Vulnerability Management Program Implementation Case Study

This case study details the implementation of a vulnerability management program for a major retail financial services company. The objective was to enhance vulnerability management and change control capabilities to meet compliance with federal audits and financial regulations. Aditi was engaged to shift the company's approach from reactive to proactive vulnerability management. A team of four enterprise vulnerability management analysts was deployed, utilizing tools such as VMware, Adobe, Java, HP Opsware Automation, and Qualys for vulnerability scanning. The team also employed scripting and custom code in Batch, Python, Visual Basic, and Powershell. Over a five-year partnership, Aditi has significantly reduced high severity vulnerabilities from millions to a few thousand. The ongoing collaboration includes reviewing internal vulnerability data and developing custom solutions to ensure compliance and facilitate IT changes.