The company’s specialty lab equipment was exacerbating the risk of downtime. Much of the hardware in their environment is associated with lab equipment that uses specific versions of software deployed on older versions of Microsoft Windows. These older software versions are susceptible to the proliferation of malware and hardware-related system failures, often leading to configuration drift.
Specialty lab equipment continues to run older versions of Windows operating systems because of the long lead time to obtain FDA certification and regulatory approval for the use of medical devices. The company needed to get a complete picture of what specific versions of the software were required for each system in the environment
and what associated security controls and system configurations needed to be enforced on those systems, which would require significant coordination between its many teams since much of this knowledge was tribal in nature and not documented in detail.
This was particularly urgent as the company has experienced massive growth over the past two years, nearly doubling in size. To scale for the anticipated exponential growth in testing volume, a new approach was needed to reduce the time required to recover from system failures and deploy patches for critical security vulnerabilities within the lab environment.