Rosselkhozbank uses MaxPatrol VM

2024: Implementation of MaxPatrol VM

Rosselkhozbank uses the MaxPatrol VM vulnerability management system. With the help of the Positive Technologies product, the bank's specialists analyze 40 thousand assets, which will allow timely identification of vulnerabilities, prioritization of them by the level of danger to business processes, as well as control the timing of their elimination. Trending vulnerability information arrives at MaxPatrol VM within 12 hours. PT reported on March 20, 2024.

In order to ensure the protection of infrastructure, Rosselkhozbank was required to build a full vulnerability management cycle. At the same time, it was important for the company's specialists that the solution being implemented be effective, supplied by a domestic manufacturer and comply with regulatory requirements. Rosselkhozbank already had experience in using other Positive Technologies products.

In addition to identifying vulnerabilities, thanks to MaxPatrol VM, Rosselkhozbank received new opportunities. Thus, the product within 12 hours receives information about vulnerabilities that are already actively used by cybercriminals or will begin to be massively used in the near future. Trend vulnerabilities need to be quickly eliminated or compensating measures taken. The system quickly scans the infrastructure using the results of previous checks and automatically determines if there are dangerous holes in it.

In the Russian market, we were looking for a solution for building a vulnerability management process. One of the advantages of MaxPatrol VM is that the system helps to prioritize assets on which vulnerabilities, including trend ones, are found. The system calculates how each asset affects the operation of business-critical services, and helps to concentrate on protecting significant nodes. This allows IT and information security specialists to quickly respond to new threats and minimize risks, - said Andrei Sokolov, Director of the Information Security Department of JSC "Ukank."

According to research by Positive Technologies, financial institutions are in third place in the number of attacks among other industries. Therefore, the issue of their cybersecurity is acute. To support the security of the infrastructure, it is necessary to obtain up-to-date data on the detected vulnerabilities, - commented Elena Shigina, leading key customer manager at Positive Technologies. - MaxPatrol VM allows you to build a complete process of managing vulnerabilities: from their detection and prioritization to complete elimination. With MaxPatrol VM, specialists can control the timing of the elimination of vulnerabilities and thus increase the level of information security in the company.

In addition to supporting customers when implementing, Positive Technologies helps organize work with its products. For example, Rosselkhozbank specialists plan to take a workshop developed by the vendor on building a vulnerability management process in the company.

The course will allow you to gain or systematize existing knowledge about the vulnerability management process. Novice specialists will understand where to start working with vulnerabilities, and experienced ones will pump their expertise. According to the results of the course, participants will be able to fully build vulnerability management in the bank, "said Pavel Popov, leader of the Positive Technologies vulnerability management products practice.