Security Leader, Canadian Municipal GovernmentSharing the SAFE report really works. We’ve had vendors thank us for letting them know, and affirm that they’ll fix the issue.
A large Canadian City Government partnered with ReversingLabs to profoundly improve risk management in their software acquisition and management lifecycle by de-risking desktop and server software acquisition by a factor of 6300% and converting an unreliable, multi-day workflow into a 15-minute process, delivering actionable results and an accompanying audit trail.
Their Cybersecurity Leader described an overwhelming backlog of COTS (Commercial Off The Shelf) software approvals due to a manual, multi-day, interruption-prone risk assessment process for each request. Spectra Assure® allows the team to rapidly assess risks, including malware and vulnerable components, thus dramatically increasing team throughput while maintaining flat labor costs and achieving better risk insights.
The new process involves sharing SAFE reports with their vendors using Spectra Assure’s built-in sharing ability, which is met with appreciation and a commitment to address specific risks. This has materially improved the City’s risk posture. Capturing results in the SAFE report provides intuitive visual cues for non-technical users along with detailed information required for remediation. In this sense, a once detective control has become preventive as the COTS attack surface is reduced in cooperation with key vendors. As with most city governments, many requests are “urgent”. The introduction of Spectra Assure empowers the team to stay ahead of emerging threats and expedite the resolution of routine end-user inquiries centered around the question, “Is this safe?”
