TrueSight Vulnerability Management

TrueSight Vulnerability Management

Product Description:

TrueSight Vulnerability Management for Third Party Applications extends the power of third party applications such as Microsoft SCCM, to provide IT operations and security teams the data they need to prioritize and remediate threats based on potential impact to the organization. Its native integration to popular scanning tools, such as Rapid7, Tenable, and Qualys, enables teams to quickly consume scans and automatically tie vulnerabilities to known remediations.

Business Challenge

One of the largest drivers of the inability to defend organizations against security threats is the lack of integration and coordination between security and operations teams. Security teams scan for vulnerabilities and then deliver that information to the operations team for action. However, that information frequently lacks the business or operational context the IT operations team needs to set priorities and take action. Per the 2018 Ponemon/BMC study, fifty-six percent of respondents agree that there is tension between IT security and IT operations because of a lack of alignment of their different priorities.

BMC SOLUTION

TrueSight Vulnerability Management for Third Party Applications prioritizes risks and reduces your overall attack surface by providing operations teams with prescriptive and actionable data to address vulnerabilities based on perceived impact and policy.It also offers security teams a transparent view into operational plans by providing visibility into planned actions, predictive SLAs, and burndown views. Through integration with BMC Helix Discovery, teams can identify application context and blind spots—systems previously unknown or unmanaged—and make adjustments.

Use the Security Dashboard to quickly see the status of vulnerabilities by age.

Blind spot Awareness: Quickly identify the areas of your infrastructure that are not being monitored, leaving you exposed, and make adjustments leveraging integration with BMC Helix Discovery
Auto-Scan Import: Save time and respond more quickly by auto-importing scan exports from Qualys, Nessus, and Rapid7.

Streamlined Remediation Workflow: Schedule your scan verification and remediation within the same workflow. Target agreed upon maintenance windows to minimize disruption.

Patching & Compliance: Combine with popular endpoint management systems such as Microsoft SCCM, to keep your infrastructure in peak condition by applying patches or configuration changes with ease, reducing downtime, and preventing potential security breaches.

Product Details

Applications and IT infrastructure need to work together. BMC Helix Capacity Optimization gives IT the insight needed to balance IT resources with application and service demands.

Powerful Dashboards

Manage risks using TrueSight Vulnerability Management for Third Party Applications dashboards designed specifically for operations and security users. Quickly prioritize remediation activities based on policy and vulnerability scores that you assign. Identify performance trends and manage vulnerabilities through their lifecycle.

Data Export for Deeper Analysis

Export the data driving the dashboards to develop and share custom reports and meet audit requirements.

Vulnerability Exclusions

Exclude scan information known to be incorrect from affecting your analysis and reporting.

Operational Scheduling

Focus only on the vulnerabilities that need attention by filtering out activities that have already been started, and route them to the specific individuals responsible for remediating them.

Key Features:

TrueSight Vulnerability Management for Third Party Applications provides security teams and operations teams unprecedented visibility into their environments’ threat stature for efficient remediation of risks.

Security

Visualize how quickly threats will be eliminated with graphical views of planned operations actions, predictive SLAs, and burndowns
Identify blind spots in the security process and make adjustments