Professional Documents
Culture Documents
Siemens Group12
Siemens Group12
Well timed
Efficiency improvement
Siemens decided to Clients have become Lowering of cost
Direct Connection increasingly more
continue with Qualys
demanding wrt data Standardization of
security requirements
security
What are the reasons the Siemens division turned Why is this a better solution than using in-house
to another company for using security testing software and staff?
software?
iQwest helped in establishing web-based management
Problems controls. In the past staff members had to physically go and
fix the patch security holes. Now it could be done through
remote web-based set-up.
a) Increasing number of attacks on DB Management
applications
b) Siemens could not afford to have clients’ data
compromised
a) Didn't have answers for all the attacks • The system could remotely block any unauthorized access
b) The staff was too small to cope with growing from anywhere in the world, without sending anyone to
challenges the field.
c) The vulnerability scanning tool being was • It is cheaper than using an inhouse software and staff.
inadequate and had to be frequently updated
• Siemens IT Systems and Services has partnered with Qualys to manage large repositories for customers.
• The organization has addressed the safety burden successfully and found 70 device issues.
• This positive risk management by quality control improved Siemens' brand image rather than hindered it.
• The number of customers and businesses requested by existing customers was rapidly increasing.
• With the partnership with Qualys, the rising demand for consumer protection could be successfully met.
• In addition, it promised consumers the security of their data and did so without growing personnel
or investing big money on software creation or upgrading.
This led to the enhancement of Siemens IT Solutions and Services' brand image.
The arrangement with Qualys is a combination of both a SaaS arrangement and an outsourcing arrangement.
1. SaaS Arrangement –
+
Qualys manages access to application, performance, 2. Outsourcing Arrangement –
availability & security
More than just the commissioning of the development
of an application.
Overtook the security responsibility for 700 servers and
2800 PCs
Hired the service of Qualys to manage the security
testing service.
Narrow down the possible vendors & chose Qualys, a company specializing in
providing data and application security solutions (time is of the utmost essence)