Manufacturer improves security when gaining valuable insights in risk posture. Not after weeks, but in a matter of days.
For a large client, active in the manufacturing industry, wanted insights in its current IT risk posture.
As so many organizations, our client, active in the manufacturing industry, wanted insights in its current IT risk posture.
They knew they had too little control over the accounts and their accesses, but had no comprehensive overview of the situation. As a result, they didn’t know exactly what the situation was and where the biggest risks were located. That, in turn, kept them from convincing management to free up resources in order to take action.
To help the client, we performed an in-depth analysis of the key access risks residing in and across their most important applications, and provided them with a report including our findings and recommendations. In just 3 days of work, this enabled them to understand their access risks and gave them objective numbers to support decision-making with regard to next steps.
Focus on actual risk: As opposed to typical IAM assessments, we don't focus on the presence of governance processes, but on the actual IT risk present in the existing accounts and their accesses. This allows the customer to prioritize clean-up efforts for maximal risk reduction and efficiently introduce governance processes later on.
Data-driven: We put identity data to work with our dedicated technology allowing for a more cost-efficient but also more in-depth analysis of the IT risk posture.
Non-invasive: We conduct the screening without impacting operational systems. There’s no need to deploy agents or make changes to the infrastructure.
Result
We provided our client with a detailed report of the key access risks in just a couple of daysand gave them access to our platform so they could dig a little deeper into the results themselves.
Impact
Using technology to perform an in-depth analysis gave our client the insights they needed to understand their access risks and enabled them to let others understand them as well.
They used these insights to support the development of the identity roadmap. First stop: clean-up to improve the IT risk posture.
As a highly-regulated bank, our client has to have control over its users and their accesses but the information is limited however.
Orphan accounts are accounts that do provide access to corporate systems, services and applications but do not have a valid owner.
All organisations need to protect their critical infrastructure and applications. Quite a challenge when IT assets are often outside control of IT.