Case Study: Sompo International Holdings Ltd achieves unified vulnerability visibility and Active Directory hardening with Tenable Networks

Sompo Holdings Deploys Tenable’s Vulnerability Management And Active Directory (Ad) Hardening Solution for Group-wide Integration of Security Programs

SOMPO Holdings, a major Japanese insurance group undergoing an SSC (Shared Service Center) IT transformation, needed to unify and harden security across dozens of subsidiaries and 50,000 employees. Facing overwhelmed, manual vulnerability processes and rising cloud/container adoption, their priorities were comprehensive asset discovery, risk-based vulnerability reduction and Active Directory (AD) hardening to prevent lateral attacks and privilege escalation.

SOMPO deployed Tenable solutions—Tenable.io, Tenable.ad and Tenable Lumin—to automate asset identification, visualize risk with actionable scores, manage vulnerabilities across cloud and on‑premises environments, and monitor/harden AD. The rollout cut manual workload, improved triage and visibility, reduced the attack surface, and enabled group-wide, standardized security controls that support brand protection and the SSC vision.

Sompo International Holdings Ltd

Kenichiro Shimada

Product Owner, IT Strategy Planning Unit