Irkutsk Oil Company uses MaxPatrol VM

2024: Implementation of MaxPatrol VM

Irkutsk Oil Company builds a complete control cycle vulnerabilities based on MaxPatrol VM the host compliance control (NSS) module. With the help of the product Positive Technologies , the company analyzes assets and can identify vulnerabilities, including trending ones. Information such vulnerabilities are reported to MaxPatrol VM within 12 hours. Positive Technologies reported this on June 5, 2024.

We conducted a pilot project at the end of 2023 and have already seen the results. MaxPatrol VM helps us a lot in our work. With the help of the product, we analyze trend vulnerabilities and those that come from the Threat Data Bank (DBA) FSTEC and the National computer Incident Coordination Center. The system collects the most complete information about assets and classifies them by level of significance. This allows you to concentrate on working with priority nodes and quickly minimize risks, - said Vadim Ashroev, head of the information security department.

The Irkutsk Oil Company noted that they paid attention to the manufacturability of the solution. MaxPatrol VM helps automate tasks. In the system, you can set a scan schedule, control the time it takes to fix vulnerabilities, and choose how to fix vulnerabilities, taking into account the level of danger.

Among the advantages of MaxPatrol VM, specialists from the Irkutsk Oil Company highlight the presence of information about trend vulnerabilities and its high-speed delivery. This significantly reduces the likelihood of hacking a company, since on average it takes an attacker 24 hours to create an exploit. For June 2024, using MaxPatrol VM, the company is building a full vulnerability management cycle. The HCC module enhances infrastructure security through automated compliance monitoring.

Every second successful attack one industry led to a violation of the activities of companies. Experts predict an increase in incidents in this industries and in 2024, - said Oksana Naumenko, account manager at Positive Technologies. - It is important for companies to receive information information about the most dangerous vulnerabilities for them on time. Such vulnerabilities are called trending. FSTEC recommends fixing them within 24 hours, and MaxPatrol VM receives information about trend vulnerabilities within 12 hours. This allows information security specialists to quickly prevent intruders from entering the infrastructure.