Rapid7 Case Studies Rapid7 Nexpose Helps Sierra View Medical Center Prioritize Risk and Remediate Fast

Edit This Case Study Record

	Rapid7 Nexpose Helps Sierra View Medical Center Prioritize Risk and Remediate Fast Rapid7

Rapid7 Nexpose Helps Sierra View Medical Center Prioritize Risk and Remediate Fast

Rapid7

Technology Category	Cybersecurity & Privacy - Endpoint Security Cybersecurity & Privacy - Network Security Cybersecurity & Privacy - Security Compliance
Applicable Industries	Healthcare & Hospitals
Applicable Functions	Facility Management Business Operation
Use Cases	Intrusion Detection Systems Remote Asset Management Regulatory Compliance Monitoring
Services	System Integration Cloud Planning, Design & Implementation Services
Challenge	Sierra View Medical Center faced significant challenges in maintaining real-time visibility and control over its endpoints and servers. The healthcare industry, being a prime target for cyberattacks, required robust security measures to protect sensitive patient data. However, the existing system at Sierra View relied on outdated data from quarterly and biannual scans, which were up to six months old. This outdated information made it difficult to prioritize and assign remediation tasks effectively. The lack of granularity in the CVSS scores further complicated the process, making it nearly impossible to manage vulnerabilities efficiently. As the sole full-time information security practitioner, Scott Cheney needed a more streamlined and automated approach to share risk insights with the IT operations, networks, and systems staff. Read More
About Customer	Sierra View Medical Center is a state-of-the-art hospital located in Porterville, California. The medical center employs 1,100 staff members and relies on a complex IT infrastructure comprising 1,200 endpoints, 300 servers, and an additional 1,500 networked devices. The hospital is dedicated to providing the best possible care to its patients, which necessitates a highly secure and efficient IT environment. Given the critical nature of healthcare data and the increasing frequency of cyberattacks targeting the healthcare sector, Sierra View Medical Center required a robust solution to enhance its cybersecurity measures. Scott Cheney, the information security manager, was tasked with ensuring the security and resilience of the hospital's IT systems, despite being the only full-time information security practitioner on staff. Read More
Solution	To address these challenges, Sierra View Medical Center implemented Rapid7 Nexpose and InsightIDR. Nexpose is a leading vulnerability management platform that provides real-time visibility into the organization's risk landscape. It allows IT teams to see exactly where vulnerabilities exist, view data in real-time, and assign remediation tasks quickly and efficiently. InsightIDR complements Nexpose by offering integrated detection and investigation capabilities, including user behavior analytics, endpoint detection, and visual log search. The unified Rapid7 Insight Agent facilitated a smooth deployment process, eliminating the need for credentialed scanning on endpoints. This setup provided Cheney with real-time visibility into changes in the virtual desktop environment, significantly enhancing the hospital's cybersecurity posture. The cloud delivery model of Nexpose was well-received by the IT staff, as it reduced the burden of managing additional systems and servers. Read More Log in to view content
Contents

Technology Category

Cybersecurity & Privacy - Endpoint Security

Cybersecurity & Privacy - Network Security

Cybersecurity & Privacy - Security Compliance

Applicable Industries

Healthcare & Hospitals

Applicable Functions

Facility Management

Business Operation

Use Cases

Intrusion Detection Systems

Remote Asset Management

Regulatory Compliance Monitoring

Services

System Integration

Cloud Planning, Design & Implementation Services

Challenge

Sierra View Medical Center faced significant challenges in maintaining real-time visibility and control over its endpoints and servers. The healthcare industry, being a prime target for cyberattacks, required robust security measures to protect sensitive patient data. However, the existing system at Sierra View relied on outdated data from quarterly and biannual scans, which were up to six months old. This outdated information made it difficult to prioritize and assign remediation tasks effectively. The lack of granularity in the CVSS scores further complicated the process, making it nearly impossible to manage vulnerabilities efficiently. As the sole full-time information security practitioner, Scott Cheney needed a more streamlined and automated approach to share risk insights with the IT operations, networks, and systems staff.

About Customer

Sierra View Medical Center is a state-of-the-art hospital located in Porterville, California. The medical center employs 1,100 staff members and relies on a complex IT infrastructure comprising 1,200 endpoints, 300 servers, and an additional 1,500 networked devices. The hospital is dedicated to providing the best possible care to its patients, which necessitates a highly secure and efficient IT environment. Given the critical nature of healthcare data and the increasing frequency of cyberattacks targeting the healthcare sector, Sierra View Medical Center required a robust solution to enhance its cybersecurity measures. Scott Cheney, the information security manager, was tasked with ensuring the security and resilience of the hospital's IT systems, despite being the only full-time information security practitioner on staff.

Solution

To address these challenges, Sierra View Medical Center implemented Rapid7 Nexpose and InsightIDR. Nexpose is a leading vulnerability management platform that provides real-time visibility into the organization's risk landscape. It allows IT teams to see exactly where vulnerabilities exist, view data in real-time, and assign remediation tasks quickly and efficiently. InsightIDR complements Nexpose by offering integrated detection and investigation capabilities, including user behavior analytics, endpoint detection, and visual log search. The unified Rapid7 Insight Agent facilitated a smooth deployment process, eliminating the need for credentialed scanning on endpoints. This setup provided Cheney with real-time visibility into changes in the virtual desktop environment, significantly enhancing the hospital's cybersecurity posture. The cloud delivery model of Nexpose was well-received by the IT staff, as it reduced the burden of managing additional systems and servers.

Impact #1	The implementation of Rapid7 Nexpose provided Sierra View Medical Center with real-time visibility into its IT environment, allowing for more effective risk management.
Impact #2	The detailed Real Risk Score offered by Nexpose, which ranges from 1 to 1,000, enabled the IT team to prioritize remediation tasks based on factors such as vulnerability age, available exploits, and malware kits.
Impact #3	The Live Dashboards feature of Nexpose allowed Cheney and his team to monitor the progress of remediation projects with dynamic, real-time data, enhancing overall operational efficiency.

Impact #1

The implementation of Rapid7 Nexpose provided Sierra View Medical Center with real-time visibility into its IT environment, allowing for more effective risk management.

Impact #2

The detailed Real Risk Score offered by Nexpose, which ranges from 1 to 1,000, enabled the IT team to prioritize remediation tasks based on factors such as vulnerability age, available exploits, and malware kits.

Impact #3

The Live Dashboards feature of Nexpose allowed Cheney and his team to monitor the progress of remediation projects with dynamic, real-time data, enhancing overall operational efficiency.

Benefit #1	Resolved 12% of all server vulnerabilities within a month and a half of deploying Nexpose.
Benefit #2	Addressed 7% of VDI bugs in the same timeframe.

Benefit #1

Resolved 12% of all server vulnerabilities within a month and a half of deploying Nexpose.

Benefit #2

Addressed 7% of VDI bugs in the same timeframe.

Download PDF Version

Overview

Rapid7 Nexpose Helps Sierra View Medical Center Prioritize Risk and Remediate Fast

Operational Impact

Quantitative Benefit