WHAT IS OUR PRIMARY USE CASE?

We use Trend Vision One™ – XDR for Endpoints for rapid response to end-user computing and security concerns.

As a health system, one of our core challenges is ensuring full visibility into our attack surface. We have many thousands of endpoints and end users that must be properly secured and protected. Our primary use case was to improve visibility, and response time, and reduce complexity. That is why we chose XDR for Endpoints.

XDR for Endpoints is deployed on Trend's private cloud.

It allows us to work from a single console instead of having to use four or five separate tools to maintain the same level of security.

HOW HAS IT HELPED MY ORGANIZATION?

We are using XDR for Endpoints on our endpoint and server infrastructure. The coverage is extremely important to our organization.

XDR for Endpoints provides us with centralized visibility and management across protection layers.

The centralized visibility and management across protection layers have helped our efficiency. The most significant advantage is that we used to manage these platforms with three or even five engineers, and now we're managing them with one.

It is extremely important to us that we can drill down from the executive dashboards into XDR detections. This provides us with the single pane of glass view that I mentioned previously. Being able to see at a high level that there may be systems that are behind on patch levels or need additional service or support, and then being able to drill down specifically to an individual machine, which may be unique in our environment, is very helpful.

We use the risk index to evaluate ourselves holistically, including our performance against best practices and security, as well as our performance against other healthcare systems around the world. This allows us to identify areas where we may have vulnerabilities or where we are particularly strong so that we can focus on improving in the areas where we need to.

XDR for Endpoints has helped us improve our resource utilization through automation, reducing manual effort and enabling faster response times. In under a week, we had tuned our environment to perform optimally.

Trend Micro^™ Managed XDR service has significantly reduced our team's workload by nearly 50 percent, providing a big improvement in our overall threat intelligence and endpoint security.

The Managed XDR service has enabled our team to work on other tasks. This additional availability for our staff has allowed us to reduce our need for contractors. If we are overburdened, we will hire contractors to assist in other areas of the business. However, because we have become more efficient, I have been able to hire some of those contractors and reduce the burden of contract labor.

Attack surface work management capabilities have been extremely valuable. The user and identity services provided by ASRM help us to focus on and improve visibility into end-user behavior, including that of endpoints such as laptops and desktops, the network, cloud infrastructure, and applications.

The ability to detect our blind spots has significantly improved our security posture. Seeing everything clearly in a single, easy-tounderstand dashboard allows us to allocate our resources directly to where they are needed most, enabling us to respond faster.

The biggest advantage of XDR for Endpoints is that it has helped decrease our time to detect and respond to threats by around 50 percent.

XDR for Endpoints has helped reduce the amount of time we spend investigating false positive alerts by 60 percent.

XDR for Endpoints automation capabilities save us around ten hours per week.

WHAT IS MOST VALUABLE?

We are very impressed with the single pane of glass visibility that XDR for Endpoints provides. It allows us to work from a single console instead of having to use four or five separate tools to maintain the same level of security. This is extremely helpful.

The manageability and artificial intelligence built into XDR for Endpoints are extremely helpful.

WHAT NEEDS IMPROVEMENT?

I've seen a lot of improvement in just the year that we've been with Trend. However, I think that continued optimization of the environment towards automation and orchestration, a kind of layer that sits underneath all of the technologies, would be extremely important. When we look at the speed and sophistication of attacks today, such as ransomware, malware, and cyber threats, we need tools and technologies that can react faster. So, I think integration with automation, orchestration, and artificial intelligence will help tremendously.