TechValidate Research on CyberArk Products


CyberArk Case Study

Case Study: S&P 500 Telecommunications Services Company

Introduction

This case study of Harris Corporation is based on an April 2018 survey of CyberArk customers by TechValidate, a 3rd-party research service.

“By eliminating the need for individual network engineers to access the privileged account passwords to accomplish their mission, we have eliminated the passive storing of passwords by the teams. No password spreadsheets mean more secure passwords.”

Challenges

The business challenges that led the profiled company to evaluate and ultimately select CyberArk:

  • Resolved the following challenges after using CyberArk:
    • Balancing security with productivity
    • Rampant password reuse across multiple accounts
    • Securing credentials used by applications
  • Adopted CyberArk’s privileged access security because of the following compelling business drivers:
    • Were driven by a board-level or executive mandate
    • Failed an audit
  • Selected a solution for privileged access security to:
    • Limit the exposure of privileged credentials
    • Enforce strong passwords, store them in an encrypted vault, and rotate them
    • Simplify audit and compliance requirements
    • Remove hard-coded credentials from applications and scripts, including applications built using DevOps methodologies
    • Secure privileged accounts and credentials for non-IT users (Finance, HR, Marketing)

Use Case

The key features and functionalities of CyberArk that the surveyed company uses:

  • Uses CyberArk for the following:
    • Securing privileged credentials in a vault
    • Rotating credentials based on policies
    • Securing and rotating shared service accounts
    • Securing credentials used by applications
    • Securing secrets used by DevOps and Continuous Integration/Continuous Delivery (CI/CD) tools
    • Securing workstations by removing local privileges
    • Flagging and reviewing high-risk activity
  • Managing the following types of privileged accounts, credentials, and secrets with CyberArk in the next 12 to 18 months:
    • Domain admin accounts
    • Microsoft Windows admin accounts
    • NIX admin accounts (UNIX and Linux)
    • Network device accounts
    • Local admin accounts on workstations
    • Secrets used by DevOps tools
    • Service accounts
  • Plans to integrate the following tools with CyberArk within the next 18 months:
    • Authentication (DUO or OKTA, RSA)
    • Identity and access (Sailpoint, RSA)
    • SIEM (Splunk, Fortinet, LogRhythm)
    • Vulnerability management (Qualys, Rapid7, Tenable)

“In my experience, CyberArk PAS provides the most effective enterprise-level solution for securing privileged account credentials.”

Results

The surveyed company achieved the following results with CyberArk:

  • Reports that since adopting CyberArk to manage their privileged accounts and credentials, they are now much more secure.
  • Reports that since adopting CyberArk to secure their privileged accounts and credentials, the time and cost of audit reporting has reduced dramatically.
  • Reports that with CyberArk, the time required to manage and maintain privileged account and credential security has stayed the same.




About This Data

This data was sourced directly from verified users of CyberArk Products by TechValidate.

TechValidate verifies the identity and organizational affiliation of all participants that contribute to published research data. When research participants so desire, we also guarantee their anonymity so that they may share information honestly and freely.


More Research on CyberArk Products