Renaissance Bank fixes vulnerabilities with MaxPatrol VM

2023: Implementation of MaxPatrol VM

Renaissance Bank implemented the system. MaxPatrol VM The product Positive Technologies was built into an already established elimination process. vulnerabilities bank This made it possible to timely replace the foreign system of the same class from the vendor who left the domestic market, and continue to carry out continuous patch management of the infrastructure. Positive Technologies announced this on May 11, 2023.

The bank needed not only to continue to monitor the security of the infrastructure, but also to speed up the response to the vulnerabilities found: to help IT specialists, depending on the case, quickly eliminate them or apply compensatory measures.

The company has already established its own vulnerability management process before the introduction of MaxPatrol VM. One of the main requirements of Renaissance Bank was to seamlessly integrate the VM tool into the existing process, and automate the tasks of prioritizing and controlling the elimination of vulnerabilities. In addition, the bank has received additional features - for example, tools for finding and highlighting trend vulnerabilities - those that attackers are exploiting right now.

MaxPatrol VM helps build a full-fledged vulnerability management process: from collecting information about all assets and nodes on the network, identifying and prioritizing vulnerabilities by their level of danger to controlling their elimination. The system determines how each asset affects the performance of business-critical services, privacy and data integrity, and helps focus on protecting significant nodes, said Elman Beibutov, director of product business development at Positive Technologies. - With MaxPatrol VM, you can automate most of the routine scanning and vulnerability tasks performed by IT and information security professionals, thus increasing the effectiveness of security measures.

At the current stage of the project, Renaissance Bank specialists, together with Positive Technologies experts, are modernizing the continuous vulnerability management process, taking into account the importance of IT assets for the bank's business processes. In MaxPatrol VM, you can set regulations for scanning and eliminating vulnerabilities, obtain lists of the most current and dangerous threats, and dashboards help IT and information security departments jointly monitor the status of vulnerability fixes and track infrastructure security at any time.

On the Russian market, we were looking for an analogue of a foreign vulnerability management system that would meet two main requirements: the product had to qualitatively identify vulnerabilities and be distinguished by ease of implementation. By choosing MaxPatrol VM, we not only closed our infrastructure control needs, but also received a comprehensive, advanced system. MaxPatrol VM is able to identify assets by a variety of parameters, classify them and automatically calculate the applicability of new vulnerabilities to network nodes. In the near future, Renaissance Bank plans to provide a full cycle of vulnerability management in order to reduce the burden on IT and information security departments in working with updates, "said Dmitry Sturov, Executive Director, Head of Information Security at Renaissance Bank.