The MetricStream IT-GRC Solution will aggregate and correlate information security related big data from security solutions to enable a holistic cyber-threat management program at Styrolution.
PALO ALTO, Calif., Feb. 11, 2015 /PRNewswire/ — Styrolution, the global leader in styrenics, has selected MetricStream for Risk, Threat, and Vulnerability Management. The MetricStream Solution will automatically aggregate and normalize information security related big data from existing security solutions. The solution will also help correlate the information from various sources, providing real-time, actionable security intelligence and threat management capabilities.
With sales of €5.8 billion in 2013, Styrolution is a leading supplier of styrenic plastics across a range of industries, including automotive, electronics, household, construction, healthcare, toys/sports/leisure, and packaging. Headquartered in Germany, Styrolution has over 80 years of experience in styrenics. The company has 3,200 employees worldwide, 16 manufacturing sites in 9 countries, and customers in 106 countries.
"Our threat and vulnerability management program requires world-class solutions and processes," says Tony Maddock, Global Vice President, Information Technology, Styrolution. "By partnering with MetricStream, we will be able to integrate information security data from across the enterprise in real time, gaining a single view, and better identifying areas of concern. We chose MetricStream based on the strength of their IT-GRC Solution, including its powerful reporting and analytics engine, the ease of integration with third-party solutions, and its ability to map to our existing operating model and internal systems to extract relevant risk data. By leveraging the solution, we will be able to integrate and align our critical Information Security, IT Risk Management, and Enterprise Risk Management initiatives across the organization."
Through advanced adaptors or "Infolets," the MetricStream IT-GRC Solution will automatically capture and correlate data from security solutions such as vulnerability scanners, as well as vulnerability information via feeds from the NIST National Vulnerability Database (NVD), and various threat feeds.
The solution will standardize vulnerability scoring, and will provide an overall severity score for the organization's assets based on CVSS and environmental factors. Based on the severity, Styrolution will be able to manage its threats using a comprehensive work-flow based approach wherein each issue will be automatically assigned to the appropriate developer, IT asset, or business owner, and then tracked to closure. Automated alerts and notifications will help ensure that each issue is proactively communicated and resolved.
The MetricStream solution will utilize big data technology based on the MongoDB and MapReduce framework to manage the volume, variety, and velocity of security data. It will also help analyze the information to provide meaningful analytics that support the organization's robust decision-making system.
Graphical dashboards and reports will provide actionable risk intelligence, enabling the organization to prioritize and track all of their risk management efforts. The solution will also provide a business context to risk, empowering internal stakeholders to take a more active role in the organization's risk management activities.
"In this age of big data and increasingly complex information security challenges, it is imperative that organizations have the information they need to manage their risks, and make sound business decisions," says Piyush Pant, VP of Strategic Markets at MetricStream. He continued, "We are eager to support Styrolution as they establish a centralized framework that integrates IT-GRC with enterprise GRC and business data, thereby enhancing their information security risk management program."
About MetricStream
MetricStream is a market leader in enterprise-wide Governance, Risk, Compliance (GRC) and Quality Management Solutions. MetricStream solutions are used by leading global corporations in diverse industries such as Financial Services, Healthcare, Life Sciences, Energy and Utilities, Food, Retail, CPG, Government, Hi-tech and Manufacturing to manage their risk management programs, quality management processes, regulatory and industry-mandated compliance and other corporate governance initiatives. MetricStream's customers include Procter & Gamble, UBS, Societe Generale, Pfizer, Philips, Cummins, Kellogg's, Mondelez International, SanDisk, and NetApp. MetricStream also owns and operates www.ComplianceOnline.com portal – the largest GRC advisory network and one of the largest GRC communities. MetricStream is headquartered in Palo Alto, California, USA (www.metricstream.com).
Media contact:
Mr. Vinay Bapna
Email
+1 650 238 9651