British publishing and education company leverages threat modeling to deliver secure learning platform.

A digital transformation journey

The organization is a British-owned publishing and education company operating worldwide, with over 30,000 employees.

As the Company transitioned from a publishing and media company to a learning-focused organization, it faced the critical task of mitigating risk to ensure a secure learning environment for its students. Learn why the Company chose IriusRisk as its automated threat modeling platform.

‍A secure education

Education carries significant responsibilities, accompanied by substantial security implications across all of the Company’s business areas.

"The problem we wanted to solve was getting a holistic view of security risks across our products, and quantifying those risks in a consistent and accurate way.” Director of DevSecOps

‍Leveraging automated threat modeling

Recognizing the limitations of traditional, manual threat modeling at scale, the Company embraced automation in its threat modeling process. This systematic approach enabled its security teams to identify product-specific threats and implement effective countermeasures.

“We were evaluating other tools in the space,” and based on our criteria and requirements, IriusRisk came out on top. That was predominantly because it had the flexibility for us to define our own custom risk libraries and an API where we could integrate our existing security testing." Director of DevSecOps

‍

Consistency, efficiency and scalability

By adopting IriusRisk, the Company shows its commitment to secure education during its digital transformation journey. By implementing IriusRisk's automated threat modeling platform, It effectively identified and mitigated threats, ensuring a risk-free learning environment for its students. The collaboration between the Organization and IriusRisk laid the foundation for consistent, efficient, and scalable security practices, enabling the Company to adapt to changing educational landscapes while prioritizing student well-being.

The outcomes...

With IriusRisk's support, its security team could seamlessly scale threat modeling efforts in tandem with technological advancements and evolving security threats.

Automation eliminated the challenges posed by manual threat modeling, allowing the Company to effectively manage the scale of its operations.

IriusRisk provided the Company with the means to establish consistent threat modeling practices across its diverse range of products and services.

Download full case study

We were evaluating other tools in the space, and based on our criteria and requirements, IriusRisk came out on top. That was predominantly because it had the flexibility for us to define our own custom risk libraries and an API where we could integrate our existing security testing.