The Benefits
Instead of storing their privileged accounts in
an unsecure location, the hospital has a highly
secure repository for protecting these powerful
“keys.” The vault technology uses FIPS 140-2
validated cryptography with AES-256
encryption in accordance with PCI
requirements.
In addition, the software empowered Boston
Children’s Hospital to establish and streamline
best practices for privileged user management.
For example, the organization can quickly
disable accounts for departing employees and
enact a system to regularly change privileged
passwords—a key tenet of any strong
privileged identity management program.
Moreover, the organization can now instantly
provision accounts without cumbersome
administrative tasks or resorting to weak
policies such as issuing generic, shared
passwords.
“Prior to deploying CyberArk, it was tough to
determine who was using which passwords,
so disabling usage for departing employees
was a challenge,” said Mary Travers, a data
security analyst for Boston Children’s Hospital.
“Additionally the work involved with getting
new passwords out to people was a challenge
and very time consuming. Today we can store
all identities in the EPV, verify authorized use,
and automatically deactivate access to the
accounts as soon as a staff member leaves the
hospital’s employ. Plus, the software saves us a
lot of time by enabling us to make updates in
one central location. If we make a change to
one system it’s instantly updated in all
appropriate places. I don’t have to call everyone
on my team. I just send out the update and
store everything right there in the Vault.