Cisco Vulnerability Management Bank Of Hawaii Corporation

TechValidate Customer Research Library / Cisco Vulnerability Management / Case Studies /

Kenna.VM Case Study

Bank Of Hawaii Corporation

Introduction

This case study of Bank of Hawaii Corporation is based on a September 2020 survey of Kenna.VM customers by TechValidate, a 3rd-party research service.

“Kenna allows us to concentrate on vulnerabilities that pose a real risk to our environment and helps us prioritize remediation of this risk. This has enabled both the security and IT teams to reduce our organization’s risk score.”

“The customer success manager and customer success engineer have been very supportive in fixing any issues and helping with escalation if needed. (and) They have periodic check-ins to see how we are doing with the product.”

Challenges

The business challenges that led the profiled company to evaluate and ultimately select Kenna.VM:

The vulnerability management challenges they were experiencing that led them to implement the Kenna.VM:
- Too many vulnerabilities with no way to effectively prioritize
- Not having a way to quantify or measure risk from vulnerabilities

Use Case

The key features and functionalities of Kenna.VM that the surveyed company uses:

The approach they used to prioritize vulnerabilities prior to Kenna:
- A homegrown prioritization tool
They best describe their current engagement model between the Security and IT team as Security investigates; Security and IT work together to prioritize; IT remediates.
The criteria they use to evaluate the success of your Kenna.VM implementation:
- Kenna risk score reduction
- Reduction in vulnerability investigation time
- Reduction in reporting time

Results

The surveyed company achieved the following results with Kenna.VM:

Before Kenna vs. After Kenna: Have you seen a reduction in time spent on the following activities? (Security and IT team time combined)
- time spent on Vulnerability Investigation: 1 – 10%
- time spent on remediation: 10 – 25%
- time spent on reporting: 10 – 25%
Kenna’s primary advantage(s) over other vulnerability management platforms:
- Kenna goes beyond basic risk scoring and tells me what I need to fix first
- Kenna provides meaningful and actionable data for remediation (remediation intelligence)
- Kenna provides awareness of how much risk is in our environment
Rates the following for Kenna.VM compared to other vulnerability management solutions:
- remediation Intelligence (guidance on “what to fix first”): superior
- integrated real-time global exploit intelligence: on par
- data science-based risk scoring methodology: superior
- “Off the shelf” integrations with a wide range of security data sources: on par
- predictive vulnerability modeling: superior

About Cisco Vulnerability Management

Cisco Vulnerability Management (formerly Kenna.VM) offers an effective, efficient way to reduce your risk profile using risk-based prioritization powered by data science. Rely on it to ID the vulnerabilities that put you at the greatest risk, create a self-service environment for remediation teams, set intelligent SLAs based on your risk tolerance, compare your risk posture against industry peers, deliver clear reports with intuitive metrics, and more.

Learn More:

Cisco Vulnerability Management

TechValidate Research on Cisco Vulnerability Management