Case Study Cybersecurity and Digital Transformation for a Major Cloud Computing Provider

CyberArk, Azure, and SailPoint in a Single Optimized Solution

Industry: IT/Software | Size: 2.5k-5k | Annual Revenue: $1 BN – $5 BN  | Service Area: Global

The Challenge: Breach Vulnerabilities, Identity Inefficiencies

The client is a major cloud computing provider focusing on enterprise administration. Several years ago, they were hit with a ransomware attack which caused substantial damage. At the time, they did not have privileged access management (PAM) solution or strategy, resulting in a catastrophic breach via a privileged account.

The attack was so devastating that the US Committees and entities affected by the incident exacted a penalty totaling in the tens of millions. Furthermore, they received a mandate outlining all changes necessary for their identity and access management (IAM) program, with a threat of future fines if not accomplished within 90 and 180 days.

Simeio’s Competitive Edge

Before engaging with Simeio, the enterprise had a limited SailPoint implementation, lacked a solution for privileged access management, and had no cohesive strategy to manage IAM as a comprehensive program. Their deputy CISO came to Simeio for an initial assessment to plan forward, thereby avoiding repeat of the prior high-profile attack.

The client’s attention was first attracted to Simeio’s ability to provide identity-focused solutions. The client discovered Simeio’s capacity for impactful insights, allowing Simeio to better address the needs of their security program. Simeio’s versatility in the multiple domains of identity made Simeio an invaluable partner.

Comprehensive Solution

Simeio kickstarted the client’s digital transformation with the benchmark assessment, a focused identity assessment. This assessment spanned their entire program and organization across multiple leadership changes, providing recommendations and insights into their gaps and how they could fill them. The overarching objective was to prevent another ransomware attack.

Following this benchmarking session, the enterprise recognized the need to engage in an operational capacity and leverage Simeio’s Managed Services to ensure their SailPoint IdentityNow program was running at full capacity. Simeio recommended three of their strategic partners: CyberArk for PAM, Azure for single sign-on, and SailPoint for application onboarding. These features (and associated objectives of boosted efficiency, breach prevention, and compliance) were further assisted by Simeio’s identity Orchestrator.

Beyond this, as more and more regulations and penalties and mandates became a concern of the client’s, Simeio worked to facilitate the client’s readiness to deal with these mandates and achieve the required outcomes within deadlines. Today Simeio is engaged as the client’s go-to managed identity service provider, spearheading their identity initiatives from governance to privileged access management.

Download Here