EMSI Demonstrates Proof of Compliance with Fugue

Customer Challenge

Because of the large number of recent, high-profile data breaches in the cloud, Emsi wanted a third-party vendor to verify that their AWS cloud systems were secure and meeting various compliance standards including NIST 800-53, SOC 2, GDPR, and ISO 27001. They wanted to demonstrate compliance to their customers, their auditors, and to themselves. Without this confidence, there was potential risk that customers would take longer in closing contracts with Emsi.

Fugue Solution

Emsi chose the Fugue SaaS solution as their compliance tool. Fugue's SaaS ishosted on AWS and utilizes services such as Fargate, RDS, Redshift and S3. Emsi's managers and engineers were able to on-board Fugue in a matter of days without any formal training, due to the product's ease of use and streamlined workflows. They used Fugue to scan Emsi's dozens of accounts and tens of thousands of resources then relied on its "Compliance by Control" live reports and built-in compliance libraries to determine if Emsi's AWS resources were compliant with the NIST 800-53, SOC 2, GDPR, and ISO 27001 standards. Emsi could demonstrate to their own customers almost immediately whether they were compliant.

Results and Benefits

Fugue has helped Emsi demonstrate to its customers, auditors, and themselves that their data is safe and secure on AWS. This assurance has reduced Emsi's time in closing new contracts. By using Fugue to audit their accounts for compliance with NIST 800-53, SOC 2, GDPR, and ISO 27001, Emsi no longer has a need to hire a new team of cloud security engineers to track and remediate compliance manually.