Megazone Cloud has established a cloud security system for Coway that allows for security checks from the development stage, utilizing solutions from global security firm Wiz.
On September 21, Megazone Cloud announced the completion of the 'Coway Cloud Native Application Protection Platform (CNAPP)' project, which integrates Wiz's security solutions into Coway's enterprise system.
Megazone Cloud designed the security architecture to fit Coway's multi-cloud environment and managed the entire process, including the implementation and integration of the Wiz solution, notifications through internal collaboration tools, and on-site training and technical support.
With this implementation, Coway can now conduct unified security checks on its multi-cloud assets and development environments, including AWS, Google Cloud Platform (GCP), and GitHub, from a single system.
The security inspection method has shifted from being conducted by the security organization after the completion of system development to being verified directly by the development and infrastructure teams from the early stages of development.
Megazone Cloud integrated Wiz's 'Wiz Code' into the development process to detect security flaws before code deployment. Additionally, access scopes were differentiated to allow teams to verify only their assigned assets. This approach aims to reduce the burden of addressing potential issues that may arise post-deployment by identifying security flaws during the development phase.
Wizuyoung, head of the HALO unit at Megazone Cloud's security business, stated, "This Coway project is a practical example of implementing a system that checks security from the development stage based on Wiz. Megazone Cloud will expand this collaborative security approach across various clients, leveraging our capabilities in security consulting and solution implementation."
Gwak Seong-young, Chief Information Security Officer (CISO) of Coway, remarked, "With this implementation, we have secured integrated security visibility from the development stage to pre-deployment, allowing us to focus our capabilities on addressing actual high-risk elements. We will continue to collaborate with the development and infrastructure teams to expand the system of checking security from the development stage."
* This article has been translated by AI.
Copyright ⓒ Aju Press All rights reserved.