Download PDF
BeyondTrust > Case Studies > A Smooth Road to Compliance for a Large Health Plan
BeyondTrust Logo

A Smooth Road to Compliance for a Large Health Plan

Technology Category
  • Cybersecurity & Privacy - Database Security
  • Cybersecurity & Privacy - Network Security
  • Cybersecurity & Privacy - Security Compliance
Applicable Industries
  • Healthcare & Hospitals
Applicable Functions
  • Maintenance
  • Quality Assurance
Use Cases
  • Cybersecurity
  • Regulatory Compliance Monitoring
Services
  • System Integration
  • Testing & Certification
The Challenge
The company was faced with upgrading its aging risk and compliance infrastructure, which previously relied on a disparate group of point products to scan for vulnerabilities and assess different operating systems for Sarbanes-Oxley and other types of compliance. Status data from the disparate solutions was imported into a SQL database onto which the IT department had built some limited dashboarding and reporting capabilities. However, IT personnel were still required to spend time writing custom code in order to extend the point solutions and enable them to interact with the database. In fact, the lack of integration among the various systems was creating inefficiencies that hampered the company’s ability to prepare for and pass compliance audits. The company sought a comprehensive and cost effective model for risk and compliance that would not only be easier to use and maintain, but provide a truly unified view into the status of all systems. As a UNIX shop, the company also needed a solution that could perform the deep, credentialed scans required for real protection from vulnerabilities, while also protecting the system’s root password.
About The Customer
This BeyondTrust and McAfee customer is a leading nonprofit integrated health plan, serving more than 8.6 million people in the U.S. from 35 hospitals and 431 medical office buildings in nine states and the District of Columbia. The company has approximately 180,600 employees and physicians. The company operates in the healthcare industry and provides services to more than 8.6 million people. The company's IT environment includes 300,000 end user platforms and 20,000 servers.
The Solution
For its new compliance infrastructure, the company chose a suite of solutions including McAfee Vulnerability Manager, McAfee Solidcore, McAfee Total Protection for Compliance, and McAfee Risk Advisor – all integrated within the McAfee ePolicy Administrator (ePO), and BeyondTrust PowerBroker Servers. An added benefit for the company selecting McAfee Vulnerability Manager was its integration capabilities with BeyondTrust’s PowerBroker Servers. PowerBroker granularly delegates privileges and authorization without disclosing the root password on the company’s mission-critical UNIX platforms. McAfee Vulnerability Manager scans all of the company’s networked assets to provide fast, precise, and complete insights into system vulnerabilities and to ensure that each node is equipped with the latest virus updates. Also, McAfee Risk Advisor provides complete integration for all other McAfee countermeasures to give the company an instant view of system vulnerabilities and missing patches, indicating which countermeasures are in place to address the vulnerabilities. Tying it all together is ePO, which gives the company a centralized dashboard for managing security across all endpoints, networks, and data.
Operational Impact
  • Provides comprehensive and integrated compliance environment
  • Facilitates and streamlines regulatory auditing process
  • Enables deep credentialed vulnerability scanning without requiring assignment of root password
Quantitative Benefit
  • 300,000 licenses of Vulnerability Manager purchased
  • Additional 20,000 server licenses for Solidcore and Risk Advisor purchased
  • Enterprise-level compliance solution installed in three months

Related Case Studies.

Contact us

Let's talk!

* Required
* Required
* Required
* Invalid email address
By submitting this form, you agree that IoT ONE may contact you with insights and marketing messaging.
No thanks, I don't want to receive any marketing emails from IoT ONE.
Submit

Thank you for your message!
We will contact you soon.