Cisco Vulnerability Management Global 500 Banking Company

TechValidate Customer Research Library / Cisco Vulnerability Management / Case Studies /

Kenna Security Case Study

Global 500 Banking Company

Introduction

This case study of a Global 500 banking company is based on an October 2019 survey of Kenna Security customers by TechValidate, a 3rd-party research service. The profiled company asked to have their name blinded to protect their confidentiality.

“Kenna Security has enabled our organization to shift from count-based vulnerability management to a true risk-based approach, significantly reducing our vulnerability exposure and overall risk.”

Challenges

The business challenges that led the profiled company to evaluate and ultimately select Kenna Security:

Vulnerability management challenges they experienced that led them to implement the Kenna Security Platform:
- Too many vulnerabilities with no way to effectively prioritize
- High volume of security data lacking context for decision making
- No way to quantify or measure risk from vulnerabilities
- Inefficiencies in vulnerability remediation

Use Case

The key features and functionalities of Kenna Security that the surveyed company uses:

Approaches used to prioritize vulnerabilities prior to Kenna:
- CVSS 7+
When asked what best describes their current engagement model between the Security and IT team, they said that Security investigates; Security and IT work together to prioritize; IT remediates.
How they evaluate the success of their Kenna Security platform implementation:
- Kenna risk score reduction
- SLA Adherence
Kenna’s primary advantage(s) over other vulnerability management platforms:
- Kenna goes beyond basic risk scoring and tells them what they need to fix first
- Kenna provides meaningful and actionable data for remediation (remediation intelligence)
- Kenna provides awareness of how much risk is in their environment
- Kenna aggregates data and reporting from multiple tools (vuln scanners, CMDB, discovery)
- Kenna includes multiple threat intel feeds (eliminating the need for subscription)

Results

The surveyed company achieved the following results with Kenna Security:

Reduction of time spent on the following activities, since using Kenna:
- Time spent on Vulnerability Investigation: over 75%
- Time spent on remediation: over 75%
- Time spent on reporting: over 25%
Kenna Security Platform compared to other vulnerability management solutions:

About Kenna.VM

Cisco Vulnerability Management (formerly Kenna.VM) offers an effective, efficient way to reduce your risk profile using risk-based prioritization powered by data science. Rely on it to ID the vulnerabilities that put you at the greatest risk, create a self-service environment for remediation teams, set intelligent SLAs based on your risk tolerance, compare your risk posture against industry peers, deliver clear reports with intuitive metrics, and more.

Learn More:

Cisco Vulnerability Management

TechValidate Research on Cisco Vulnerability Management