Workers Savings Bank boosts security

One Identity, a leader in helping organisations get identity and access management (IAM) right, is helping Slovenian bank, Delavska hranilnica (Workers Savings Bank) improve security, reduce privileged access approval time and boost administrative efficiency. Through deployment of its One Identity Safeguard privileged access management (PAM) solution, the bank has improved security and simplified compliance while speeding up the time it takes for administrative password changes from 15 minutes to just seconds.

 

To strengthen security, Workers Savings Bank sought an easier, more effective way to manage privileged access. Any profile or password change was extremely time-consuming as administrators had to use the Linux command line to manually reconfigure privileged access management software agents on individual devices. To save time and reduce complexity, multiple administrators were sharing privileged accounts and passwords — a common practice in global organisations. However, this approach, along with some technology limitations, restricted insight about the behavior of individual privileged users. Gathering any information about privileged users’ access also required someone to manually sort through system log files and compile a report.

Delavska hranilnica evaluated leading enterprise PAM solutions, looking for one that would provide improved controls, insight and reporting — while also simplifying regulatory compliance. The bank found that it could address all of its challenges with One Identity Safeguard. For help with its implementation, the bank engaged One Identity partner ADM Adria. The initial deployment took just two days.

Janko Zorman, chief information officer at Delavska hranilnica, said, “ADM Adria was the right partner for us because it has the know-how to deploy the One Identity Safeguard solution efficiently and with best practices. After we implemented the solution, it was mind-blowing to see the change. Safeguard is so easy to use, and we have better visibility and control over privileged access. We also love that Safeguard is an agentless turnkey solution.”

IT employees manage privileged access through Safeguard via an intuitive console, which they can access remotely. With the Favorites capability, staff can set up orchestrations that give them one-click access to approved privileged accounts. And they no longer have to manage separate software agents to control administrator access.

“Our efficiency is up by at least 20 percent,” said Zorman. “In a few clicks, engineers can add a new system, user, group or workflow in Safeguard— and they don’t need advanced skills to do so.”

Jackson Shaw, senior director of product management for One Identity explained how Safeguard is an ideal choice for companies like the Workers Savings Bank in Slovenia that need faster insight and simplified compliance: “When administrators access Safeguard, they can quickly see a comprehensive view of privileged accounts, including which users made what changes, to which systems, when and why. This also greatly simplifies compliance with regulations such as GDPR in Europe.”

Today, the bank is better protected against external and internal threats. “We are more secure today with One Identity Safeguard. We make changes based on very granular and defined processes that are integrated with our Active Directory. Privileged no longer share passwords, and we can change them after every session,” concluded Zorman.