Stamford, CT
www.pitneybowes.com
INDUSTRY
Business Services
Introduction
Pitney Bowes is a global technology company providing commerce solutions that power billions of transactions in the United States and internationally. The company operates through Global Ecommerce, Presort Services, and SendTech Solutions segments. In providing such solutions, Pitney Bowes must comply with all applicable regulations and standards, including the Payment Card Industry Data Security Standard (PCI DSS).
The Pitney Bowes Product Security Team supports compliance programs across the company, starting with standard operating procedure (SOP) compliance. As part of these compliance programs, Pitney Bowes conducts PCI DSS audits. As a corporation, Pitney Bowes also supports the National Institute of Standards and Technology (NIST) Cyber Security Framework (CSF). Pitney Bowes is looking at Anchore’s suite of products, including Anchore Enterprise, for scanning their cloud environment to ensure their cloud meets International Standards Organization (ISO) standards.
Quick summary
Challenges
- Implementing whitelisting for open source analysis and software composition analysis
- Container deployments across a hybrid and multi-solution environment
Solutions
- Anchore Enterprise enables Pitney Bowes Product Security Teams to support container compliance best practices
Results
- Generate reports for review by Pitney Bowes auditors
- Patch detection for Docker Containers
- Customer requirements satisfied
Challenges
Pitney Bowes runs various container deployments across their enterprise, including AWS EC2 instances for Docker Containers. They are also running Amazon Elastic Container Service (ECS), Google Kubernetes Engine (GKE), and other deployments.
Solutions
The Pitney Bowes Product Security Team has been using Anchore Enterprise for two years now. They spent the first year evaluating the various enterprise features while looking internally at the best ways to implement Anchore Enterprise across teams considering using containers in their cloud environment. In year 2 of their Anchore Enterprise usage, Pitney Bowes teams have increased their use of runtime container architectures. Their teams are also using ECS and EKS more effectively than before their Anchore Enterprise implementation.
Pitney Bowes is looking at Anchore Enterprise to clarify their software composition analysis of their containers’ layers. Anchore Enterprise also helps Pitney Bowes IT leaders understand their DevOps teams’ maturity and understanding of containers. For example, the Anchore Engine provided DevOps team leads with actionable data that prompted them to review container best practices with their teams. While in the past leadership spoke to their development teams about containerization approaches, they now have the data to understand what their teams are doing with containers across their CI/CD toolchain. As a result, the development teams have the actionable insights from Anchore’s reporting tool to streamline delivery and improve security.
Results
Pitney Bowes makes use of Anchore scanning and reporting inside their security organization.
They also use Anchore Enterprise as a patch detection tool for their Docker container deployments. The Product Security Team saves these reports for auditor review.
Pitney Bowes is leveraging the new Anchore policy for malware scans and is seeing the value in the new policy as part of their container security checks.
About Pitney Bowes
Pitney Bowes (NYSE:PBI) is a global technology company providing commerce solutions that power billions of transactions. Clients around the world, including 90 percent of the Fortune 500, rely on the accuracy and precision delivered by Pitney Bowes solutions, analytics, and APIs in the areas of ecommerce fulfillment, shipping and returns; cross-border ecommerce; office mailing and shipping; presort services; and financing. For 100 years Pitney Bowes has been innovating and delivering technologies that remove the complexity of getting commerce transactions precisely right. For additional information visit Pitney Bowes, the Craftsmen of Commerce, at www.pitneybowes.com.
Download the PDF version of this case study for Pitney Bowes.
