyed 31 of the largest distributor groups,
representing many thousands of financial advisors. More than half (58%) indicated that
they had been waiting for progress in this area.
DEPLOYMENT ENVIRONMENT:
Customer base: UK Life, Platform, Pensions,
and Investment sectors
Broad range of hardware and
software platforms
Trend Micro Email Encryption
Company Profile:
Origo was launched by 16 of the UK’s leading
life assurance companies in June 1989 to
facilitate the development of electronic trading
between principals and agents for Life,
Pensions and Collective Investment business.
Origo’s main purpose is to address cost and
efficiency issues for the UK Life, Pensions
and Investment sectors by delivering common
eCommerce services and standards. Origo
drives the adoption of eBusiness by creating
a standards-based, competitive and secure
trading environment in which industry goals
are being met. Origo is the catalyst that brings
different industry groups together, including
product providers, wrap platforms, advisers,
portals, software companies and others to
collaborate on identifying and addressing cost
and efficiency issues in a non-competitive
environment. Origo’s Services include:
Standards, Unipass, Adviserwise.com, Agency
Registration, Agency Administration, Options
Transfers, Securemail and Data Matching.
Trend Micro Security
• Trend Micro Email Encryption
http://us.trendmicro.com/us/products/enterprise/email-encryption/
”
We believe that Trend Micro Email Encryption is about
one-third of the cost of competing PKI solutions, in terms
of management.
”
– Garry Miller, General Manager
Origo Security Services
Securing Your Journey to the Cloud
©2012 by Trend Micro Incorporated. All rights reserved. Trend Micro, the
Trend Micro t-ball logo, OfficeScan, and Trend Micro Control Manager
are trademarks or registered trademarks of Trend Micro Incorporated. All
other company and/or product names may be trademarks or registered
trademarks of their owners. Information contained in this document
is subject to change without notice. [CS_Origo_EE_JUNE2012]
Page 2 of 2 • CASE STUDY • Financial Services