Cisco Vulnerability Management Large Enterprise Hospitality Company

TechValidate Customer Research Library / Cisco Vulnerability Management / Case Studies /

Kenna Security Case Study

Large Enterprise Hospitality Company

Introduction

This case study of a large enterprise hospitality company is based on an October 2019 survey of Kenna Security customers by TechValidate, a 3rd-party research service. The profiled company asked to have their name blinded to protect their confidentiality.

“Kenna Security platform has provided us the visibility and consolidation of vulnerabilities across the multiple endpoints in the organization. Kenna allows us to address critical vulnerabilities by prioritizing remediation based on severity and exploitability. "

Challenges

The business challenges that led the profiled company to evaluate and ultimately select Kenna Security:

Vulnerability management challenges they experienced that led them to implement the Kenna Security Platform:
- Too many vulnerabilities with no way to effectively prioritize
- High volume of security data lacking context for decision making
- No way to quantify or measure risk from vulnerabilities
- Inefficiencies in vulnerability remediation

Use Case

The key features and functionalities of Kenna Security that the surveyed company uses:

Approaches used to prioritize vulnerabilities prior to Kenna:
- CVSS 7+
- CVSS 8+
- CVSS 9+
- CVSS 10
- Use rating system from scanner

How they evaluate the success of their Kenna Security platform implementation:
- Reduction in Mean Time To Remediate (MTTR)
- Kenna risk score reduction
- Reduction in vulnerability investigation time
- Reduction in IT remediation time
- Reduction in reporting time
Kenna’s primary advantage(s) over other vulnerability management platforms:
- Kenna goes beyond basic risk scoring and tells them what they need to fix first
- Kenna provides meaningful and actionable data for remediation (remediation intelligence)
- Kenna provides awareness of how much risk is in their environment
- Kenna is updated continuously with real-time information
- Kenna aggregates data and reporting from multiple tools (vuln scanners, CMDB, discovery)
- Kenna includes multiple threat intel feeds (eliminating the need for subscription)

Results

The surveyed company achieved the following results with Kenna Security:

Reduction of time spent on the following activities, since using Kenna:
- Time spent on Vulnerability Investigation: over 75%
- Time spent on remediation: over 50%
- Time spent on reporting: over 75%

About Kenna.VM

Cisco Vulnerability Management (formerly Kenna.VM) offers an effective, efficient way to reduce your risk profile using risk-based prioritization powered by data science. Rely on it to ID the vulnerabilities that put you at the greatest risk, create a self-service environment for remediation teams, set intelligent SLAs based on your risk tolerance, compare your risk posture against industry peers, deliver clear reports with intuitive metrics, and more.

Learn More:

Cisco Vulnerability Management

TechValidate Research on Cisco Vulnerability Management