Reference · Industry / mechanical engineering

Detect vulnerabilities before they become a risk

Software vulnerability management with FortiEDR and automated patch management at sites in Austria and Germany – audit-proof and ISO 27001 compliant.

Vulnerability management for an industrial group (placeholder image)

At a glance

Industry
Industry / mechanical engineering
Services
IT Security
Period
2025 – ongoing
Technologies
FortiEDR, Patchmanagement-Automatisierung, Microsoft Intune

Starting point

Around 1,800 clients and servers at five sites, heterogeneous OT and IT landscapes and an upcoming ISO 27001 certification: vulnerabilities were tracked manually, patches rolled out irregularly, audit evidence was missing.

Solution

Scerus introduced continuous vulnerability scanning across the whole landscape, combined it with FortiEDR as endpoint protection and automated patch management in defined maintenance windows. A holacracy role model governs responsibility and escalation.

Result

Critical vulnerabilities are closed within 72 hours, the patch rate exceeds 98 percent. The ISO 27001 certification was passed without findings; management receives monthly reports at the push of a button.

»Audit-proof vulnerability management in three months – that is how we passed the certification without a single finding.«

Eva Brandstätter Head of Information Security

Let's talk about it

Fast, uncomplicated and personal. Non-binding, direct and tailored to your requirements.