Rapid7 > Case Studies > Rapid7 Nexpose Helps Sierra View Medical Center Prioritize Risk and Remediate Fast

Rapid7 Nexpose Helps Sierra View Medical Center Prioritize Risk and Remediate Fast

Rapid7 Logo
Customer Company Size
Large Corporate
Region
  • America
Country
  • United States
Product
  • Rapid7 Nexpose
  • InsightIDR
Tech Stack
  • Unified Rapid7 Insight Agent
Implementation Scale
  • Enterprise-wide Deployment
Impact Metrics
  • Customer Satisfaction
  • Productivity Improvements
  • Digital Expertise
Technology Category
  • Cybersecurity & Privacy - Endpoint Security
  • Cybersecurity & Privacy - Network Security
  • Cybersecurity & Privacy - Security Compliance
Applicable Industries
  • Healthcare & Hospitals
Applicable Functions
  • Facility Management
  • Business Operation
Use Cases
  • Intrusion Detection Systems
  • Remote Asset Management
  • Regulatory Compliance Monitoring
Services
  • System Integration
  • Cloud Planning, Design & Implementation Services
About The Customer
Sierra View Medical Center is a state-of-the-art hospital located in Porterville, California. The medical center employs 1,100 staff members and relies on a complex IT infrastructure comprising 1,200 endpoints, 300 servers, and an additional 1,500 networked devices. The hospital is dedicated to providing the best possible care to its patients, which necessitates a highly secure and efficient IT environment. Given the critical nature of healthcare data and the increasing frequency of cyberattacks targeting the healthcare sector, Sierra View Medical Center required a robust solution to enhance its cybersecurity measures. Scott Cheney, the information security manager, was tasked with ensuring the security and resilience of the hospital's IT systems, despite being the only full-time information security practitioner on staff.
The Challenge
Sierra View Medical Center faced significant challenges in maintaining real-time visibility and control over its endpoints and servers. The healthcare industry, being a prime target for cyberattacks, required robust security measures to protect sensitive patient data. However, the existing system at Sierra View relied on outdated data from quarterly and biannual scans, which were up to six months old. This outdated information made it difficult to prioritize and assign remediation tasks effectively. The lack of granularity in the CVSS scores further complicated the process, making it nearly impossible to manage vulnerabilities efficiently. As the sole full-time information security practitioner, Scott Cheney needed a more streamlined and automated approach to share risk insights with the IT operations, networks, and systems staff.
The Solution
To address these challenges, Sierra View Medical Center implemented Rapid7 Nexpose and InsightIDR. Nexpose is a leading vulnerability management platform that provides real-time visibility into the organization's risk landscape. It allows IT teams to see exactly where vulnerabilities exist, view data in real-time, and assign remediation tasks quickly and efficiently. InsightIDR complements Nexpose by offering integrated detection and investigation capabilities, including user behavior analytics, endpoint detection, and visual log search. The unified Rapid7 Insight Agent facilitated a smooth deployment process, eliminating the need for credentialed scanning on endpoints. This setup provided Cheney with real-time visibility into changes in the virtual desktop environment, significantly enhancing the hospital's cybersecurity posture. The cloud delivery model of Nexpose was well-received by the IT staff, as it reduced the burden of managing additional systems and servers.
Operational Impact
  • The implementation of Rapid7 Nexpose provided Sierra View Medical Center with real-time visibility into its IT environment, allowing for more effective risk management.
  • The detailed Real Risk Score offered by Nexpose, which ranges from 1 to 1,000, enabled the IT team to prioritize remediation tasks based on factors such as vulnerability age, available exploits, and malware kits.
  • The Live Dashboards feature of Nexpose allowed Cheney and his team to monitor the progress of remediation projects with dynamic, real-time data, enhancing overall operational efficiency.
  • The Remediation Projects capabilities transformed the previously slow and manual process into a streamlined and efficient setup, enabling the IT team to prioritize and assign tasks more effectively.
  • The IT staff at Sierra View experienced a significant improvement in their ability to manage and resolve vulnerabilities, moving from a constant state of fire-fighting to having clear visibility and control over their IT environment.
Quantitative Benefit
  • Resolved 12% of all server vulnerabilities within a month and a half of deploying Nexpose.
  • Addressed 7% of VDI bugs in the same timeframe.

Case Study missing?

Start adding your own!

Register with your work email and create a new case study profile for your business.

Add New Record

Related Case Studies.

Contact us

Let's talk!
* Required
* Required
* Required
* Invalid email address
By submitting this form, you agree that IoT ONE may contact you with insights and marketing messaging.
No thanks, I don't want to receive any marketing emails from IoT ONE.
Submit

Thank you for your message!
We will contact you soon.