Finance

FNZ

Protecting Vital Data: FNZ’s Enhanced Encryption Security Solution

Overview

FNZ, a global wealth management platform provider responsible for 8,000 wealth management firms and enabling over 20 million people to invest, approached FullProxy seeking expertise in protecting vital data through enhanced encryption key security. As a leader in the financial technology sector, their commitment to safeguarding sensitive financial information drives their continuous security improvements.

 

 

The Challenge

With their extensive reach and responsibility for protecting vital data across multiple wealth management firms, FNZ faced critical security challenges surrounding their encryption key management. In today’s digital landscape, compromised encryption keys pose severe security risks, potentially leading to devastating data breaches and unauthorised system access. These vulnerabilities can be particularly detrimental to financial services platforms like FNZ, who handle sensitive client information and substantial financial assets.

The Dangers of Encryption Key Compromise

One of the most concerning aspects of encryption key compromise is its often-silent nature. Many organisations remain unaware that their keys have been compromised until attackers exploit the vulnerability, making this cyber threat particularly dangerous. For a platform provider like FNZ, protecting vital data is crucial, as any delay in detection could result in extended periods of unauthorised access, potentially compromising millions of customers’ financial information.

The task of building and configuring the HSM infrastructure during the Covid pandemic was particularly challenging given the geographical location of the hardware.

Stephen Mellon, Consultant
FullProxy

FullProxy's Solution

FullProxy developed and implemented a comprehensive solution focused on protecting vital data through a sophisticated combination of F5 BIG-IP Local Traffic Managers and Entrust nShield general-purpose Hardware Security Modules (HSMs). This integration created a robust platform for secure encryption key storage and management.

Our implementation strategy prioritised maintaining continuous operations, ensuring the solution was deployed without any disruption to FNZ’s extensive wealth management services. This seamless integration was crucial given the scale of their operations and the number of clients depending on their platform for protecting vital data.

 

Results and Benefits

The implementation has delivered significant improvements to FNZ’s security infrastructure:

Our solution enabled FNZ to launch a new nationwide service utilising the secure platform for encryption key storage. This enhancement provides robust protection for authorised users against unwanted data breaches, significantly reducing the risk of unauthorised access to sensitive financial information.

The implementation achieved several critical objectives:

  • Established a secure foundation for encryption key storage and management
  • Maintained operational continuity throughout the implementation process
  • Enhanced protection against unauthorised system access
  • Improved monitoring and detection capabilities for potential key compromises
  • Strengthened overall data security measures
  • Created a scalable solution for protecting vital data across their entire platform

Migrating existing protected crypto keys from the F5 BIG-IP LTM to the HSM in a live environment was achieved seamlessly with no impact to customers.

Head of Technology Services

Head of Technology Services

Why FullProxy?

FullProxy’s expertise in both F5 technologies and security infrastructure made us the ideal partner for this critical security enhancement project. Our ability to implement complex solutions while maintaining operational continuity demonstrated our understanding of the unique challenges faced by global financial technology platforms like FNZ.

Get in touch with us today!

NHS Lothian had discovered their F5 appliances were sailing with improper configurations, leaving their network vulnerable to malicious intruders. With the spectre of cyber threats looming large, including the ominous prospect of patient data breaches, the need for swift and decisive action was paramount.
In today's cyber security landscape, universities face the dilemma of providing seamless yet secure remote access to their staff and students, irrespective of their geographical locations. For a prestigious UK top 20 university with a sprawling network encompassing thousands of individuals dispersed across the UK and beyond, this challenge was particularly daunting.
A prominent gaming company approached FullProxy seeking expertise in reviewing and implementing firewalls to strengthen their cybersecurity infrastructure. As a rapidly growing outfit in the games sector, they manage substantial volumes of sensitive customer data, making robust security measures paramount to their operations.
A financial institution was facing challenges with automation, config consistency and security posture and planned projects for open banking initiatives. They sought FullProxy’s consultancy services to address these issues and improve their current cyber security infrastructure and overall network traffic management of the F5 products they were using.