Penetration Testing Isn't About Finding Vulnerabilities—It's About Reducing Business Risk
Penetration Testing Isn’t About Finding Vulnerabilities—It’s About Reducing Business Risk The most valuable penetration ...
Customer Story
RKON first met with the founders as they were fast approaching a deadline to launch a proof of concept of their service with a national health care provider. Their immediate need (within the next week) was to establish secure connectivity from the hospital to the machine learning and data science service running on Google Cloud Platform.
Stealth Healthcare
Healthcare
Google Cloud Platform
The Challenge
Within one week, bridge hospital’s network to client’s GCP environment using an IPSec virtual private network for HIPAA compliance without impacting performance. Upon connecting, review key security controls for HIPAA, as well as networking and data management controls. Then automate configurations using templates using Cloud Deployment Manager.
Schedules were tight and they needed immediate assistance to connect to a national healthcare services provider and begin their trial periodCloud VPN was selected to provide an IPSec virtual private network between the hospital and the cloud, providing a HIPAA-compliant solution without the need to manage additional infrastructure. Connecting older networks to new to meet security and performance requirements can sometimes be a bit tricky. Configuring such hybrid architectures are a common way to address the challenge of connecting established infrastructure meets the new, API-driven world of cloud computing. The team collaborated via a number of video working sessions to get the connection established within the necessary timeframes.
Our Solution
Once connected, the RKON team reviewed many key security controls, including Identity and Access Management policies, service accounts and key management, data encryption practices, logging and auditing considerations (for HIPAA and other compliance requirements), as well as general networking and data management controls.
RKON used Cloud Deployment Manager to automate the configurations through templates that were incorporated into the customer’s code base to leverage their current processes and tools. The company will reuse these templates for testing and disaster recovery.
Network and application performance were critical requirements, so the joint team held consultative architectural discussion to discuss design recommendations, and to help the team identify and remediate potential threat vectors.
"Both teams are pleased with the results and look forward to iterating as the healthcare service grows."
- Anonymous, Stealth Healthcare
Penetration Testing Isn’t About Finding Vulnerabilities—It’s About Reducing Business Risk The most valuable penetration ...
Cyber Risk Is Continuously Evolving. Your Security Validation Strategy Should Keep Pace. Many organizations view penetra...
Why Validating Your Defenses Is Just as Important as Investing in Them Organizations continue to invest heavily in cyber...
The System Security Plan is dead. FedRAMP’s Consolidated Rules for 2026 (CR26), published June 24, retired the document ...