ESM Technology Uses BigFix to Help Large Transaction Processing Company Pass Security Audits and Show PCI Compliance
Overview
-
Part 1
Challenge
The transaction processing company leveraged BigFix to pass and maintain security and PCI Compliance ensuring the company’s ability to keep confidential financial information secure.
-
Part 2
Solution
-
Part 3
Results
The Challenge
Business Challenge:
The company’s asset information was kept in spreadsheets distributed across different computers in the network. The information was manually maintained but there was not a specific process ruling the updates being done. The objective was to implement a solution that could provide them with 100 percent visibility into what was connected to their networks and could tell them whether those systems were compliant or not. This solution had to be rolled out in less than a three-months’ time frame and this was an extremely challenging deadline given the complexity of the environment and the sensitivity of the information being managed.
The main challenges were the following:
-
Provide visibility to all endpoints connected network and show up-to-date configuration details.
-
Eliminate weeks of manual work of gathering endpoint inventory stored in multiple spreadsheets to prepare for an audit.
-
Improve accuracy and speed of patching. Connie Lamicela, CTO at ESM Technology, explained, “Some tools, compared to BigFix, will deploy patches to target workstations, and sometimes will report back old information or not report back at all. That results in a lot of manual effort. In contrast, BigFix just works and it’s accurate and faster, too.”
- Accurate reporting compliance. Once the company could automatically discover and track endpoints, then demonstrating PCI and patch compliance to regulators in time for the deadline was the next goal to achieve.
The Solution
Transformation:
ESM Technology helped the company implement BigFix and meet the three-month mandate. Using BigFix, the company was able to have a single endpoint management solution spanning multiple platforms to track, report and remediate endpoints in real time instead of relying on a mix of different platform-based solutions.
A senior application analyst commented about how fast BigFix was able to deliver results. He said,” We discovered hundreds of endpoints in just a few hours, and we had asset, patch and compliance data in easy-to-read reports within just a few days.” ESM Technology built custom PCI and CIS checklists using the checklists delivered by BigFix. As a result, proving PCI compliance and passing security audits became easy. The senior analyst at the company said, “BigFix enabled us to eliminate weeks of manual work and processes to prepare for an audit. We can give the BigFix reports directly to the auditors, so when we tell them we’re in compliance, the proof and validation is easy to produce and easy for them to understand.”
The Results
With ESM Technology’s assistance, the customer has:
-
Visibility to all endpoints connected to their network and ability to track compliance and quickly remediate endpoints which were non-compliant. Moreover, BigFix helped the company quickly discover and bring new endpoints under management as new endpoints joined the network.
-
Substantially improved patching operations, realizing a first pass patch success rate of over 95%. Since the patch staff spent much less time remediating failed endpoints and troubleshooting endpoints who were not reporting in, the company was able to redeploy staff to other IT projects.
-
Provided near real-time compliance data. Ms. Lamicela noted, “BigFix provides near real time information because the agent continuously evaluates endpoint every 15 minutes. The agent can also automatically remediate non-compliance if we chose.”
- Eliminated weeks of manual work and processes to prepare for an audit. More importantly, the company was able to satisfy regulators by providing them with reports directly from BigFix, reducing the time to value and the exposure of non-compliance.
About the company
ESM Technology is an IT Endpoint Management & Security Solution Provider delivering endpoint management solutions, integration services, advanced technical support, and product training. Learn more at www.esm-technology.com
Solution components used: BigFix Lifecycle, Compliance and Inventory.
Share on
関連機能
Business & Industry Applications
組織の効率性に新たなベンチマークを設定するように設計された堅牢なビジネスアプリケーション。マーケティング、eコマース、バリューチェーン、行動に関するインサイトを網羅しています。
詳細はこちら
AI and Intelligent Operations
AI と自動化をシンプルさ、セキュリティ、使いやすさと組み合わせることで、情報に基づいた意思決定、市場動向の予測、俊敏性と効率性の向上をこれまでにないレベルで実現します。
詳細はこちら
Total Experience
Total Experience(TX)ソフトウェアは、カスタマーエクスペリエンス(CX)、従業員エクスペリエンス(EX)、ユーザーエクスペリエンス(UX)、マルチエクスペリエンス(MX)を組み込んで、組織が直面する最も複雑な課題を解決するために最高の相互接続を実現します。
詳細はこちら
Data and Analytics
複雑なデータを明確で実用的なインサイトに抽出するために必要なツールで、データパターンと市場分析を通じて、結果を予測し、顧客をプロファイリングし、運用を最適化し、新たな機会を特定します。
詳細はこちら
Sovereign Collaboration
Sovereign Collaborationソフトウェアは、データの再利用よりも自律性を戦略的に優先します。私たちは機密情報の重要性を理解しており、それを保護するための安全で柔軟なソリューションを設計しました。
詳細はこちら
