Cisco Vulnerability Management Global 500 Banking Company

TechValidate Customer Research Library / Cisco Vulnerability Management / Case Studies /

Kenna Security Case Study

Global 500 Banking Company

Introduction

This case study of a Global 500 banking company is based on an October 2019 survey of Kenna Security customers by TechValidate, a 3rd-party research service. The profiled company asked to have their name blinded to protect their confidentiality.

“We went from having no risk posture to a very effective risk reduction program.”

Challenges

The business challenges that led the profiled company to evaluate and ultimately select Kenna Security:

Vulnerability management challenges they experienced that led them to implement the Kenna Security Platform:
- Too many vulnerabilities with no way to effectively prioritize
- High volume of security data lacking context for decision making
- No way to quantify or measure risk from vulnerabilities
- Inefficiencies in vulnerability remediation

Use Case

The key features and functionalities of Kenna Security that the surveyed company uses:

Approaches used to prioritize vulnerabilities prior to Kenna:
- CVSS 7+

How they evaluate the success of their Kenna Security platform implementation:
- Reduction in Mean Time To Remediate (MTTR)
- Reduction in vulnerability investigation time
- Reduction in IT remediation time
- SLA Adherence
Kenna’s primary advantage(s) over other vulnerability management platforms:
- Kenna goes beyond basic risk scoring and tells them what they need to fix first
- Kenna provides meaningful and actionable data for remediation (remediation intelligence)
- Kenna provides awareness of how much risk is in their environment
- Kenna is updated continuously with real-time information
- Kenna aggregates data and reporting from multiple tools (vuln scanners, CMDB, discovery)
- Kenna includes multiple threat intel feeds (eliminating the need for subscription)

Results

The surveyed company achieved the following results with Kenna Security:

Reduction of time spent on the following activities, since using Kenna:
- time spent on Vulnerability Investigation: over 75%
- time spent on remediation: over 50%
- time spent on reporting: over 75%

About Kenna.VM

Cisco Vulnerability Management (formerly Kenna.VM) offers an effective, efficient way to reduce your risk profile using risk-based prioritization powered by data science. Rely on it to ID the vulnerabilities that put you at the greatest risk, create a self-service environment for remediation teams, set intelligent SLAs based on your risk tolerance, compare your risk posture against industry peers, deliver clear reports with intuitive metrics, and more.

Learn More:

Cisco Vulnerability Management

TechValidate Research on Cisco Vulnerability Management