Transforming Vulnerability and Exposure Management for a US State Agency

The state-level agency is the backbone of IT infrastructure and cybersecurity for dozens of executive branch agencies serving millions of citizens. It ensures essential state functions, such as public safety, health services, and transportation operate smoothly and securely. By adopting advanced technologies, this agency not only safeguards the state’s digital assets but also sets a national standard for state-level cybersecurity.

In 2023, this agency established a project to modernize its vulnerability management operations. The goal was to address what was preventing the state-level agency and its sub-agencies from improving vulnerability management service level objectives (SLO) and reducing vulnerability-related risk.

Key Results

• Level of effort for manual vulnerability analysis and triage reduced by 80%
• Real-time statewide cyber risk visibility for executive leadership
• Reduced high-risk vulnerabilities by 50% within three months