下载PDF
BeyondTrust > 实例探究 > A Smooth Road to Compliance for a Large Health Plan
BeyondTrust Logo

A Smooth Road to Compliance for a Large Health Plan

技术
  • 网络安全和隐私 - 数据库安全
  • 网络安全和隐私 - 网络安全
  • 网络安全和隐私 - 安全合规
适用行业
  • 医疗保健和医院
适用功能
  • 维护
  • 质量保证
用例
  • 网络安全
  • 监管合规监控
服务
  • 系统集成
  • 测试与认证
挑战
The company was faced with upgrading its aging risk and compliance infrastructure, which previously relied on a disparate group of point products to scan for vulnerabilities and assess different operating systems for Sarbanes-Oxley and other types of compliance. Status data from the disparate solutions was imported into a SQL database onto which the IT department had built some limited dashboarding and reporting capabilities. However, IT personnel were still required to spend time writing custom code in order to extend the point solutions and enable them to interact with the database. In fact, the lack of integration among the various systems was creating inefficiencies that hampered the company’s ability to prepare for and pass compliance audits. The company sought a comprehensive and cost effective model for risk and compliance that would not only be easier to use and maintain, but provide a truly unified view into the status of all systems. As a UNIX shop, the company also needed a solution that could perform the deep, credentialed scans required for real protection from vulnerabilities, while also protecting the system’s root password.
关于客户
This BeyondTrust and McAfee customer is a leading nonprofit integrated health plan, serving more than 8.6 million people in the U.S. from 35 hospitals and 431 medical office buildings in nine states and the District of Columbia. The company has approximately 180,600 employees and physicians. The company operates in the healthcare industry and provides services to more than 8.6 million people. The company's IT environment includes 300,000 end user platforms and 20,000 servers.
解决方案
For its new compliance infrastructure, the company chose a suite of solutions including McAfee Vulnerability Manager, McAfee Solidcore, McAfee Total Protection for Compliance, and McAfee Risk Advisor – all integrated within the McAfee ePolicy Administrator (ePO), and BeyondTrust PowerBroker Servers. An added benefit for the company selecting McAfee Vulnerability Manager was its integration capabilities with BeyondTrust’s PowerBroker Servers. PowerBroker granularly delegates privileges and authorization without disclosing the root password on the company’s mission-critical UNIX platforms. McAfee Vulnerability Manager scans all of the company’s networked assets to provide fast, precise, and complete insights into system vulnerabilities and to ensure that each node is equipped with the latest virus updates. Also, McAfee Risk Advisor provides complete integration for all other McAfee countermeasures to give the company an instant view of system vulnerabilities and missing patches, indicating which countermeasures are in place to address the vulnerabilities. Tying it all together is ePO, which gives the company a centralized dashboard for managing security across all endpoints, networks, and data.
运营影响
  • Provides comprehensive and integrated compliance environment
  • Facilitates and streamlines regulatory auditing process
  • Enables deep credentialed vulnerability scanning without requiring assignment of root password
数量效益
  • 300,000 licenses of Vulnerability Manager purchased
  • Additional 20,000 server licenses for Solidcore and Risk Advisor purchased
  • Enterprise-level compliance solution installed in three months

相关案例.

联系我们

欢迎与我们交流!

* Required
* Required
* Required
* Invalid email address
提交此表单,即表示您同意 IoT ONE 可以与您联系并分享洞察和营销信息。
不,谢谢,我不想收到来自 IoT ONE 的任何营销电子邮件。
提交

Thank you for your message!
We will contact you soon.