Imperva > Case Studies > Discovery Inc.'s Journey to Data Compliance in Public Cloud with Imperva Data Protection

Discovery Inc.'s Journey to Data Compliance in Public Cloud with Imperva Data Protection

Technology Category

Cybersecurity & Privacy - Security Compliance
Infrastructure as a Service (IaaS) - Public Cloud

Applicable Industries

Glass
National Security & Defense

Applicable Functions

Maintenance
Quality Assurance

Use Cases

Cybersecurity
Leasing Finance Automation

Services

Cloud Planning, Design & Implementation Services
Cybersecurity Services

About The Customer

Discovery, Inc. is a global leader in non-fiction entertainment, delivering over 8,000 hours of original programming each year. The company serves a passionate audience of superfans around the world with content that inspires, informs, and entertains. Discovery, Inc.’s programming includes Discovery Channel, Animal Planet, Science Channel, TLC, Food Network, HGTV, and Travel Channel and is available in 220 countries and territories, and in 50 languages. The company's popularity means they manage large amounts of digital customer and company data that is subject to compliance regulations and regular audits.

Log in to view content

The Challenge

Discovery, Inc., a global leader in non-fiction entertainment, faced a significant challenge in managing large amounts of digital customer and company data due to its popularity. The data was subject to compliance regulations and regular audits, and the company needed clearer visibility into their data estate. The challenge was compounded by several factors, including a merger and personnel changes in 2018, which left much of the older data inaccessible to new toolsets. Initially, Discovery, Inc. used Imperva’s SecureSphere to pinpoint certain schemas and security controls they needed to address, and to then adopt those security controls as required. However, as the company expanded into a more cloud-native infrastructure, they needed to extend their compliance requirements coverage to both on-premises and cloud-native technologies.

Log in to view content

The Solution

To address the challenge of scaling compliance requirement coverage into the cloud, Discovery, Inc. partnered with Imperva and its Platinum Partner, GuidePoint Security. They helped Discovery, Inc. in their shift to the cloud and provided visibility into cloud-based data sources for compliance. In February 2021, Discovery, Inc. deployed the Imperva Sonar platform to augment the SecureSphere infrastructure. The Sonar platform enabled a unified, multi-year view of all on-premise and cloud data sources. To deploy the Imperva Sonar platform, Discovery, Inc. onboarded assorted databases to run its application for a large audience, against a hard deadline. They achieved this by leveraging technical documentation and by having stakeholders on board.

Log in to view content

Operational Impact

The deployment of the Imperva Sonar platform made it much easier for Discovery, Inc. to achieve the visibility they needed for compliance, particularly in their new AWS environment. The discovery scanning, capacity to make extending compliance requirements to cloud data easier, and efficient console management the Imperva Sonar platform provided has helped Discovery, Inc. save significant time and effort. The company hails the project as a success, stating that the Sonar platform capabilities enabled them to get compliance done faster and more easily. Looking forward, Discovery, Inc. plans to create a bigger data security program and will be relying on Imperva to help scale its security strategy to meet all the new regulatory and data protection challenges.

Log in to view content

Quantitative Benefit

Discovery, Inc. was able to meet compliance requirements faster and more easily with the Sonar platform.
The company saved significant time and effort compared to the resources required to operationalize and support a custom-written solution to analyze their data.
The Sonar platform enabled a unified, multi-year view of all on-premise and cloud data sources.

Log in to view content

Case Study missing?

Start adding your own!

Register with your work email and create a new case study profile for your business.

Add New Record

Related Case Studies.

Major Aerospace Company Automates Asset Management

The O&M division of an aerospace and global security company was using spreadsheets to manually track more than 3,000 assets assigned to students and staff. Maintaining audit trails for this high volume of equipment became increasingly time-consuming and challenging. The chore involved knowing precisely what equipment was on hand, what had been issued, its location and the name of the custodial owner of each item. Every aspect of this task was carried owner of each item. Every aspect of this task was carried out by individuals with spreadsheets. Manually documenting the full lifecycle of each asset added to the burden. This included tracking maintenance requirements and records, incidents and damages, repairs, calibrations, depreciation, and end-of-life data.

Securing a Large Data Center in the EMEA Region: An IoT Case Study

A leading data-center operator in the EMEA region, with multiple facilities spanning over 25,000 square meters, faced significant security challenges. The operator experienced interruptions in their internal IT network due to unsupervised work of third-party technicians. Despite having a high-end building control system that provided 24x7 monitoring and control to all the building’s infrastructure, the data center was vulnerable from a cyber perspective as it was connected to the IT network infrastructure. The operator launched an urgent OT cyber security project that included both IT-OT network segmentation and OT network asset mapping and anomaly detection. The main objectives were to harden the security of the server systems, secure the facility’s power supply and server cooling system, strengthen the segmentation between building and operational systems, create a visual OT network map, and set up a system for presenting supply-chain attacks that may threaten the data center through equipment vendors’ maintenance activities.

Leveraging Graph Technology for Enhanced Cybersecurity: A Case Study on MITRE's CyGraph

MITRE, a federally-funded, not-for-profit company that manages seven national research and development laboratories in the United States, was grappling with the challenge of managing an influx of cybersecurity data. The constant changes in network environments were impacting the security posture of U.S. government agencies. Intrusion alerts, anti-virus warnings, and seemingly benign events like logins, service connections, and file share access were all potentially associated with adversary activity. The cybersecurity researchers at MITRE needed to go beyond rudimentary assessments of security posture and attack response. This required merging isolated data into higher-level knowledge of network-wide attack vulnerabilities and mission readiness. The challenge was not the lack of information, but the ability to assemble disparate pieces of information into an overall analytic picture for situational awareness, optimal courses of action, and maintaining mission readiness. The team also struggled with fully comprehending a given security environment and mapping all known vulnerabilities.

Data Capture for Afghanistan Forces

Electronic equipments on the field of Afghanistan provided information on the status of the vehicle and to identify potential threats surrounding it to the British Force. The monitoring and interpretation of this data requires robust and sophisticated digitization for data capture and communication.

Enhancing Security and Compliance in Remitly's Global Money Transfer Service with Fastly

Remitly, an online remittance service, was faced with the challenge of securing its proprietary global transfer network. The company needed a security solution that could meet PCI requirements and protect customers' sensitive transactions through its mobile application. The solution had to be capable of defending against new and emerging attack types without impacting performance. Remitly also had to deal with irregular traffic patterns, such as a sudden spike in account transfers from a small network segment on the Pacific coastline of South America. The company needed to determine in real time whether such traffic indicated an attack or valid requests. A traditional web application firewall (WAF) would not be able to distinguish this traffic, potentially leading to customer frustration if the IP was blacklisted.

Discrete Manufacturing Industries (Fiberglass Pipe)

The implementation of ERP software in a Discrete Manufacturing organization needs to be strategic, irrespective of its size and capacity. The client had already implemented an ERP system which fulfilled their requirements but was not efficient enough. Efficiency here meant Synchronized Planning, Updating and Multisite Planning. Planning at client’s place was done outside the ERP system. Lack of proper synchronization to the ERP system paved way to huge delays in the changes getting updated in the system. These delays caused disruption in achieving delivery schedules. Multisite Planning is a solution to an organization which has multiple production units (may or may not be geographically separated) and thus needs planning across these units to synchronize production activities within them. The client also has multiple factories and hence Production Planning control is very essential in their case. Since Multisite planning was not possible with Baan ERP system, this was another bottleneck for the client.

Major Aerospace Company Automates Asset Management

The O&M division of an aerospace and global security company was using spreadsheets to manually track more than 3,000 assets assigned to students and staff. Maintaining audit trails for this high volume of equipment became increasingly time-consuming and challenging. The chore involved knowing precisely what equipment was on hand, what had been issued, its location and the name of the custodial owner of each item. Every aspect of this task was carried owner of each item. Every aspect of this task was carried out by individuals with spreadsheets. Manually documenting the full lifecycle of each asset added to the burden. This included tracking maintenance requirements and records, incidents and damages, repairs, calibrations, depreciation, and end-of-life data.

Securing a Large Data Center in the EMEA Region: An IoT Case Study

A leading data-center operator in the EMEA region, with multiple facilities spanning over 25,000 square meters, faced significant security challenges. The operator experienced interruptions in their internal IT network due to unsupervised work of third-party technicians. Despite having a high-end building control system that provided 24x7 monitoring and control to all the building’s infrastructure, the data center was vulnerable from a cyber perspective as it was connected to the IT network infrastructure. The operator launched an urgent OT cyber security project that included both IT-OT network segmentation and OT network asset mapping and anomaly detection. The main objectives were to harden the security of the server systems, secure the facility’s power supply and server cooling system, strengthen the segmentation between building and operational systems, create a visual OT network map, and set up a system for presenting supply-chain attacks that may threaten the data center through equipment vendors’ maintenance activities.

Leveraging Graph Technology for Enhanced Cybersecurity: A Case Study on MITRE's CyGraph

MITRE, a federally-funded, not-for-profit company that manages seven national research and development laboratories in the United States, was grappling with the challenge of managing an influx of cybersecurity data. The constant changes in network environments were impacting the security posture of U.S. government agencies. Intrusion alerts, anti-virus warnings, and seemingly benign events like logins, service connections, and file share access were all potentially associated with adversary activity. The cybersecurity researchers at MITRE needed to go beyond rudimentary assessments of security posture and attack response. This required merging isolated data into higher-level knowledge of network-wide attack vulnerabilities and mission readiness. The challenge was not the lack of information, but the ability to assemble disparate pieces of information into an overall analytic picture for situational awareness, optimal courses of action, and maintaining mission readiness. The team also struggled with fully comprehending a given security environment and mapping all known vulnerabilities.

Data Capture for Afghanistan Forces

Electronic equipments on the field of Afghanistan provided information on the status of the vehicle and to identify potential threats surrounding it to the British Force. The monitoring and interpretation of this data requires robust and sophisticated digitization for data capture and communication.

Enhancing Security and Compliance in Remitly's Global Money Transfer Service with Fastly

Remitly, an online remittance service, was faced with the challenge of securing its proprietary global transfer network. The company needed a security solution that could meet PCI requirements and protect customers' sensitive transactions through its mobile application. The solution had to be capable of defending against new and emerging attack types without impacting performance. Remitly also had to deal with irregular traffic patterns, such as a sudden spike in account transfers from a small network segment on the Pacific coastline of South America. The company needed to determine in real time whether such traffic indicated an attack or valid requests. A traditional web application firewall (WAF) would not be able to distinguish this traffic, potentially leading to customer frustration if the IP was blacklisted.

Discrete Manufacturing Industries (Fiberglass Pipe)

The implementation of ERP software in a Discrete Manufacturing organization needs to be strategic, irrespective of its size and capacity. The client had already implemented an ERP system which fulfilled their requirements but was not efficient enough. Efficiency here meant Synchronized Planning, Updating and Multisite Planning. Planning at client’s place was done outside the ERP system. Lack of proper synchronization to the ERP system paved way to huge delays in the changes getting updated in the system. These delays caused disruption in achieving delivery schedules. Multisite Planning is a solution to an organization which has multiple production units (may or may not be geographically separated) and thus needs planning across these units to synchronize production activities within them. The client also has multiple factories and hence Production Planning control is very essential in their case. Since Multisite planning was not possible with Baan ERP system, this was another bottleneck for the client.

Major Aerospace Company Automates Asset Management

The O&M division of an aerospace and global security company was using spreadsheets to manually track more than 3,000 assets assigned to students and staff. Maintaining audit trails for this high volume of equipment became increasingly time-consuming and challenging. The chore involved knowing precisely what equipment was on hand, what had been issued, its location and the name of the custodial owner of each item. Every aspect of this task was carried owner of each item. Every aspect of this task was carried out by individuals with spreadsheets. Manually documenting the full lifecycle of each asset added to the burden. This included tracking maintenance requirements and records, incidents and damages, repairs, calibrations, depreciation, and end-of-life data.

Securing a Large Data Center in the EMEA Region: An IoT Case Study

A leading data-center operator in the EMEA region, with multiple facilities spanning over 25,000 square meters, faced significant security challenges. The operator experienced interruptions in their internal IT network due to unsupervised work of third-party technicians. Despite having a high-end building control system that provided 24x7 monitoring and control to all the building’s infrastructure, the data center was vulnerable from a cyber perspective as it was connected to the IT network infrastructure. The operator launched an urgent OT cyber security project that included both IT-OT network segmentation and OT network asset mapping and anomaly detection. The main objectives were to harden the security of the server systems, secure the facility’s power supply and server cooling system, strengthen the segmentation between building and operational systems, create a visual OT network map, and set up a system for presenting supply-chain attacks that may threaten the data center through equipment vendors’ maintenance activities.

Leveraging Graph Technology for Enhanced Cybersecurity: A Case Study on MITRE's CyGraph

MITRE, a federally-funded, not-for-profit company that manages seven national research and development laboratories in the United States, was grappling with the challenge of managing an influx of cybersecurity data. The constant changes in network environments were impacting the security posture of U.S. government agencies. Intrusion alerts, anti-virus warnings, and seemingly benign events like logins, service connections, and file share access were all potentially associated with adversary activity. The cybersecurity researchers at MITRE needed to go beyond rudimentary assessments of security posture and attack response. This required merging isolated data into higher-level knowledge of network-wide attack vulnerabilities and mission readiness. The challenge was not the lack of information, but the ability to assemble disparate pieces of information into an overall analytic picture for situational awareness, optimal courses of action, and maintaining mission readiness. The team also struggled with fully comprehending a given security environment and mapping all known vulnerabilities.

© 2015-2025 Asia Growth Partners Limited | Privacy Policy

Contact us

Let's talk!

Thank you for your message!
We will contact you soon.