積水化成品工業 automated the entire vulnerability response process using ServiceNow Security Operations and other tools. The system went live 3.5 months after implementation began, with annual reductions in lead time and workload expected.
積水化成品工業 had relied on staff visual checks and manual work for its vulnerability response process, while lacking sufficient grounds for deciding whether action was warranted. To address these issues, the company built a platform combining ServiceNow Security Operations, IT Operations Management, and IT Service Management to automate the process from gathering vulnerability and asset information through issuing work instructions and managing evidence.
The implementation made maximum use of standard functionality, and the system went into production approximately 3.5 months after kickoff. The company expects annual reductions equivalent to approximately 60 business days in vulnerability-response lead time and approximately 114 person-days in infrastructure staff workload. The automation covers the integration of vulnerability and asset information, distribution of work instructions, and evidence management.
The company also noted that the platform helps make previously difficult-to-detect potential vulnerabilities more visible. The article also discusses the key decisions that enabled the short implementation timeline and the benefits of improved visibility. Specific additional information on amounts and timing is not the article’s primary focus and is presented only as an overview of the implementation’s effects.