CIE Case Study

PixAlert has enjoyed a successful working partnership with the CIÉ Group since 2005, providing Ireland’s National Transport Authority with inappropriate image detection management software across its extensive multi-site network.  Through a progressive and evolving working relationship, PixAlert has enabled CIÉ to measurably improve network security mechanisms while minimising its reputational risk through the controlled management of inappropriate and illicit images throughout its network.

CIÉ (Córas Iompair Éireann) is Ireland’s state-owned transport company which provides land public transport within the Republic of Ireland.  It is wholly owned by the Irish Government reporting to the Minister for Transport.  The Group is organised into a holding company and four subsidiary operating companies.  Strategic direction, control and overall co-ordination is provided by the holding company whilst each subsidiary and business unit has a high degree of operating autonomy.

Trading Subsidiaries:

• Iarnród Éireann, Ireland’s railway company, provides InterCity, DART (Dublin Area Rapid Transport) and suburban services
• Bus Éireann, Ireland’s major bus company providing nationwide bus services outside Dublin City
• Bus Átha Cliath provides city bus services in the Greater Dublin area
• CIÉ Tours, Ireland’s premier operator of coach tours and fly-drive vacations to Ireland and to other countries

INFRASTRUCTURE

CIÉ’s centralised holding company provides IT and telecom services and other key central management functions. Security falls within the remit of the IT group who are responsible for managing the entire network infrastructure across the organisation.

This extensive function includes the networking of all desktops, servers and email.  IT manage equipment located in numerous Iarnród Éireann locations including main rail destinations, Bus Éireann offices nationwide and Dublin Bus garages across the greater Dublin area.  In total over 100 locations around the country are connected to CIÉ’s network.

CIÉ’S CHALLENGE

CIÉ’s mission statement of Driving Efficiency through maximising operating effectiveness is enforced across all facets of its business.   Given the scope of CIÉ’s network infrastructure, CIÉ approached PixAlert with an objective of implementing an image monitoring software with multi –site spanning functionality to help the organisation focus and measurably achieve security and corporate policy structures through improving:

• Corporate Governance - reinforcing compliance to existing policy;
• Fostering a Responsible Work Environment - a duty of care commitment to providing ‘a safe working environment free from gender, ethical or racial harassment or discrimination’
• Protecting Corporate Reputation – effective detection and prevention controls to measurably reduce the damaging risk of inappropriate and illegal images residing in and disseminated across the CIÉ network

THE PIXALERT SOLUTION

CIÉ piloted PixAlert’s Image Auditor product and after a trial phase deployed Auditor to review all internal desktops and shares throughout the CIÉ organisation operating as an on-site review service. PixAlert Auditor provides auditing, analysis and reporting of illicit content displayed on corporate systems.

Initially PixAlert resources were used to directly classify, review and interpret image content results on site. When images on a network user’s PC exceeded set sensitivity levels, comprehensive details (including machine name, username, date/time and program) along with an encrypted thumbnail copy of the inappropriate image and content material were recorded. This information was provided to authorised CIÉ staff, who reviewed the log, captured image and associated data and took appropriate action.

In 2008 CIÉ moved from on-site review to PixAlert’s Remote Review Service which operates ‘in the cloud’ performing image review, ranking and a detailed classification analysis of images, delivering a near-zero false positive rate. CIÉ’s encrypted images are now reviewed and managed remotely by PixAlert staff. Remote Image Review is a powerful review and reporting solution which generates an independent reporting mechanism which can be used by organisations when choosing to pursue specific cases.

In 2006, CIÉ extended the scope of its network protection to include mailbox monitoring. Subsequently, following the launch of PixAlert’s ImageGuard MailAppliance product, CIÉ was one of the first companies to implement the new application as a proactive solution providing round –the-clock email safety through scanning and blocking mails containing illicit and inappropriate image content.

ImageGuard MailAppliance is a hardware appliance which audits inbound, outbound and internal emails by blocking blacklisted material and by flagging suspect material for review and categorisation. Key features include minimal impact on productivity and comprehensive reporting which provides management with up-to-date visibility.

When necessary, CIÉ has used the data gleaned from Image Auditor to pursue individual cases where further action was required. In parallel, ImageGuard MailAppliance has been used in conjunction with web browsing controls to minimise the volume of inappropriate materials entering and being stored on IT assets.

According to Tim Wilson, CIÉ’s Information Security Manager ‘we have always valued our close working relationship with PixAlert and together we have managed to meet CIÉ’s moral and legal obligations to manage inappropriate and potentially illegal images. We look forward to continuing our partnership to meet future challenges in this area’.

SUMMARY

Since installing PixAlert’s Image Auditor and ImageGuard MailAppliance products, CIÉ has successfully managed to demonstrably reduce the volume of inappropriate image material detected on its multi-site network while reinforcing corporate governance. CIÉ has found PixAlert’s software easy to integrate and unobtrusive to applications while providing effective security mechanisms with comprehensive reporting structures.

The multi-site functionality of PixAlert’s software operates seamlessly across all of CIÉs network with rapid scanning capabilities. PixAlert’s detection technologies enable CIÉ to centrally and securely manage, control and block inappropriate image distribution through any network resource within the organisation.

PixAlert look forward to continue working closely with CIÉ in developing and enhancing their security controls and measurably minimising their financial liability and reputational risk through the effective management of inappropriate and illicit images throughout the CIÉ Group network.