Great Western Hospitals NHS Foundation Trust

Vulnerability Shielding optimises cyber-health for Great Western Hospitals NHS Foundation Trust

OVERVIEW

Great Western Hospitals NHS Foundation Trust provides acute community health services across the Wiltshire region of South West England. Its Swindon-based Great Western Hospital features an emergency department and urgent care centre, which services a combined 90,000 patients a year. Around 18,000 operations are performed annually in its 14 operating facilities.

IT Technical Operations Manager, Bev Sismey, handles operational security for the Trust’s massive system of networks, servers, and phone lines. The system serves around 6,000 users and includes over 300 mainly virtualised VMware servers running Windows.

Logo of Great Western Hospitals NHS Foundation Trust

Industry

Healthcare

Employees

Region

Wiltshire, South West England

IT Environment

VMWare

Solutions

  • Critical servers and applications are protected with security controls, including IPS
  • Endpoints are protected against malware, ransomware, and malicious scripts
  • Threats are detected and blocked in real-time with minimal impact
  • Virtual patches are delivered for protection before a patch is available or deployable

CHALLENGES

Healthcare organisations (HCOs) are a popular target for threat actors due to the large volumes of personal and health information stored. The life-saving services HCOs deliver also make them a target for ransomware, as cybercriminals look to monetise these organisations’ reluctance to put patient care at risk. The third most frequently targeted by ransomware in 2,021, this sector also experienced the second highest volume of phishing detections.

Although they weren’t specifically targeted, NHS became an early victim of ransomware when WannaCry struck in 2,017 This malware campaign caused damages estimated in the tens of millions of pounds and triggered severe disruption to patient care services after unpatched Windows machines allowed it to spread.

Trend Micro gives us an extra level of security without impacting the organisation immediately.

Bev Sismey

IT Technical Operations Manager, Great Western Hospitals NHS Foundation Trust

WHY TREND

In addition, NHS has rolled out rigorous internal policies to prevent a similar event in the future. “Trusts were left to their own devices before, but that’s not the case anymore,” explains Sismey. “Because each Trust effectively has a private connection into the national health and social care network, they have to prove that they’re mitigating against vulnerabilities and patching each month across the entire estate.”

The number of new threats, paired with the persistent challenge of managing patching across legacy servers, led the NHS IT team to introduce vulnerability shielding capabilities into their security stack. While the organisation was partnered with Trend Micro for a web filtering solution, Sismey reached out for a proof of concept (PoC).

“We didn’t feel like our incumbent product was doing what it said on the tin,” says Sismey. “It was the vulnerability shielding that sold it to me. I thought ‘if we can make the organisation understand the benefits Trend Micro can give us, it will sell itself.”

If you have a critical vulnerability Trend Micro is always ahead of the game. We’ve already mitigated risk even before Microsoft has given us a patch to deal with it.

Bev Sismey

IT Technical Operations Manager, Great Western Hospitals NHS Foundation Trust

SOLUTION

After a successful PoC, Sismey and the Trust decided to invest in Trend Micro Deep Security Software to protect servers and Trend Micro Apex One for endpoint protection.

  • Automated, host-based security for seamless auto-scaling
  • Global threat intelligence from the Trend Micro™ Smart Protection Network™
  • Proactive defence against known and unknown threats with vulnerability shielding
  • Integrated API-based security for CI/CD pipelines
  • A comprehensive range of threat protection capabilities, including intrusion
  • prevention (IPS), integrity monitoring, machine learning, and application control

In addition, Trend Micro Apex One provides Sismey’s team with layered endpoint security that includes vulnerability shielding, application control, and integrated detection and response.

RESULTS

Over the past three years, Trend Micro has helped the Trust build a positive reputation for best practices security, thanks to its vulnerability shielding capabilities. “If you have a critical vulnerability Trend Micro is always ahead of the game,” says Sismey. “It’s enabled us to present upwards and outwards to NHS Digital that we’ve already mitigated risk even before Microsoft has given us a patch to deal with it.”

In addition to mitigating risk on legacy servers, Deep Security was proven effective at protecting clients against current threats like the Apache Log4J vulnerability.

“Sometimes we just cannot upgrade a server because of the historic data on it, which can’t be exported to a replacement solution,” explains Sismey. “Trend Micro allows us to put a security wrapper around those devices. We have regular audits and these older systems, protected by Trend Micro, are never on the list requiring further action or intervention. No one can get through that wrapper. Trend Micro has proven its worth time and time again.”

Deep Security also provides Sismey with peace of mind needed to focus on planning upgrades according to her own timetable.

“When you get a zero-day threat, you always need to reboot servers once a Microsoft patch comes out. But Trend Micro gives us an extra level of security without impacting the organisation immediately,” concludes Sismey. “We can plan with the organisation when to have the interruption. It feels like we’re a lot more in control.”

WHAT'S NEXT

As for the future, Bev Sismey believes the Trust is in “pretty good shape” from a cyber risk perspective. That’s good news for her and the many thousands of local residents who rely on it for essential care.

Join 500K+ Global Customers

Get started with Trend today