Mathieu Manalo, CISO at ORIX METRO on digital security

2026-07-20 · Source: AI Magazine · Field: Technology & Digital — Cybersecurity & Data Privacy, Cloud Computing & IT Infrastructure · Depth: Intermediate, quick

Summary

Mathieu Manalo, CISO at ORIX METRO Leasing and Finance Corporation, a joint venture of ORIX Corporation and Metro Bank in the Philippines, discusses the company's approach to digital security. ORIX METRO, which offers financial leasing, fleet services, insurance, and real estate, has focused on consolidating fragmented security solutions and transforming employee workflows nationwide to enhance efficiency and security. Manalo emphasizes creating easily understood and implementable policies that are secure by design. The company partners with Anthrex for its managed security operations center, Fortinet for infrastructure, Proofpoint for email security and awareness training, and Kalis for its enterprise risk platform, aiming for an identity-centric secure ecosystem for its operations and customers.

Key takeaway

For CISOs or security leaders aiming to enhance your organization's digital security posture, prioritize consolidating disparate security solutions to reduce fragmentation. Focus on developing easily understood and implementable policies that are secure by design, and invest in employee awareness training. Consider strategic partnerships with specialized vendors for managed security operations, infrastructure, email protection, and enterprise risk platforms to build a more identity-centric ecosystem.

Key insights

Effective digital security involves consolidating fragmented solutions, simplifying policies, and engaging employees through awareness training.

Principles

• Security policies must be understandable and implementable.
• Consolidate fragmented security solutions.
• Foster an identity-centric security ecosystem.

Method

ORIX METRO's strategy involves consolidating fragmented security infrastructures, partnering with specialized vendors for SOC, infrastructure, email security, and risk management, and implementing identity-centric security.

In practice

• Utilize a managed SOC for security operations.
• Implement dedicated email security and awareness training.
• Adopt an enterprise risk platform for identity-centric security.

Topics

• Digital Security
• CISO Strategy
• Security Operations Center
• Email Security
• Risk Management
• Employee Awareness Training
• Identity-Centric Security

Best for: Security Engineer, IT Professional, Consultant

Related on AIssential

• Why People Can Be Digital Security's Strongest Link — Properly trained employees can transform from a security vulnerability into an organization's most robust defense.
• Sophos acquires Arco Cyber to enhance CISO-level AI security services — Sophos acquired Arco Cyber to enhance CISO-level AI security services, providing clear, actionable cyber risk insights.
• How CISOs Can Thrive Amidst Geopolitical And Economic Uncertainty — CISOs must optimize security spending, lead organizational change, and bolster enterprise risk management to thrive amidst volatility.
• Pulse Security Debuts Operational Management Platform Built for Security Leaders — The security industry needs an operational management platform for leaders, not just practitioners, to manage escalating cyber risks effectively.
• 5 ways to fortify your network against the new speed of AI attacks — Despite increasing automation in cyberattacks, human and systemic failures remain the primary cause of successful intrusions.
• While Everyone Watches Glasswing, Attackers Are Walking Through Your Front Door. — Most major cyberattacks exploit common, known vulnerabilities, not zero-days, with AI accelerating their scale.

See Counsel's argued verdicts on the open AI decisions leaders are weighing →

Open in AIssential →

Editorial summary, takeaway, and curation by AIssential. Original article published by AI Magazine.