下载PDF
Rapid7 > 实例探究 > Rapid7 Nexpose Helps Sierra View Medical Center Prioritize Risk and Remediate Fast
Rapid7 Logo

Rapid7 Nexpose Helps Sierra View Medical Center Prioritize Risk and Remediate Fast

技术
  • 网络安全和隐私 - 端点安全
  • 网络安全和隐私 - 网络安全
  • 网络安全和隐私 - 安全合规
适用行业
  • 医疗保健和医院
适用功能
  • 设施管理
  • 商业运营
用例
  • 入侵检测系统
  • 远程资产管理
  • 监管合规监控
服务
  • 系统集成
  • 云规划/设计/实施服务
挑战
Sierra View Medical Center faced significant challenges in maintaining real-time visibility and control over its endpoints and servers. The healthcare industry, being a prime target for cyberattacks, required robust security measures to protect sensitive patient data. However, the existing system at Sierra View relied on outdated data from quarterly and biannual scans, which were up to six months old. This outdated information made it difficult to prioritize and assign remediation tasks effectively. The lack of granularity in the CVSS scores further complicated the process, making it nearly impossible to manage vulnerabilities efficiently. As the sole full-time information security practitioner, Scott Cheney needed a more streamlined and automated approach to share risk insights with the IT operations, networks, and systems staff.
关于客户
Sierra View Medical Center is a state-of-the-art hospital located in Porterville, California. The medical center employs 1,100 staff members and relies on a complex IT infrastructure comprising 1,200 endpoints, 300 servers, and an additional 1,500 networked devices. The hospital is dedicated to providing the best possible care to its patients, which necessitates a highly secure and efficient IT environment. Given the critical nature of healthcare data and the increasing frequency of cyberattacks targeting the healthcare sector, Sierra View Medical Center required a robust solution to enhance its cybersecurity measures. Scott Cheney, the information security manager, was tasked with ensuring the security and resilience of the hospital's IT systems, despite being the only full-time information security practitioner on staff.
解决方案
To address these challenges, Sierra View Medical Center implemented Rapid7 Nexpose and InsightIDR. Nexpose is a leading vulnerability management platform that provides real-time visibility into the organization's risk landscape. It allows IT teams to see exactly where vulnerabilities exist, view data in real-time, and assign remediation tasks quickly and efficiently. InsightIDR complements Nexpose by offering integrated detection and investigation capabilities, including user behavior analytics, endpoint detection, and visual log search. The unified Rapid7 Insight Agent facilitated a smooth deployment process, eliminating the need for credentialed scanning on endpoints. This setup provided Cheney with real-time visibility into changes in the virtual desktop environment, significantly enhancing the hospital's cybersecurity posture. The cloud delivery model of Nexpose was well-received by the IT staff, as it reduced the burden of managing additional systems and servers.
运营影响
  • The implementation of Rapid7 Nexpose provided Sierra View Medical Center with real-time visibility into its IT environment, allowing for more effective risk management.
  • The detailed Real Risk Score offered by Nexpose, which ranges from 1 to 1,000, enabled the IT team to prioritize remediation tasks based on factors such as vulnerability age, available exploits, and malware kits.
  • The Live Dashboards feature of Nexpose allowed Cheney and his team to monitor the progress of remediation projects with dynamic, real-time data, enhancing overall operational efficiency.
数量效益
  • Resolved 12% of all server vulnerabilities within a month and a half of deploying Nexpose.
  • Addressed 7% of VDI bugs in the same timeframe.

相关案例.

联系我们

欢迎与我们交流!

* Required
* Required
* Required
* Invalid email address
提交此表单,即表示您同意 IoT ONE 可以与您联系并分享洞察和营销信息。
不,谢谢,我不想收到来自 IoT ONE 的任何营销电子邮件。
提交

Thank you for your message!
We will contact you soon.