Douglas Macmillan Hospice gains 100% visibility of its network and the ability to manage compliance more easily with C-STEM and Forescout

C-Stem Corpus Christi College Logo

Sector: Healthcare

Device Visibility and Control

 

 

 

 

“C-STEM’s level of knowledge and expertise is brilliant. If we contact them, with an issue that we can’t manage, they immediately help. Its great!”

Steve Ledoux
Head of IT
Douglas Macmillan Hospice

Douglas Macmillan Hospice is a charity which has been operating since 1973.  It provides free end of life care for people with life-limiting illnesses in the North Staffordshire area. Looking after approximately 3000 patients within the community, it has a 33 bed in-patient unit and a 28 place day unit. In addition to this, it supports the families and carers of current patients.  The hospice operates 24 hours a day, 365 days per year and has 23 retail charity stores, a lottery scheme, fundraising events and a legacy department to support fund raising efforts.

The Challenges

The IT department at the Douglas Macmillan Hospice looks after everything from phones systems, mobiles and laptops to servers and fibre network internet connections. Along with all the technology within the hospice, the IT team manage a cloud based till system in the retail stores.  The biggest challenge they faced, was not being able to immediately see when someone plugged their own device into the system. They needed a way to monitor what was going onto their network at any point in time.

Head of IT at Douglas Macmillan Hospice, Steve Ledoux commented that as well as patients, their families and carers regularly bring their own devices into the hospice and sometimes theses devices contain malware and do not have the correct antivirus software installed.

As well as complete visibly of their network, they were also looking for a Network Access Control (NAC) solution which would allow them to easily implement Cyber Essentials and the HSCN toolkit. In order to achieve this accredited certification, full visibility of the IT network and the devices attached to it at any time is required.  Following a lengthy evaluation of other products that did not meet their requirements for Cyber Resilience, they engaged with C-STEM* via a referral from another hospice organisation.

The Solution

C-STEM’s experience and knowledge whilst assisting Douglas Macmillan in qualifying the suitability and fit to meet the required success criteria, gave confidence in the solution recommended. Ledoux was impressed by the large feature set offered by the Forescout CounterACT**, including policy templates and automated control of non-compliant devices.

The CounterACT solution identifies simple facts such as somebody plugging their home laptop into the corporate network instead of the public network. The identified device can be matched to compliance policies for hardware and software asset management and if deemed non-compliant, is automatically moved to a safe place, fixed and brought back onto the network. Ledoux reflected that “the ability to VLAN a machine off was not something that we had seen before and made a lot of sense to us.”

Mike Hatherall, Head of Engineering at C-STEM commented “The implementation of the Forescout CounterACT enabled Douglas Macmillan to immediately obtain visibility and gain control over the corporate and IoT network. It quickly allowed them to appreciate what was required in order to achieve Cyber Security Essentials and to gain clarity over the security of their assets.”

Business outcomes and impact to Douglas Macmillan Hospice

  • Asset management – Real time reporting and monitoring of hardware and software assets
  • Device compliance – Identification and continuous monitoring against compliance policies
  • Network access control – 99.9% agentless visibility of all endpoints connected to the network regardless of type
  • Network segmentation – Interoperability with other network tools for seamless information sharing and control
  • Incident response – Mitigated risk impact and quicker response and respond capabilities

The results were immediate. As soon as the CounterACT was turned on, it identified devices on the network without any antivirus running. “These computers had obviously had the software at some point but our previous NAC hadn’t informed us that the process has failed, leaving the devices vulnerable.” Ledoux states “we had no idea and it could have been disastrous.”

In addition, Ledoux explains “It will give us Cyber Essentials and make things like the HSCN toolkit easier to complete. It reduces the admin and reporting we need to do for connection to the NHS network that we would’ve had to do manually.” The implementation of the Forescout CounterACT using C-STEM’s expertise “has been invaluable so far.”

“The CounterACT has
allowed us to proactively
manage devices with
wrong software versions or
missing software. It has
been invaluable so far.”

“We’ve found working with
the staff at C-STEM to be
much more beneficial and
enjoyable than it would’ve
been working with other
suppliers that we have.”

Steve Ledoux
Head of IT
Douglas Macmillan Hospice

About C-STEM and Forescout CounterACT

*C-STEM are an accredited and experienced Forescout Professional Services partner.  They use industry leading technologies, combined with their highly specialist expertise to enable organisations to fully leverage maximum value from their investments.

**The Forescout CounterACT is an agentless solution which offers the unique ability to see devices instantly as they connect to the network. It orchestrates and controls information-sharing amongst other existing security tools, which allows organisations to tackle cyber resilience more efficiently.

Systems + Techniques = Effective Management

C-Stem-QEC-ISO-IEC-27001
C-Stem Accreditation SSIP
C-Stem Accreditation Crown Commercial Services
C-Stem Accreditation Cyber Wales
C-Stem Accreditation Ombudsman Services

C-STEM  - Platfform Building, 11-20 Devon Place, Newport NP20 4NW

Tel: 0345 241 0000 | Fax: 0345 241 0001

C-STEM is the trading name for Communication-STEM Limited.  Registered Office: 10 Temple Back, Bristol, BS1 6FL. Registered in England 03270429