Bsecure The Mainframe and Security Company
Actualising Mainframe Resilience through Data Protection and Security

Technological sophistication is a double-edged sword – as useful as some features can be, end-users may find them challenging to implement. Consider z/OS, one of the most powerful operating systems for IBM z/Architecture mainframes; customers could find these advanced architectures extremely difficult to use or manage while securing the data in the mainframe remains yet another tedious task on its own. Even a small period of unplanned downtime for mission-critical workloads might have significant repercussions for customers and hugged loss of money and penalties. Such circumstances or use cases are common occurrences within the auditing space. For example, businesses needing to audit their mainframes continuously spend millions of dollars on software and hire numerous expensive specialists with extensive knowledge to meet their security needs. Situations such as this can be salvaged through expert consulting service providers who are specialised in information technology and IBM mainframes – an area that Bsecure excels at.

A consultancy specialised in the commercialisation of security solutions and services for mainframe and z/ OS systems, Bsecure is one of the few firms focusing on all security elements of IBM mainframe architecture. The company was incepted in 2006 in an environment where mainframes were increasingly powerful, and there was a major shortage of professionals capable of managing them. Realising this demand, Bsecure launched the VA-060 online course, which aims to teach professionals the principles of ethical hacking, thereby empowering them to implement and audit relevant controls to address any or all loopholes within their architecture.

In the last fourteen years, hundreds of professionals have been trained in English and Spanish. “Learning hacking is critical to understanding how things are done while avoiding pitfalls.” - states Ángel Gómez Ruiz, CEO & CTO. Through this course, Bsecure developed its software and services named DataPASS (Data Protection, Audit and Security Services) to assist clients in passing any audit process and measuring all vital risks within a mainframe environment. All the outputs of DataPASS controls are used to comply with regulations like (PCI, ISO2700, Solvencia II, Basilea IV, Central Bank, GDPR, SOX, and many more). “It’s extremely simple for us to teach them how to detect and fix problems with a fraction of the money that they need to spend,” states Gómez. This enables its clients to control all technological and organisational auditing processes concerning data security on a mainframe.

Bsecure developed the solution taking into account all the new trends in IBM technology. The company monitors a client’s mainframe infrastructure, eliminating the burdening task of hiring qualified and experienced professionals. The Service is also compatible with the new complex IBM Z15 models, reducing the number of machines required in large banks.

Interestingly, the organisation successfully deployed DataPASS for Rural Servicios Informáticos (RSI) to help them achieve mainframe security compliance. With eight million clients and five billion transactions every year, RSI is a technical integration (TI) service business owned by 74 small and medium banks in Spain. Currently, the Bsecure DataPASS assesses the majority of controls (over 200) in each of the LPARs that they implement on a daily and biweekly basis. This data illustrates the degree of risk and regulatory compliance in the settings, as well as the evolution of ongoing security development. The Information is then shared with the Board of Directors Committee and other corporate departments involved in TI risk and compliance through the CISO. Through the implementation of Bsecure DataPASS, RSI has progressed from simply recognising security issues to knowing everything there is to know about the shortcomings and how to fix them.

Furthermore, Bsecure meets all of its clients’ security needs through its own software and services or third-party technology and promptly discovers and prioritises intrusion threats, as well as assessing the possible effect and exposure of any vulnerabilities discovered. Bsecure is still the only firm in the world to provide the new VA-080 online course, which is geared toward technology auditors tasked with auditing IBM z/OS mainframes. Bsecure believes that “knowledge is security”, and it strives to impart security, risk, auditing, and compliance information to clients through all of its services and solutions.