"It has become the de facto standard because more people than what I would consider to be in ‘sensitive’ roles are using the capability. There are definitely groups of people who tend to handle sensitive data more frequently that have established muscle memory around the use of Virtru."
Chief Security Officer
Even the greatest defense is incomplete without a strong offense. That’s why exposure management companies trust Virtru to protect the sensitive information that must be shared externally in the course of getting business done. Exposure management companies specialize in proactive security to protect the data they possess, but Virtru specializes in defending forward — protecting data that must move outside of the perimeter — and giving you control of that data at all times.
We sat down with the Chief Security Officer at a well-known exposure management company with over 2,000 employees. They initially implemented Virtru to protect data exchanged through support workflows, but quickly found that Virtru addresses business needs for multiple departments. Virtru’s data security solutions have expanded from an initial customer support use case to become an integral part of the company’s data protection strategy.
With Virtru, this cybersecurity company can:
Easily add encryption to Google Workspace with simple, client-side data controls within the Google interface.
Enable Customer Support teams to protect sensitive information when communicating with customers to resolve support tickets.
Strengthen CMMC readiness with Virtru’s FedRAMP-authorized Data Security Platform, which is equipped to protect CUI (controlled unclassified information) shared from a secure enclave.
This company chose Virtru over the competition because of its seamless integration with Google Workspace. As the CSO explained, "The primary driver was the fact that we're a Google shop.” About 85% of the company’s employees use Gmail and Google Drive.
The initial Virtru use case came from the customer support team. In the course of their daily work, they often send and receive sensitive information that needs to be protected and controlled beyond the standard TLS encryption that comes with Google Workspace.
Since the initial deployment of Virtru for Gmail, usage has expanded across the company. “It has become the de facto standard because more people than what I would consider to be in ‘sensitive’ roles are using the capability.” He pointed to the legal team and HR team as primary examples: These teams frequently communicate with external parties, and the data they share is often sensitive. “So, there are definitely groups of people who tend to handle sensitive data more frequently that have established muscle memory around the use of Virtru."
The CSO estimates that 15-20% of the company’s business is in the public sector, so security requirements like CMMC are top of mind. The security team must maintain robust security practices while enabling efficient communication both internally and with customers.
As CMMC enforcement rolls out starting in 2025, organizations across the defense industrial base are heightening not only their own security practices, but also their requirements of software vendors. By demonstrating a commitment to protecting customers’ data — with Virtru’s FedRAMP-authorized platform as one part of its technology stack — this company is poised to serve public-sector and defense customers as security requirements evolve.
Virtru is a strategic data protection partner for this cybersecurity company, having proven its value through ease of use and consistent performance.
As the CSO explained, if a vendor delivers what they promise, "I'm happy to continue to do business to cover other use cases, because it's just easier... if you do multiple things and they make sense for us, then I don't need to swap another vendor in. This increases our burden for vendor management and tool sprawl.” The company has identified potential expansion opportunities, particularly around secure file sharing through Google Drive. "That's an opportunity for us, because one of the concerns with Google Drive is when you share a top-level folder, there are no granular controls for sharing below that."
Another possible expansion on the horizon is the Virtru Gateway, which automates server-side security, invisible to the user, to protect information before it leaves the perimeter unprotected. The CSO described: "If you're sending sensitive information, let's make sure we offer the option to encrypt or just auto-encrypt where we can. Let’s reduce security friction." Virtru Gateway for Salesforce, for example, automatically scans Salesforce-generated emails before they leave the company’s network, then encrypts and protects anything determined to be sensitive.
Virtru has proven to be an effective solution for protecting sensitive information shared via Google Workspace. While exposure management companies face daily challenges and myriad threats, the implementation of Virtru provides peace of mind for the CSO, executive leadership, and the team members who work closely with external stakeholders.
/resource%20-%20arc%20of%20warren%20county%20case%20study/arc%20of%20warren-logo.jpg){kind=logo}
/Arkansas-Case-Study-Virtru.webp)
/resource-%20virtru%20video%20for%20email/Screenshot%202024-01-29%20at%2011.01.11%20AM.png)