Case studies and EBR Flashcards
Versant Health, what city and what is the name of the CISO?
San Antonio, Texas, Derek Vorpahl
Versant Health, what is their Zero Trust posture?
{Long term} Zero trust - trusted endpoints, granular policies, etc. Derek looking for specific actionable steps to take in the short-term to start building towards the zero trust model.
Xavier University, what city and what is the name of the director of security?
Cincinnati, Ohio, Brian Rappach
What was Xavier University big win with Duo and KnowBe4?
Combination of Duo rollout and KnowBe4 phishing education has led to a drop of 500 compromised O365 accounts last fiscal year to 1 this year.
Children’s Hospital of Colorado, what city and what is the name of the CISO?
Aurora, Colorado, DJ McArthur
Children’s Hospital of Colorado, what is their Zero Trust posture?
Deploy ISE starting with guest and wireless first; Improve the VPN end user experience; Block EOL devices; Continue to configure granular polices
Henry Ford Health, what city and what is the name of their CISO?
Detroit, Michigan, Christy Wheaton
MidMichigan Health, what city and what is the name of their director?
Midland, Michigan, John Kelley - Director, IT Infrastructure
What technologies does MidMichigan Health want to integrate with Duo MFA?
Windows UAC, Box (Cloud SSO), Cisco ISE and VPN, CyberArk
Cerner Corporation, what city and what is the name of their director of IAM?
Kansas City, Jim Slinkard - Sr. Director IAM & Security Architecture
What was the impact of Cerner installing Duo on phishing and business email compromise?
** Disclaimer: Cerner has a no publicity clause in their contract so while these are awesome stories, they will not do a case study or other public facing forms of promotion **
Prior to Duo, Cerner had 202 credentials phished and 68 of those credentials used for unauthorized access to Cerner mailboxes. After Duo, the rate of credentials successfully phished increased to 422 incidents, but they only had 1 incident of unauthorized access to a mailbox
What was the impact of Cerner switching to Duo on total cost of ownership (TCO)?
** Disclaimer: Cerner has a no publicity clause in their contract so while these are awesome stories, they will not do a case study or other public facing forms of promotion **
Went from 400 users and a handful of apps on RSA to 22,000 users and 40-50 apps with the same support staff. Justification for purchasing Duo was the minimal TCO.
What are Cerner’s objectives?
Choosing a new IDP (Sailpoint, Savian, One Identity Hitachi) Rolling out Microsoft Intune Full migration to AzureAD eventually Adopting the NIST 800-63 standard Cisco ASA SAML config 2FA on all networking devices Continue to protect internal apps
BJC Healthcare, what city and who is their CISO?
Saint Louis, Missouri, Chris Niekamp
What EMR is BJC Healthcare running?
Epic - Duo replaced RSA in protecting Epic.
What are BJC Healthcare’s objectives?
Protecting MyTime, Saba, ServiceNow
American Public Media (APM), what is the name of their IT director featured in the case study?
Brad Rosenberger, Director of IT Infrastructure at American Public Media
What added benefit did American Public Media (APM) receive in addition to two factor authentication?
Device insights. With many organizations pushing toward a Bring Your Own Device (BYOD), APM wanted to proactively get the visibility into what employee-owned devices are trying to access their networks.