Case StudyCytiva
Unifying biotech security operations around the globe
NameCytiva
Industries
Enterprise / Biotechnology
Location
GlobalProducts
Security Center hosted, Synergis,Omnicast, ClearID,
Plan Manager, Clearance,
Mission Control
Partners
Johnson Controls

How Cytiva revamped physical security across global locations using Genetec Security Center hosted
and ClearID
With a rich heritage in biotech, Cytiva provides technologies
and services that advance and accelerate the development
and manufacturing of therapeutics. Operating in over 40
countries worldwide, the company drives customer-centric
innovation ranging from fundamental biological research to thedevelopment of pioneering vaccines, biologic drugs, novel cell,and gene therapies. With over 100 locations globally, Cytiva
knows that shaping the future of life sciences requires a firm gripon all aspects of security.

Searching for the right solution for an
expansive digital roadmap
When Cytiva was acquired by a new parent company, there
was an immediate need to change out and upgrade the physicalsecurity systems and infrastructure. They wanted to move awayfrom older, disparate on-premises solutions and were committed
to a cloud-first approach to minimize infrastructure demands ontheir team.
The company also had big expansion plans on the horizon, so
they wanted a scalable and forward-looking security solutionthat could meet immediate requirements and evolve alongside
future needs.
According to Larry Allen, Technical Product Owner forFacilities, Security and Crisis Management at Cytiva, “Following

the acquisition, we became a lot more autonomous as an entity.
We had more freedom to invest in our wishlist and evolve ourphysical security the way we wanted to. Our first objective wasto simplify our operations through unification and standardize
video and access control on one platform. Beyond that, wewanted access to a toolset of features, plugins, or integrations thatwould align with our digital roadmap.”
To make sure everything from decision-making to deployment
went smoothly, Cytiva enlisted the help of Johnson Controls,an Accredited Genetec Channel Partner with vast expertise incomplex, enterprise-level deployments. After hearing Cytiva’s
must-haves and helping the team solidify a plan forward, JohnsonControls designed the entire platform architecture using Genetec
Security Center hosted.

Building a hybrid deployment
Today, the Cytiva team manages access control and video
surveillance using Genetec Security Center across 17 of the mostcritical research and manufacturing sites. Each site averages 20cameras and 30 doors, but some of the larger locations have up to500+ cameras and 550 access points.
According to Allen, choosing Security Center hosted was botha strategic and welcomed decision by the team. “We’re in thebusiness of bioprocessing, gene therapy, and cellular analysis;

Case Study | Cytiva

not physical security software. In the past, staying on top ofvulnerability patching, software updates, and just managing thoseenvironments was challenging. Moving forward with Genetec
Security Center hosted helps us minimize the lifecycle managementof the software. When the vendor handles the bulk of that, it saves
us time and offers us more reliability,” said Allen.
With the Security Center hosted, Cytiva was able to build a hybrid
deployment model. While the Synergis™ access control system isfully hosted in the cloud, the Omnicast™ surveillance system and all
video recordings are managed and stored locally at various sites.
At some of Cytiva’s smaller sites, the company has installed theStreamvault™ all-in-one appliance which comes pre-loaded withthe video surveillance access control solutions for simple and easy
deployment. The Federation™ feature bridges all systems together,delivering a fully unified security view.

were looking for. With ClearID, the self-service aspect has been thebiggest benefit. Now, requesting access can be done by the employee,
and the entire process is automated until access is granted by theassigned area approver.”
The ClearID module has also helped the Cytiva team strengthen
audit quality. “Now, when we are audited, we can quickly
demonstrate that every step from the request by the employee tothe approval and granting of access by the authorized individual islogged automatically by ClearID. There’s no possibility for humanerror so from an audit standpoint, we have better quality data to
support regulatory compliance,” continued Allen.

Strengthening compliance and cybersecurity
best practices“Security Center hosted allows us to expand security across new andexisting sites quickly, using cloud services where possible. This has
been critical for us because during a global, company-wide upgrade
like this, adding more and more servers just gets unwieldy. The time
our team will spend managing that hardware adds to the total costof ownership. At some point, you’re just not saving money anymore.
So with Security Center hosted and the hybrid deployment, we’reable to operate leaner,” continued Allen.

With over 100 locations globally, Cytiva is committed tomaintaining high-level security while ensuring compliance withvarious mandates. These include the General Data ProtectionRegulations (GDPR), Biomedical Advanced Research andDevelopment Authority (BARDA), and Chemical Facility
Anti-Terrorism Standards (CFATS), and many others. Part ofhonoring these regulations and keeping operations runningsmoothly means maintaining cybersecurity and privacy
best practices.

With a solid foundation in place, the Cytiva team is slowly adding
new features and functionalities to help boost operator confidenceand efficiency. Johnson Controls provides on-site training andsupport to the Cytiva team. They have also set up Plan Manager,
the map-based interface within Security Center, to help operators
navigate each site and quickly address any alarms or events thatcome up across the locations.

“In the past, we needed to give more people access to our physicalsecurity systems to service those access requests. Since theprovisioning workflows are all automated within ClearID now,
we’ve been able to restrict access to the application itself to a very
limited group of system users. This makes our security operations
far more secure and resilient,” explained Allen.

Gaining 30% resource efficiency with
Genetec ClearID
As part of the design and build, Johnson Controls also
recommended that Cytiva implement Genetec ClearID™. This
physical access management solution has not only helped tostandardize and streamline processes for employee access requests,
but higher levels of automation have also saved personnel significant
amounts of time.
“Since installing Genetec ClearID, we’ve seen a 30% efficiency
gain in our resources. We have improved our workflow processes,
so there’s just less time required for provisioning and managing
employee credentials and access rights, which has been very
beneficial to our team,” said Allen.
Before ClearID, each facility had specific policies and procedures
around how to handle access requests. Most of the time, anemployee would reach out to the security team and request access.
Once certain criteria were met, they would grant them accessmanually by changing cardholder access rights within the old access
control system.
According to Allen, “In the past, sometimes access requests would
fall through the cracks or someone wouldn’t get the approval they

Even during the decision-making phase, the team needs to ensure
every vendor they partner with and every solution they deploy meetsvery strict cybersecurity and privacy standards. After the in-housecyber team put Genetec to the test with a comprehensive assessment,
they knew they were headed in the right direction.
“There are a lot of companies out there that either haven’t donemuch in the cybersecurity space, or they have, but don’t have theinformation we need prepared. Genetec responded with a lengthy
package of documents to support our assessment and turned it all
around in quite a short amount of time. This suggested that they
were not only prepared but very informed about all cybersecurity
aspects,” said Allen.
In Europe, the team has also begun trialing Genetec Clearance™ toheighten privacy protection and better meet GDPR requirements.
This cloud-based digital evidence management system will serve
not only to streamline any investigations by compiling evidence in
one central location; but the team can also use Clearance to quickly
service requests for information from citizens, automate dataretention periods, and enable automated privacy masking to better
protect individuals’ identities.

Case Study | Cytiva

Expanding security in biotech with theright partnerships
While Cytiva has made huge strides in upgrading physical security,
they still have a lot coming up in their digital roadmap. Furthersite expansions and additional feature add-ons are mapped out in a
3-year, 5-year, and 10-year phased plan.
Priorities right now include setting up and piloting the Genetec
Mission Control™ decision support module. By guiding operators
through response to incidents with standard operating procedures,the team believes this tool will help them further strengthen
compliance and security.

“Genetec Security Center and the ClearID module have allowed
us to standardize our security policies and operations acrossall our sites. We’ve also been able to optimize our resources
because we’re working more efficiently within a single unified
platform. Partnering with Johnson Controls and Genetec has been
instrumental to our success. We feel confident moving forwardwith our digital roadmap, especially knowing everything is centeredaround this one robust, unified solution,” concluded Allen.

Genetec Inc.
genetec.com/locations
info@genetec.com@genetec“In the past, sometimes access requests
would fall through the cracks or someone
wouldn’t get the approval they were lookingfor. With ClearID, the self-service aspect has
been the biggest benefit. Now, requesting
access can be done by the employee, and theentire process is automated until access isgranted by the assigned area approver.”© Genetec Inc., 2024. Genetec, Synergis™, Omnicast™, ClearID™, Clearance™, Mission Control™,and the Genetec logo are trademarks of Genetec Inc., and may be registered or pending registration in several
jurisdictions. Other trademarks used in this document may be trademarks of the manufacturers or vendors of
the respective products.

UPDATED:19-FEB-24

In the future, Cytiva wants to look at how to best leverage its
investments for operational benefits, such as adding specialized
cameras to monitor manufacturing at some locations whereprocesses are heavily regulated. They’re also discussing having
regional operations centers to help streamline security and incident
response across all global sites.