Case Study

Healthcare System Cures
Password Management Issues

A growing regional healthcare system needed a reliable
way to manage role-based permissions for passwords amid
healthcare’s stringent privacy and security rules.

Challenge• S trict requirements for data privacy and security• P aper password list no longer viable• Heavy volume of password-related calls to help deskSolution• Role-based password manager• Z ero-knowledge security and 2FA protection against unauthorized access• Customizable to organizational structure and policies

Results• Stronger data security• I ncreased efficiency• Better data access controls© 2019 Keeper Security, Inc.

2

About Grand River Hospital District

The Keeper Solution

Grand River Hospital District is a local healthcare
system serving patients in a 1,500-square-mile territory
around Rifle, Colorado, in the western part of the state.
The district has more than 550 employees and 100+
affiliated physicians who work in five medical, long-termcare and student health facilities.

Keeper’s configurable roles, role-based permission
and administration privileges, all assignable according
to organizational hierarchy, were a perfect fit for
GRHD. Daniel and his team can fully customize
employee permissions through fine-grained access
controls based on their roles and responsibilities.

The Challenge
Since opening its first hospital in 1962, Grand River
Hospital District (GRHD) has grown into a vital part ofthe community, employing hundreds of employees andcaring for thousands of patients each year. As GRHD
expanded and healthcare data privacy and security
requirements increased, the information technology (IT)department realized the way they managed passwords
for the organization no longer worked.
privacy
securityrequirements 		
AsAs
privacy
andandsecurity
requirements
increased,
wayof managing
increased,
thetheoldold
wayof managing
passwords
longerworked.
passwords
no nolonger
worked.
“We outgrew our paper master password list,” said
Daniel Wilson, GRHD Network Engineer. “With oursystems becoming more complex, we needed role-based
permission for passwords and a better way to keepthem secure. The paper list just wasn’t viable.” Password
resets were another problem. As in many organizations,about half the calls to the IT help desk were the result of
forgotten passwords, placing a heavy burden on Daniel’s
busy staff.
When Daniel and his team started looking into password
management software, they had several functional
requirements in mind. Security and role-based
permission topped the list, but they also wanted to beable to easily import and export passwords; access thepassword manager from all platforms, especially mobile;and access the password vault offline.

The
Keepersolution
is isbuilt
onon
The
Keepersolutionbuilt
zero-knowledgearchitecture.
zero-knowledge architecture.
On the security front, Keeper stood out immediately.
The solution is built on zero-knowledge architecture,
which means no one except the user has access torecords and full control over their data. With Keeper,encryption and decryption happen only on the user’s
device when they log in to the vault.
Keeper’s two-factor authentication (2FA) wasanother strong plus for Daniel and his team. Keeper
partners with DUO Security to provide an extra
layer of protection when users log in to websites orapplications. GRHD’s IT administrators can monitor
login attempts by any user, in any location, from any
device to prevent unauthorized access.
Daniel’s team found Keeper to be the only password
manager with an excellent mobile experience thatpassed GRHD’s strict security criteria. No matter
what device or platform employees use, records
automatically sync and provide full online andoffline access. The Keeper solution also eases theburden of password reset calls to GRHD’s IT help
desk by adapting service to the healthcare system’sorganizational structure and policies.

© 2019 Keeper Security, Inc.

3

The Results

The ImpactThe Keeper password manager solution allows GRHD
to keep pace with stringent HIPAA requirements andgives the IT team an easy and efficient way to manage
passwords for the organization’s growing staff. “TheKeeper vault allows us to securely manage the lifecycleof privileged account credentials,” said Daniel. “Whena new person starts, IT can gradually give them accessto what they need, and we can also retract it at anytime. Keeper gives employees on-demand access topasswords, websites and applications, which increases
their productivity while protecting GRHD and ourpatients with best-in-class security.

As the primary healthcare provider in the region,
GRHD has a responsibility to protect patients’ privacy
and health data. With weak passwords accounting
for 81% of data breaches,1 strong, reliable password
management is essential to earning patients’ trust andmaintaining a positive reputation.
Weakpassword
securityleads
to tomore
Weakpassword
securityleads
than80%of datamore
than80% breaches.
of data breaches.
Keeper gave GRHD a practical, scalable approach topassword management that allows them to protect
valuable information as the organization grows.

About Keeper
Keeper Security develops leading password manager
and security software for protecting businesses andclient information. Keeper works with companies of all
sizes across every industry to mitigate the risk of data
breaches, bolster data security and privacy, increase
employee productivity and strengthen cybersecurity
reporting and compliance.
To learn more about Keeper Security’s leading
password manager and security software, visit
keepersecurity.com.

1

Verizon Data Breach Investigations Report, 2017

keepersecurity.com | sales@keepersecurity.com

REV 6.25.19 © 2019 Keeper Security, Inc.

4