Introduction
A multinational retailer faced increasing challenges in managing its cybersecurity risks across a complex and distributed IT environment. By partnering with Vulcan Cyber, the organization achieved transformative results, streamlining vulnerability management, enhancing risk prioritization, and significantly improving remediation processes and results.
The challenge
Operating at large scale, the organization grappled with:
- Data overload: Siloed data from numerous security tools created redundancies and inconsistencies, complicating decision-making.
- Inefficient processes: Vulnerability remediation often exceeded acceptable SLAs, leaving the organization exposed to risks.
- Prioritization gaps: Limited contextualization and manual prioritization hindered the ability to focus on high-risk vulnerabilities.
- Coordination across teams: Assigning ownership for remediation tasks across departments was time-consuming and inconsistent.
The Vulcan Cyber solution
Unified data platform
The retailer utilized the Vulcan Cyber ExposureOS platform to consolidate data streams from 13 different sources, providing full visibility, eliminating duplicates and ensuring consistent, actionable information.
- During the consolidation process the Vulcan Cyber ExposureOS deduplicated 46% of assets from multiple sources.
Risk-based prioritization
The retailer leveraged the Vulcan Cyber risk-scoring engine, integrating CVSS, business context, and threat intelligence to establish an automated, holistic, risk-based prioritization process.
Additionally, three key processes further refined prioritization:
- Users assess vulnerabilities and adjust risk levels based on mitigating controls.
- A risk exception process enables the organization to accept minimal-risk vulnerabilities.
- Daily automation dynamically adjusts risk levels, reducing scores for non-CISA vulnerabilities.
Optimized Remediation Processes
By implementing over 85 remediation workflows, the organization automatically addresses 30% of critical and high impact vulnerabilities, accelerating resolution and achieving a 14-day remediation rate.
Improved Ownership and Collaboration
Tailored features, such as custom tagging and dashboards, streamlined the delegation of remediation tasks:
- Custom ownership settings allow for precise, automated asset-to-owner mapping.
- Custom tagging for vulnerability classification – allowing the customer to distinguish between OS, browser and application related vulnerabilities.
- A dedicated ‘Patch Tuesday’ dashboard enables proactive management and tracking of Microsoft vulnerabilities.
The results
Risk reduction
- A 46% drop in critical vulnerabilities.
SLA compliance
- A 300% improvement in SLA compliance.
Faster resolution timelines
- A 46% reduction in mean-time-to-remediation (MTTR).
Operational excellence
- Enhanced team collaboration and accountability through custom tools and automation.
Looking Ahead
The partnership continues to evolve, with plans to expand the integration of additional connectors for broader asset coverage.
Want to learn more?
Explore how the Vulcan Cyber ExposureOS can help your organization enhance its exposure management program and keep your critical assets secure. Book a demo here.
