A Smooth Road to Compliance for a Large Health Plan
Customer Company Size
Large Corporate
Region
- America
Country
- United States
Product
- BeyondTrust Solution PowerBroker® Servers
- McAfee Vulnerability Manager
- McAfee Solidcore
- McAfee Risk Advisor
- McAfee Total Protection (ToPS)
Tech Stack
- UNIX
- SQL
Implementation Scale
- Enterprise-wide Deployment
Impact Metrics
- Cost Savings
- Productivity Improvements
- Customer Satisfaction
Technology Category
- Cybersecurity & Privacy - Database Security
- Cybersecurity & Privacy - Network Security
- Cybersecurity & Privacy - Security Compliance
Applicable Industries
- Healthcare & Hospitals
Applicable Functions
- Maintenance
- Quality Assurance
Use Cases
- Cybersecurity
- Regulatory Compliance Monitoring
Services
- System Integration
- Testing & Certification
About The Customer
This BeyondTrust and McAfee customer is a leading nonprofit integrated health plan, serving more than 8.6 million people in the U.S. from 35 hospitals and 431 medical office buildings in nine states and the District of Columbia. The company has approximately 180,600 employees and physicians. The company operates in the healthcare industry and provides services to more than 8.6 million people. The company's IT environment includes 300,000 end user platforms and 20,000 servers.
The Challenge
The company was faced with upgrading its aging risk and compliance infrastructure, which previously relied on a disparate group of point products to scan for vulnerabilities and assess different operating systems for Sarbanes-Oxley and other types of compliance. Status data from the disparate solutions was imported into a SQL database onto which the IT department had built some limited dashboarding and reporting capabilities. However, IT personnel were still required to spend time writing custom code in order to extend the point solutions and enable them to interact with the database. In fact, the lack of integration among the various systems was creating inefficiencies that hampered the company’s ability to prepare for and pass compliance audits. The company sought a comprehensive and cost effective model for risk and compliance that would not only be easier to use and maintain, but provide a truly unified view into the status of all systems. As a UNIX shop, the company also needed a solution that could perform the deep, credentialed scans required for real protection from vulnerabilities, while also protecting the system’s root password.
The Solution
For its new compliance infrastructure, the company chose a suite of solutions including McAfee Vulnerability Manager, McAfee Solidcore, McAfee Total Protection for Compliance, and McAfee Risk Advisor – all integrated within the McAfee ePolicy Administrator (ePO), and BeyondTrust PowerBroker Servers. An added benefit for the company selecting McAfee Vulnerability Manager was its integration capabilities with BeyondTrust’s PowerBroker Servers. PowerBroker granularly delegates privileges and authorization without disclosing the root password on the company’s mission-critical UNIX platforms. McAfee Vulnerability Manager scans all of the company’s networked assets to provide fast, precise, and complete insights into system vulnerabilities and to ensure that each node is equipped with the latest virus updates. Also, McAfee Risk Advisor provides complete integration for all other McAfee countermeasures to give the company an instant view of system vulnerabilities and missing patches, indicating which countermeasures are in place to address the vulnerabilities. Tying it all together is ePO, which gives the company a centralized dashboard for managing security across all endpoints, networks, and data.
Operational Impact
Quantitative Benefit
Case Study missing?
Start adding your own!
Register with your work email and create a new case study profile for your business.
Related Case Studies.
Case Study
Hospital Inventory Management
The hospital supply chain team is responsible for ensuring that the right medical supplies are readily available to clinicians when and where needed, and to do so in the most efficient manner possible. However, many of the systems and processes in use at the cancer center for supply chain management were not best suited to support these goals. Barcoding technology, a commonly used method for inventory management of medical supplies, is labor intensive, time consuming, does not provide real-time visibility into inventory levels and can be prone to error. Consequently, the lack of accurate and real-time visibility into inventory levels across multiple supply rooms in multiple hospital facilities creates additional inefficiency in the system causing over-ordering, hoarding, and wasted supplies. Other sources of waste and cost were also identified as candidates for improvement. Existing systems and processes did not provide adequate security for high-cost inventory within the hospital, which was another driver of cost. A lack of visibility into expiration dates for supplies resulted in supplies being wasted due to past expiry dates. Storage of supplies was also a key consideration given the location of the cancer center’s facilities in a dense urban setting, where space is always at a premium. In order to address the challenges outlined above, the hospital sought a solution that would provide real-time inventory information with high levels of accuracy, reduce the level of manual effort required and enable data driven decision making to ensure that the right supplies were readily available to clinicians in the right location at the right time.
Case Study
Gas Pipeline Monitoring System for Hospitals
This system integrator focuses on providing centralized gas pipeline monitoring systems for hospitals. The service they provide makes it possible for hospitals to reduce both maintenance and labor costs. Since hospitals may not have an existing network suitable for this type of system, GPRS communication provides an easy and ready-to-use solution for remote, distributed monitoring systems System Requirements - GPRS communication - Seamless connection with SCADA software - Simple, front-end control capability - Expandable I/O channels - Combine AI, DI, and DO channels
Case Study
Driving Digital Transformations for Vitro Diagnostic Medical Devices
Diagnostic devices play a vital role in helping to improve healthcare delivery. In fact, an estimated 60 percent of the world’s medical decisions are made with support from in vitrodiagnostics (IVD) solutions, such as those provided by Roche Diagnostics, an industry leader. As the demand for medical diagnostic services grows rapidly in hospitals and clinics across China, so does the market for IVD solutions. In addition, the typically high cost of these diagnostic devices means that comprehensive post-sales services are needed. Wanteed to improve three portions of thr IVD:1. Remotely monitor and manage IVD devices as fixed assets.2. Optimizing device availability with predictive maintenance.3. Recommending the best IVD solution for a customer’s needs.
Case Study
HaemoCloud Global Blood Management System
1) Deliver a connected digital product system to protect and increase the differentiated value of Haemonetics blood and plasma solutions. 2) Improve patient outcomes by increasing the efficiency of blood supply flows. 3) Navigate and satisfy a complex web of global regulatory compliance requirements. 4) Reduce costly and labor-intensive maintenance procedures.
Case Study
Cloud-based healthcare solution for Royal Philips
Royal Philips wanted to launch its cloud-based healthcare solution HealthSuite Digital Platform in China to deliver services to help cope with challenges related to urbanization and population growth. Philips wanted to achieve this goal by combining mobile, cloud computing and big data technologies. To bring this platform and product to market, Philips required cloud computing and local technical service capabilities in China, in addition to a flexible IT infrastructure that could handle user requests.
