CASE STUDY
St. Anna Children’s Cancer Research Institute

CASE STUDY

St. Anna Children’s Cancer
Research Institute Enables
Secure Password Management

THE CHALLENGEBACKGROUND
St. Anna Children’s Cancer
Research Institute, based in
Vienna, Austria, has beenworking towards the goalof improving the cure rate
for children and adolescentswith cancer since 1988. The
St. Anna Children’s Cancer
Research Institute coordinates
multicenter studies, andthus, actively participates ininternational developments onpediatric oncology.
Industry
Healthcare
Employees
250+Solutions
Keeper Password Manager• Enterprise• BreachWatch®
• Advanced Reporting &Alerts Module

St. Anna Children’s Cancer Research Institute (St. Anna CCRI), a prominentorganization dedicated to pediatric cancer research, faced significant
challenges in managing and securing their digital credentials. As a hub ofscientific research and collaboration, the organization’s workforce, composed
primarily of researchers and administrative staff, required a password
management system to handle sensitive data securely and efficiently.
Prior to implementing Keeper, St. Anna CCRI relied on a legacy password
manager that had several critical problems. The primary issues were the low
adoption rate among the non-technical staff, as well as the limited visibility
and reporting for admins. Additionally, the highly publicized 2022 data breachof the legacy system further hindered user adoption and utilization of theproduct. St. Anna CCRI needed a comprehensive, secure and user-friendly
password manager that could integrate with its existing tech stack, support theorganization’s collaborative work environment and restore trust among staff.
Poor User Adoption - End-users found the legacy system cumbersome andunintuitive. As a result, many continued to use risky and outdated methodsof password management, such as sticky notes or shared spreadsheets.
These practices not only posed a significant security risk, but also hindered
productivity and collaboration within the organization.
Limited Visibility and Admin Controls - The system administrators struggledwith limited access control capabilities, especially with decommissioning
and transferring the stored credentials of employees who were short-term
contractors for the company. The lack of critical access control and visibility
was a major cause for concern.
Security Issues - When the legacy password manager experienced a publicsecurity breach in 2022, St. Anna CCRI staff began to abandon the solution
internally. This incident not only exposed the institute to potential data theftand cyber threats, but also resulted in staff losing trust in the existing system.
The breach highlighted the need for a more secure and reliable solution tosafeguard the organization’s highly sensitive information.

© 2023 Keeper Security, Inc.

1

CASE STUDY
St. Anna Children’s Cancer Research Institute

THE KEEPER SOLUTION
St. Anna CCRI found its solution in Keeper, a robust anduser-friendly password management system that addresses
their critical needs. Keeper’s platform offers a uniqueblend of seamless integration capabilities, ease of use andbest-in-class security making it the ideal choice for theorganization’s collaborative environment.
User Adoption and Training - Keeper provides an intuitive
web browser extension that enables seamless autofill of
passwords and login information, eliminating the need for
employees to remember or manually enter credentials. Thisfeature is particularly beneficial for non-technical staff,
simplifying their daily operations. Additionally, Keeper’s
documentation portal provides extensive and easy-tonavigate resources for administrators. For end users,
Keeper’s intuitive product guides and training videos ensurehigh employee adoption, no matter what their level oftechnical proficiency may be.
Role-Based Access Controls (RBAC) - Keeper’s platform
provides powerful collaboration and organizationalfeatures such as secure password sharing and role-based
access controls. These out-of-the-box features enableadministrators to set specific controls on record andpassword sharing, ensuring organization-wide compliancewith security policies.
Best-in-Class Security - Keeper’s zero-trust andzero-knowledge security architecture is unmatched insafeguarding information and mitigating the risk of a databreach. Keeper has the longest-standing SOC 2 and ISO
27001 certifications in the industry. Keeper is GDPR, CCPAand HIPAA compliant, as well as FedRAMP and StateRAMP
Authorized, PCI DSS certified and certified by TrustArc forprivacy.
Keeper combines device-level, elliptic curve cryptography
with multiple layers of encryption (at the vault, folder andrecord level), multi-factor and biometric authentication, andFIPS-140-2 validated AES 256-bit encryption plus PBKDF2.
From the IT security side, the biggest concern was theusage of notes on the desk and the insecure storageof the passwords and credentials. For the acceptancefrom the end-users, the collaboration feature forsharing records and files was the key. Keeper was more
accepted because collaboration is much easier thananything they have done before.

ORGANIZATION IMPACT
The implementation of Keeper at St. Anna CCRI marked
a significant turning point in the organization’s approachto data security and operational efficiency. The transition
from the legacy password management system to Keeper
not only enhanced their security posture but also had aprofound impact on overall workflow and productivity within
the organization.
Implementation - St. Anna CCRI had allocated a threemonth period for the transition of their records andcredentials from their legacy system to Keeper. However,
due to Keeper’s automated import tools, this process wassignificantly expedited, and completed months ahead ofschedule with minimal disruption to daily operations. Thisefficiency is a testament to Keeper’s user-friendly designand seamless integration capabilities. Specifically, Keeper
integrates with St. Anna CCRI’s existing Identity Provider(IdP), further streamlining administrative functionality anduser management, while enhancing security.
User Adoption - St. Anna CCRI leverages Keeper’s sharedfolders feature– functionality that allows users to manage
access to critical systems, such as research databases,efficiently and securely. Keeper’s One-Time Share featureenables secure sharing of files and credentials in a timelimited and device-locked capacity. By using sharedfolders and One-Time Share, St. Anna CCRI teams caneasily collaborate and share necessary credentials withoutcompromising on security– safeguarding their research.
Security and Visibility - To ensure their employees were nolonger storing or sharing their credentials using outdated
methods, St. Anna CCRI leveraged Keeper’s Admin Console
to gain visibility and control over employee password
usage. This feature allows the admins to quickly and easily
understand the state of their organization’s password
and credential security. By utilizing Keeper for password
management, password storage and record sharing is now
standardized across the whole institute.
The organization-wide adoption of Keeper has positioned
St. Anna CCRI at the forefront of data security. The
successful transition to Keeper, along with the added layersof security, serve as a model for other organizations facing
similar challenges in securing their sensitive data andmaintaining security protocols.

– Ingomar Schmickl | Head of IT
St. Anna Children’s Cancer Research Institute© 2023 Keeper Security, Inc.

2

CASE STUDY
St. Anna Children’s Cancer Research Institute

KEEPER PASSWORD MANAGER
Most businesses have limited visibility into the password
practices of their employees, which greatly increases cyberrisk. Password hygiene cannot be improved without criticalinformation regarding password usage and compliance.
Keeper solves this by providing ultimate security, visibility
and control.
Data is protected with Keeper’s zero-knowledge security
architecture and world-class encryption. Zero-knowledgemeans that only the user has knowledge of and access totheir master password, and the encryption key that is used
to encrypt and decrypt their information.
Keeper is intuitive and easy to deploy, regardless of thesize of a business. Keeper integrates with Active Directoryand LDAP servers, which streamline provisioning andonboarding. Keeper SSO Connect® integrates into any
existing SSO solutions using SAML 2.0.
Keeper is designed to scale for any sized organization.
Features such as role-based permissions, team sharing,departmental auditing and delegated administration
support organizations as they grow. Keeper Commander
provides robust APIs to integrate into current and futuresystems.

ABOUT KEEPER
Keeper Security is transforming cybersecurity forpeople and organizations around the world with
next-generation privileged access management.
Keeper’s easy-to-use cybersecurity solutions arebuilt with zero-trust and zero-knowledge security
to protect every user on every device. Trusted
by millions of individuals and thousands oforganizations, Keeper is the leader for password
management, secrets management, privileged
access, secure remote access and encrypted
messaging. Learn more at KeeperSecurity.com.

Keeper is trusted and loved by thousands ofcompanies and millions of people globally.

G2
Enterprise Leader

PCMag
Editor’s ChoiceBusiness Use Cases: Keeper Password Manager• Prevent password-related data breaches and cyberattacks• Strengthen compliance

App StoreGoogle PlayTop-Rated Productivity Over 10 Million Installs• Boost employee productivity• Enforce password policies and procedures• Reduce help desk costs• Minimize training with fast time-to-security• Improve employee security awareness and behavior

keepersecurity.com | sales@keepersecurity.com© 2022 Keeper Security, Inc.
3
© 2023©
Keeper2023 Keeper
Security,Security,
Inc. 3Inc.
3