The Journey to
IAM Success inHealthcare

1

See how six
healthcare organizations#GetIAMRightwith One Identity

Identity and Access Management (IAM) is many things.
For some, it’s all about streamlining the user experience through technologies
and practices that make it easier for them to securely log on. For others, IAM isabout identity lifecycle management—ensuring that accounts are set up, modified
and retired in a timely, accurate and secure manner. For still others, IAM means
security and compliance, whether through technologies and practices that makegovernance activities such as attestations easy and complete, or by adding a layerof control and visibility to privileged accounts and “superuser” access.

The reality is IAM is all of this, and more.
For the healthcare industry, IAM is about granting the right people theright access to the right resources and in the right ways, thus reassuring
stakeholders that security and compliance are in place. That’s a lot of“rights,” and it’s not surprising that many in the healthcare field struggle
with the implications for IT security.
At One Identity, we believe that IAM is a journey, not a destination.
This journey is no casual walk in the park. Rather, it is a complex journeyfull of obstacles and lacking a clear map pointing the way to success. Andyet no matter how arduous this journey is for any healthcare organization,
it is both achievable and worthwhile.

22

On the following pages, read how
six healthcare organizations areusing One Identity solutions to#GetIAMRight
Page Index

34B. Braun

5

A health sciences
university

6

Laya Healthcare

Identity Managerand Services

One Identity Starlingand Safeguard

One Identity Safeguard

7

New HanoverMedical Center

8

Texas A&M University
Health Science Center

9Swiss National Accident
Insurance Fund

Identity Manager

Identity Manager andPassword Manager

Identity Manager and Services

3

A cure for legacy access management ills
B. Braun in Germany automates identity and accessmanagement for greater security and compliance while
enabling digital transformation

Customer Profile
Company: B. Braun Melsungen AG
Industry: Healthcare
Country: Germany
Employees: 61,583
Solution: Identity Managerand Services“Our investment in Identity Manageris enabling the business to pursue its
cloud-IT strategy, while ensuring accessmanagement is locked down.”
Andreas Mueller,IT Project Manager,
B. Braun Melsungen AG

Back to Index

Today, B. Braun…
Protects company data through automated account provisioning and deprovisioning. B. Braun also boosts
security with a hybrid environment that features cloud and on-premises systems. As a result, it:

Gives the right people
the right access

Enforces the rightlevel of control•••

Automated accountcreation and termination
enhance protection ofcompany data.

The company is now in greater
compliance with data security
regulations, with a lower risk ofunauthorized data access.

By ensuring that accessfor its 61,000 employees
is more closely managed,
the company can focus on
business development
and innovation.

Read the full B. Braun case study here.

Uses the right processes•

Employees know the positionof their requests within theworkflow at any given time.

•The company has a solutionthat links its on-premises
infrastructure to cloudservices such as Office 365.

44

Seamless ID management for
healthcare and education
A top medical school finds a better solution for controllingand monitoring who accesses what data, where, when
and why with One Identity and partner EST Group

Customer Profile
Company: A Medical School
Industry: Higher education 		and healthcare

Country: United States

Today, the medical school…
Enjoys a solution that offers greater control over access to data, with other improvements inproductivity, compliance, collaboration and the end-user experience. As a result, it:

Employees: 4,500
Students: 1,500
Solution: One Identity Manager,

One Identity Safeguard,
Starling Two-Factor 		
Authentication, Password
Manager, Cloud Access
Manager“We saw a dramatic increase in the productivityof IT staff when they started using the One
Identity solution.”
Nathan Wiehe,Vice President of Identity
and Security Services, EST Group

5 Back to Index

Gives the right people
the right access

Enforces the rightlevel of control••

Physicians, students andother healthcare professionals
who want to access certain
systems or sensitive data
must first verify their identity
via multifactor authentication
processes supported by One
Identity Starling.

•The medical school now has
greater control over privileged
accounts, using One Identity
Safeguard to ensure access isgranted and revoked based on
established rules and processes.

Administrators no longer
must manually grant,change or revoke access.
Instead, they configure
automated workflows in
One Identity, based onroles in Active Directory, tomanage these processes
instantly and consistently.

Uses the right processes•

Connected seamlessly
and securely to externalsystems, as well as mobile
and remote users, the school
can safely collaborate withother institutions and takeadvantage of third-party
cloud services.

•IT staff have detailed insight
into who has access to what,
when, where and why, andcan quickly generate reports
for regulatory compliance.

Read the full health sciences university case study here.

5Better care outcomes with powerful
identity management
Laya Healthcare enables faster patient services by streamlining
privileged-user-access approvals and regulatory compliance

Customer Profile
Company: Laya Healthcare
Industry: Insurance
Country: Ireland
Employees: 500
Solution: One Identity Safeguard“New security measures can be disruptive
for privileged users, but Safeguard has been
completely nondisruptive.”
John Paul O’Leary,
Systems Operation Team Leader,
Laya Healthcare

Back to Index

Today, Laya Healthcare…
Keeps sensitive information secure, complies with data management regulations, andenables privileged users to work efficiently at the right level of access. As a result, it:

Gives the right people
the right access

Enforces the rightlevel of control•

With the One Identity
Safeguard solution, privileged
users are able to obtainpasswords in a single click.

•Laya can securely store,
manage, record and analyze
privileged access.

•At the same time,administrators have session
management oversight toensure that sensitive data andapplications remain secure.

•One Identity Safeguard
enables password storage,
session management,
monitoring, threat detection,and behavioral and biometricanalytics.

Read the full Laya Healthcare case study here.

Uses the right processes•

Laya now saves between 10 to 30
minutes with each privileged-user
request, allowing medical staff
to access patient information
more quickly.

•Audit reporting has been
greatly simplified.

•Laya meets the most stringent
regulatory mandates forcompliance, including General Data
Protection Regulation (GDPR).

66

Simplifying Authentication,
Strengthening Account Management
New Hanover Regional Medical Center implements One Identity,
linking Epic, Active Directory and an ERP solution for more efficientand secure access management

Customer Profile
Company: New Hanover Regional
Medical CenterIndustry: Healthcare
Country: United States
Employees: 7,000
Solution: Identity Manager“I have been able to report out to the board acompliance rate of 100% since we went live [andwe] have a total of seven steps eliminated fromthe account-provisioning processes. Also, we had
a first call resolution in our help desk calls gofrom 65% to 79%.”
Eddie Parrish, CISO,
New Hanover Regional Medical Center7 Back to Index

Today, New Hanover Regional Medical Center…
Aligns its One Identity IAM solution with its Epic1 EHR system, achieving 100%
automated provisioning and deprovisioning. As a result, it:

Gives the right people
the right access

Enforces the rightlevel of control

•

•

•

Improved accessmanagement helps
protect data andapplications.
Epic access for staff
leaving the organization
can be more quickly
terminated.

•With the Person Identity
feature, NHRMC
administrators can see allaccount activity associatedwith each employee, making
it easier to create andterminate accounts.
Reporting is now consistent.

Uses the right processes•Seven steps have been removed fromthe account-provisioning process,resulting in greater efficiency.

•There’s now minimal variability in how
accounts are created and terminated in
the ERP solution.

•The compliance rate has improved from72% before alignment to 100% today.

•Help desk and system engineer staff
are no longer provisioning accounts,freeing them up for other tasks.

Watch the full New Hanover Regional Medical Center webinar here.

7Removing the bottlenecks
and blind spots in IT accessTexas A&M University’s Health Science Center streamlines identityand password management to improve security and staff efficiency

Customer Profile
Company: Texas A&M University
Health Science CenterIndustry: Higher Education

Today, Texas A&M University’s Health Science Center…

Country: United States

Controls access privileges and passwords with a comprehensive solution that works
seamlessly with Active Directory. As a result, it:

Employees: 3,200
Solution: Identity Manager andPassword Manager“My teams are now looking at how to advanceour solution for broader purposes. For example,
we’d like to tie it into our card reader system sowhen a user’s access privileges are revoked inIdentity Manager, the card they use to get into
buildings is also disabled.”
Jody Harrison,
Associate Director of Systems Engineering,Texas A&M University Health Science Center

Back to Index

Gives the right people
the right access

Enforces the rightlevel of control

•

•

•

Students, faculty andstaff can use only thesystems, services anddata they need.
The elimination of 500
inactive user accounts
cut risk.

•The university consistently
secures all its informationand technologies — whether
they’re behind its firewalls orin a public cloud.
People can access theirinformationand tools
regardless where they are andwhat device they’re using.

Uses the right processes•

Detailed reports and consistentpolicy enforcement simplify
FERPA and HIPAA compliance.

•Users can modify their own
passwords, which cuts down
on help desk calls.

•Automated workflows provisionand deprovision identities andaccess privileges via live feeds
from HR and finance systems,
reducing error and saving timeand money.

Read the full Texas A&M University Health Science Center case study here.

88

Swiss National Accident Insurance Fund (Suva)
takes the pain out of access management
Suva turns to One Identity for an IAM solution that lowers costs andmakes access management easier, positioning the company to reduce
premiums for its 2 million subscribers

Customer Profile
Company: Suva
Industry: Insurance
Country: Switzerland
Employees: 4,200
Solution: Identity Managerand Services“We’re a lot more effective in how wemanage access to our business roles
with Identity Manager.”Sebastian Goodrick, Head ofIdentity and Access Management,
Suva

9 Back to Index

Today, Suva…
Uses a simplified management solution that has reduced costs, increased security andaccelerated development. As a result, it:

Gives the right people
the right access

Enforces the rightlevel of control••The company’s 4,200
employees can accessthe specific applications
they need to fulfill
700 different business
functions.

Suva’s IAM solution not only
boosts data security, but it
also reduces management
complexity and future-proofs
its IAM requirements.

Read the full Suva case study here.

Uses the right processes•

In the past, several teams
were needed to manage
access, but Suva has now
moved IAM control to a small
centralized team, reducing
cost and complexity.

•With the new IAM solution,
Suva’s developer team cancomplete more projects,more quickly.

•Suva’s IAM solution now
seamlessly integrates with
its existing SAP line-ofbusiness applications.

9Securing the right access for the right people inhealthcare — #GetIAMRight with One Identity
Get the comprehensive IAM solution you need from One Identity to give the right people
the right access, while enforcing the right level of control with the right processes.

Our customers get IAM right

Back to Index

29%

94%

7,000+

year-to-year growthof customers report
overall satisfaction with
their support experience

global organizations use One Identity
solutions to manage access, theirway, for 130 million identities

Learn more about how your healthcareorganization can #GetIAMRight with One Identity.

1010

Industry experts recommend One Identity solutions for IAM#GetIAMRight

LeaderReaders Choice

AwardedComprehensive leader

Recommended

Nine out of ten of
the world’s leading
healthcare companies in
the Fortune 500 rely on
One Identity solutions

Award winner for
Governance, Risk
and Complianceby Information
Security magazine

Best IAM Project
by KuppingerCole
at EIC to Identity
Manager customersthree years in a row

and product leader inthe 2018 KuppingerCole
Leadership Compass
for Access Governanceand Intelligenceidentity and accessmanagement
solution provider
by SC Magazine

11 Back to Index

Learn more about how your healthcareorganization can #GetIAMRight with One Identity.

11

#GetIAMRightwith One Identity

12