CyberArk Products Case Study: S&P 500 Public Utilities Holding Company

TechValidate Customer Research Library / CyberArk Products / Case Studies /

CyberArk Case Study

Case Study: S&P 500 Public Utilities Holding Company

Introduction

This case study of a S&P 500 energy & utilities company is based on an April 2018 survey of CyberArk customers by TechValidate, a 3rd-party research service. The profiled company asked to have their name blinded to protect their confidentiality.

“Learning more about CyberArk, attending conferences/forums, and webinars have really helped us to think like an attacker and pull off the blinders around how vulnerable our systems really are.”

Challenges

The business challenges that led the profiled company to evaluate and ultimately select CyberArk:

Resolved the following challenges after using CyberArk:
- Unmanaged or unaudited third-party / remote vendor access
- Too many endpoints with local administrator privileges
- Regulatory security and compliance.
Adopted CyberArk’s privileged access security because of the following compelling business drivers:
- Were driven by a board-level or executive mandate
Selected a solution for privileged access security to:
- Limit the exposure of privileged credentials
- Enforce strong passwords, store them in an encrypted vault, and rotate them
- Simplify audit and compliance requirements
- PSM / secure jump host

Use Case

The key features and functionalities of CyberArk that the surveyed company uses:

Uses CyberArk for the following:
- Securing privileged credentials in a vault
- Rotating credentials based on policies
- Monitoring and recording privileged sessions
- Managing third-party / remote access
- Securing workstations by removing local privileges
Managing the following types of privileged accounts, credentials, and secrets with CyberArk in the next 12 to 18 months:
- Microsoft Windows admin accounts
- NIX admin accounts (UNIX and Linux)
- Generation systems and vendor accounts. Win/NIX admins currently in REG environment only.
Plans to integrate the following tools with CyberArk within the next 18 months:
- Authentication (DUO or OKTA, RSA)
- SIEM (Splunk, Fortinet, LogRhythm)

Results

The surveyed company achieved the following results with CyberArk:

Reports that since adopting CyberArk to manage their privileged accounts and credentials, they are now much more secure.
Reports that since adopting CyberArk to secure their privileged accounts and credentials, the time and cost of audit reporting has reduced.
Reports that with CyberArk, the time required to manage and maintain privileged account and credential security has reduced.

TechValidate Research on CyberArk Products

Case Study: S&P 500 Public Utilities Holding Company

Introduction

Challenges

Use Case

Results

Company Profile

About CyberArk

About This Data