Businss Challenge: Committed to delivering the highest quality of photographs and memorable keepsakes for customers, Lifetouch decided to strengthen their IT software security by implementing a more robust third-party software patching program.

1. Photography Company Lifetouch Safeguards IT
Security forThird Party Software with Secunia’s
Corporate Software Inspector (CSI)
Lifetouch Inc., an employee-owned company founded in 1936 and headquartered in Eden Prairie,
Minnesota, offers expert portrait and photography services to individuals, schools, parishes, and
businesses across the country.The Lifetouch companies create specialized media products for families,
children, and seniors.
secunia.com
Committed to delivering the highest quality of
photographs and memorable keepsakes for customers,
Lifetouch decided to strengthen their IT software
security by implementing a more robust third-party
software patching program.
Lifetouch Inc. has primarily relied on System Center
Configuration Manager and Active Directory (AD) to
monitor and shield their computer systems from IT
security threats. However, not all Lifetouch offices used
System Center Configuration Manager and AD. Due to
the company’s decentralized structure, IT administrators
found it challenging to centrally manage software
vulnerabilities, security updates, and status reporting for
their Microsoft and non-Microsoft programs.
Lifetouch IT used Secunia’s Personal Software Inspector
(PSI) for limited software monitoring and also for
updating of computers not connected to the System
Center Configuration Manager or AD, but administrators
lacked comprehensive reporting for their 13,000
endpoint devices.They required a method to view and
patch all third-party software vulnerabilities.
“To locate software vulnerabilities in our systems, we needed
to piece together multiple sources of reporting from System
Center Configuration Manager and AD.We had finite
visibility for third-party software. It also takes time to patch
everything, for example, an average of one man per week
per patch,” said Shawn Smith,VP of Corporate IT.
Lifetouch sought a capable, cost effective vulnerability
and patch management solution that would provide
visibility for all installed software and simplify their third-
party software patching process - specifically, for creating,
testing, and deploying patching packages.
Business Challenge
CUSTOMER SUCCESS STORY
MEDIA & ENTERTAINMENT

2. After evaluating other IT security solutions, Lifetouch
chose the Secunia Corporate Software Inspector
(CSI) as their vulnerability and patch management
solution. During the CSI trial, Secunia’s solution clearly
demonstrated its value with swift and effective patching
of the Lifetouch PCI software environment.
With the Secunia CSI, the IT department could
inventory any installed third-party software as well as
monitor and enforce software compliance on computers
company-wide.The CSI’s pre-built patching packages,
efficient patch deployment, and seamless integration
with System Center Configuration Manager saved
administrators valuable time and labor costs.The
solution’s customized comprehensive reports provided
visibility and defined the criticality levels of software
vulnerabilities for all Microsoft and third-party programs.
The Secunia Package System (SPS) improved
management of End-of-Life (EOL) applications with easy
software configuration, deinstallation, and updates.The
Secunia CSI solution also strengthened Lifetouch’s PCI
compliance by automating the patching process for non-
Microsoft software.
“With Secunia’s CSI solution, we demonstrated that we have
a proactive software patching program and an effective
third-party software patching process,” said Shawn Smith.
The CSI solution saves Lifetouch
precious time and resources with
smooth integration to System Center
Configuration Manager and rapid
deployment of ready-to-use patch
packages. Customized vulnerability
reporting enables administrators to
locate and assess all third-party software
vulnerabilities for the Lifetouch companies,
regardless of whether System Center
Configuration Manager or AD are
implemented.
Lifetouch is now able to manage
its patching program armed with
a comprehensive view of insecure
applications — allowing them to monitor
and regulate third-party software
installations, and proactively maintain
a strong PCI compliance posture.And
with the Secunia Package System, IT
can eliminate vulnerabilities through the
effective management of EOL applications.
Results
Lifetouch Inc. has significantly improved its process for implementing IT security for
third-party software and gained greater visibility of their entire software environment
using Secunia’s CSI solution for vulnerability and patch management.
Solution
Visit us at
secunia.com
facebook.com/secunia
gplus.to/secunia
twitter.com/secunia
linkedin.com/company/secunia
• Industry-proven IT security protection
• Comprehensive vulnerability intelligence &
scanning
• Effective patching process for third-party software
• Strengthened PCI data security compliance
• Improved vulnerability management of EOL
applications
• Customized reporting of unpatched programs
• Significant time and resource savings
The Secunia CSI provides: