Utility

≡ Summary

Canadian utility hires PRESIDIUM Solutions to implement CyberArk Privileged Access Management (PAM) solution to protect critical IT assets, and secure privileged accounts and sessions. Also, CyberArk Endpoint Manager (EPM) was deployed on 4000 workstation endpoints, enforcing the least privilege without inhibiting end-user productivity.

≡ Company Profile

Provincial Canadian electric utility company serving 500,000 customers and managing over $11.8 billion in assets.

Employees: 3100

≡ Challenges

The utility required a Privileged Access Management (PAM) solution to assist in securing, controlling, managing and monitoring privilege access to critical assets. They also needed a solution that would secure endpoints to ensure total separation of computing and account environments between administrative and end-user tasks while removing local administrator rights for end-users.

The company issued an RFP, evaluated multiple vendors and awarded PRESIDIUM Solutions the contract.

≡ Results

PRESIDIUM Solutions worked with IT and business stakeholders to define and document use cases covering privileged account usage across all IT domains and endpoints. CyberArk PAM solution was successfully implemented for vaulting privileged accounts and providing privileged session management. Accounts vaulted included domain ‘admin’ accounts, local Windows administrator accounts, Linux root accounts and Red Hat IDM accounts. Custom connectors were developed to allow for secure access to web applications and tools like Active Directory Users and Computes (ADUC).

CyberArk EPM solution was successfully deployed to enforce least privileged access on all Windows workstations and laptops. Local administrator rights were removed from end-users, and polices configured to ensure users were able to perform required tasks necessary for job function resulting in a ‘friction-less’ user experience.

≡ Key Benefits

• Secure session monitoring and auditing for privileged access across the enterprise

• Secure management and password rotation for 300+ high-privileged domain accounts

• Least privileged enforcement and threat protection for over 4000 workstation endpoints

• Over 250 users of the PAM solution