News
BMC and Qualys Join Forces to Improve Enterprise Security
July 2015 by Marc Jacob
As organizations move to become more digital, they must maintain the security and privacy of their digital assets: critical systems, data, and intellectual property. BMC and Qualys announce the first solution to tie vulnerability information to automated remediation actions. This dramatically reduces the window of vulnerability while simultaneously improving IT operational performance.
While data breaches can be catastrophic, most are preventable, as 80 percent of exploits utilize vulnerabilities with known fixes. One of the causes of successful attacks is the misalignment of objectives between the security team, responsible for identifying vulnerabilities, and the IT operations team, responsible for implementing the changes to the systems. This misalignment is the SecOps gap.
“Given the number of information security vulnerabilities that exist in the world today, security and IT operations can benefit tremendously from tighter collaboration and more efficient workflow,” said Michael Allen, information security officer at Morningstar, Inc. “With Intelligent Compliance, we now have an integrated solution to automate our information security processes, greatly reducing time and cost.”
The joint solution, Intelligent Compliance, addresses the gap through a combination of security and compliance audit data from Qualys Vulnerability Management (VM) with the associated action from BMC BladeLogic Server
Automation to remediate the vulnerability. Specifically, it helps:
• Reduce the Window of Exposure to Vulnerabilities – accelerate remediation of vulnerabilities through automation
• Avoid Downtime – make remediation actions predictable and safe, minimizing both planned and unplanned outages
• Increase Speed and Frequency of Audits – run automated audits as frequently as needed, or even on-demand, without impacting other operational activities
• Stay Compliant with Industry Regulations – take advantage of pre-built audit and remediation content for common policies
• Lower the Cost of Audit and Remediation – automate actions that were previously manual
Analyst perspective Charles Kolodgy Research vice president, secure products, IDC:
“Organizations face an escalating need to improve operational excellence in security and IT compliance, since the downsides of a security breach can be catastrophic. One reason current approaches aren’t successful is a disconnect between security and operations teams. The combination of vulnerability scanning solutions, like Qualys, and remediation solutions, like BMC BladeLogic, can improve a company’s security posture and the IT organization’s efficiency. Any company in an industry or situation where security or compliance is important should investigate a combined solution like the Qualys and BMC integration.”
Availability
The integration between BladeLogic and Qualys is available now.
