Download PDF
BeyondTrust > Case Studies > Case Study: Lieberman RED Identity Management - Canada's WSIB Automates Privileged Account Management
BeyondTrust Logo

Case Study: Lieberman RED Identity Management - Canada's WSIB Automates Privileged Account Management

Technology Category
  • Cybersecurity & Privacy - Identity & Authentication Management
Use Cases
  • Regulatory Compliance Monitoring
Services
  • Cybersecurity Services
The Challenge
The Workplace Safety and Insurance Board (WSIB) in Toronto, Canada, was facing a challenge with its IT infrastructure. The IT staff had anonymous privileged access to hundreds of Windows servers. WSIB needed to track and audit this access to protect sensitive data. The question of who in the IT group was doing what and when needed to be resolved to maintain strict control over access to approximately 250 Windows servers across two sites in the IT infrastructure. When the IT staff did find the time to update privileged passwords, they would do so manually – a cumbersome change process that was not guaranteed to encompass every account on the network.
About The Customer
The Workplace Safety and Insurance Board (WSIB) is based in Toronto and is legislated by the Ontario government. It is responsible for administering the Workplace Safety and Insurance Act (WSIA). WSIB provides benefits, monitors the quality of healthcare, and assists in employees' safe return to the job. The organization has a large IT infrastructure with approximately 250 Windows servers across two sites. The IT staff had anonymous privileged access to these servers, which posed a challenge in terms of tracking and auditing access to protect sensitive data.
The Solution
WSIB decided to use Lieberman Software’s privileged identity management product, Lieberman RED Identity Management. The product operates by automatically discovering the privileged accounts located throughout the network – on server and desktop operating systems, line-of-business applications, databases, Web services, network appliances, and other IT assets. It then changes each account’s password to a unique value (as frequently as desired) and deploys the password changes wherever they are used in the data center. By doing so, RED Identity Management provides the accountability of showing precisely who on the IT staff has administrative access to powerful privileged accounts, at precisely what time and for what stated purpose. The product was evaluated in the WSIB testing lab and was found to meet the organization's needs.
Operational Impact
  • Privileged account password changes are now automated.
  • Administrator access to privileged accounts is audited ensuring full disclosure of “who did what, and when” on systems with access to crucial data.
  • Extensive time-savings is an additional benefit for the IT team.

Related Case Studies.

Contact us

Let's talk!

* Required
* Required
* Required
* Invalid email address
By submitting this form, you agree that IoT ONE may contact you with insights and marketing messaging.
No thanks, I don't want to receive any marketing emails from IoT ONE.
Submit

Thank you for your message!
We will contact you soon.