Following a series of significant cyberattacks in 2020, the city recognized the need to enhance its cybersecurity posture. Despite deploying vulnerability assessment (VA) and endpoint detection and response (EDR) solutions, blind spots persisted, particularly around device misconfigurations.

The possibility of adversaries exploiting unknown configuration errors was a constant concern,” noted Mitchell Kohlbecker, Chief Information Security Officer for the City of Phoenix

The city’s existing tools lacked the ability to systematically identify misconfigurations, leaving the security team to discover issues by chance during routine operations.

This reactive approach resulted in ad hoc remediations that could take weeks, increasing the risk of system downtime or data breaches. The city prioritized end-to-end visibility to establish clear goals, processes, and benchmarks for reducing cyber exposure.

After encountering Remedio at a cybersecurity conference in Scottsdale, Arizona, the city adopted its configuration-focused endpoint posture management solution. Remedio delivers granular, real-time visibility into device configurations across the enterprise, identifying misconfigurations and enabling automated, non-disruptive remediation with a single click.

The platform’s quick deployment and user-friendly interface allowed the city to systematically address problematic configurations, enforce industry best practices (e.g., CIS, NIST), and establish a process for continuous improvement.

Remedio’s automated workflows and policy validation streamlined operations, reducing human error and ensuring consistent security baselines.

Further bolstering governance posture, the city’s change advisory board was given the mandate, alongside their cyber risk committee, to routinely review and approve configuration changes.