This case at a glance
| Client | Major heavy industry manufacturer |
|---|---|
| Challenge | Vulnerability response left to individuals, with no overall view |
| What we did | Vulnerability Response built, with automatic prioritization and assignment |
| Products | ServiceNow Vulnerability Response |
| Results | A companywide view of vulnerabilities, handled in order of priority |
-
About the client
• Industry: Major heavy industry manufacturer
• Company overview: A diversified engineering manufacturer with businesses in ships, railway vehicles, aircraft, motorcycles, gas turbines, gas engines, industrial plants, hydraulic equipment, robots, and more. -
Challenges
• Handling that depended on each staff member
Vulnerability response was managed by each staff member, and the status of responses was not standardized.
• Limited coverage
Only certain vulnerabilities were addressed, making it hard to see the overall picture, and vulnerability management did not cover all devices.
• A dashboard still under construction
The dashboard for patch application status was still being built, so for now the client could only check response status. -
Solution
• Project support alongside the client
As the head office and the IT subsidiary worked together on a ServiceNow project, a major theme was to widen the use of the service and raise its value further.
We focus not just on development but on the success of the whole project. By carefully supporting coordination and preparation between the two organizations, we helped everyone discuss and reach agreement smoothly and kept the project moving.
• Selecting a vulnerability scanner
We selected a vulnerability scanner suited to integration with ServiceNow (candidates: Tenable, Rapid7, Qualys, Tanium), focusing on integration and operational efficiency.
• Building Vulnerability Response (VR) and automation
We built Vulnerability Response (VR), the vulnerability management function, and implemented several automation functions. Response priority is judged automatically by combining scanner scores with asset priority scores in the CMDB, vulnerabilities are grouped automatically, and responses are assigned to staff automatically. Response requests are created and completion is confirmed automatically, and reports are generated automatically so that response status is visible. -
Results
• Companywide view and prioritization of vulnerabilities
A mechanism to see vulnerabilities across the company makes it possible to prioritize responses and has improved the accuracy of risk management.
• Information sharing and awareness through reports
Reports that make it easy to share information with management and related departments have, according to the client, raised security awareness.
• Stronger response through automation
Automated operation has greatly improved response speed and quality and reduced reliance on specific individuals.
