Building a Stronger Foundation: How Supplemental Health Used CMDB to Cut Compliance Risk

Without visibility into system relationships and asset ownership, compliance becomes reactive and risk multiplies. Amy Bittle led a full-scale Configuration Management Database (CMDB) deployment to centralize governance and reduce audit exposure.

The Challenge

Multiple siloed IT teams lacked visibility into system dependencies, compliance status, and incident impact. Audit prep was time-consuming and error-prone.

The Approach

Amy mapped cloud and on-prem environments into a unified CMDB, integrated compliance data (HIPPA, CIS 18, FERPA, NIST), and linked incident response tools for end-to-end governance.

The Impact

Reduced mean time to identify (MTTI) by 35% Automated reporting for compliance readiness Created living asset map tied to regulatory frameworks

The Breakdown: