®

Tightening control of privileged
access without additional overhead
Cloud service provider 3DS OUTSCALE streamlines privileged access management and strengthens
security by automating monitoring, recording and password control with One Identity Safeguard

Challenges
Country: FranceIndustry: Cloud Service Provider
Website: en.outscale.com

3DS OUTSCALE had no way of managing andmonitoring privileged access sessions proactively
with administrators sharing passwords to avoid
lengthy password requests and reset processes. Inaddition, one member of the company’s IT staff wasentirely occupied in investigating privileged accessincidents. By deploying One Identity Safeguard, 3DS
OUTSCALE increased the efficiency of controllingand monitoring privileged access. And, byautomating the password processes, the company
tightened security without impacting productivity.
Cloud service provider 3DS OUTSCALE specialises
in protecting not only customer data, but alsointernal access to its systems. Edouard Camoin, chief
information security officer at 3DS OUTSCALE, says:“Customer data is our mostimportant asset. It must be
protected at all times. However,internal access control can’t beoverlooked. Security needs to bewatertight from top to bottom.

• Investigating privileged access incidents
was a full-time job for one member of staff• Repetitive monitoring and reporting tasks
were error-prone • Lack of real-time data
prevented proactive incident management• Passwords were shared to avoid
time-consuming requests andresetting processes

Results• Automated privileged access monitoringsaves one full-time equivalent• Privileged session recording and replay
are constantly available• Proactive management identifies security
issues before any damage is done• Password automation increases protection
without impacting productivitySolutions• One Identity Safeguard

Tightening up privileged accessAn easy-to-deploy solution

3DS OUTSCALE looked to improve monitoring ofadministrators with privileged access. Administrators
at 3DS OUTSCALE are labelled level one, two or
three. Level-one administrators, often contractors,
have restricted access to internal systems andfollow well-defined support procedures. Leveltwo and -three administrators, on the other hand,
have varying privileged access to businesscritical internal systems that support the core 3DSOUTSCALE cloud.

To reduce the access risk, 3DS OUTSCALE
implemented Safeguard from One Identity.
According to Edouard Camoin, the solutions weresimple to deploy and manage. 3DS OUTSCALE
chose Safeguard’s Instant On mode of operation,
which meant there were no changes to user
workflows. As a result, administrators could
continue to use their familiar client applications
to access servers and systems without disrupting
their routines. “The fact we didn’t have to change
administrators’ habits too much was a big
advantage of Safeguard because it made adoption
easy,” comments Edouard Camoin.

Level-two and -three administrators gain accessto the core infrastructure via a bastion host.
Monitoring and reporting of each administrator
session via the host were largely manual. A memberof staff worked full-time on investigating potential“Saves the workload of one employee

The way we monitor privileged
sessions is far more efficient with
Safeguard. Session data is at
our fingertips, so we can trace
anything that raises an alarm.

3DS OUTSCALE no longer needs a member of staff
working full-time investigating potential security
incidents, because Safeguard records all privileged
access sessions. These sessions are also indexed,making them easy to search. “The way we monitor
privileged sessions is far more efficient with
Safeguard,” says Edouard Camoin. “Session data
is at our fingertips, so we can trace anything thatraises an alarm. Plus, all the evidence is there for
auditing and compliance requirements.”

Edouard Camoin,
Chief Information Security Officer,
3DS OUTSCALE

Human error is eliminated,bolstering security”

security incidents and generating auditing reports.
Edouard Camoin comments, “Our goal was tocontrol and record privileged access, so we haddata on every session readily available. We aimed
to be much more proactive, so if a security breachlooked like it was occurring, we could address it
before any damage was done.”
Edouard Camoin also wanted to take the riskout of managing passwords for privileged
access, as the system that was used traditionallyheld some security risks—for example, throughgeneric passwords. “It was a process whose risk
I wanted to decrease through automation,” says
Edouard Camoin.

By taking the human element out of privileged
access monitoring, 3DS OUTSCALE has eliminatedhuman error. “Many of the monitoring tasks are
simple and repetitive, so mistakes can be made.
This was a big concern for us from a security andcompliance perspective,” says Edouard Camoin.
“We can’t afford errors.”
3DS OUTSCALE is also using the recorded
privileged sessions to help raise security awarenessamong administrators. Edouard Camoin comments,“We replay sessions to help administratorsunderstand that we need to stay focused onsecurity. It works well as a training tool.”2®

Allows proactive management

Automation increases efficiency

Crucially for Edouard Camoin, 3DS OUTSCALE canbe proactive in how it manages privileged access.
Because Safeguard monitors sessions in real time,
it can instantly raise an alert if it spots anythingthat looks out of the ordinary, such as a riskycommand or suspicious window title in a graphicalconnection. “I no longer feel as though we can’t
do anything until incidents occur,” says EdouardCamoin. “With Safeguard, we can act straightaway
before any damage is done.”

Security around passwords is much tighter without
any increase in management overheads. Thanks toSafeguard, administrator password requests andresets are automated for maximum efficiency. 3DS
OUTSCALE has also tailored the approval process
in line with company guidelines. “We no longer use
shared passwords,” says Edouard Camoin. “Thewhole process for allocation and resetting is pretty
slick with Safeguard, helping us avoid any delays.”“I no longer feel as though wecan’t do anything until incidents
occur. With Safeguard, we canact straightaway before any
damage is done.
Edouard Camoin,
Chief Information Security Officer,
3DS OUTSCALE”

About One Identity
One Identity delivers unified identity security
solutions that help customers strengthen theiroverall cybersecurity posture and protect thepeople, applications and data essential to business.
Our Unified Identity Security Platform brings
together best-in-class Identity Governance andAdministration (IGA), Access Management (AM),Privileged Access Management (PAM) and Active
Directory Management (AD Mgmt) capabilities toenable organizations to shift from a fragmented
to a holistic approach to identity security. OneIdentity is trusted and proven on a global scale –managing more than 500 million identities for morethan 11,000 organizations worldwide. For more
information, visit www.oneidentity.com.

© 2023 One Identity LLC ALL RIGHTS RESERVED. One Identity, and the One Identity logo are trademarks and registered trademarks of One Identity LLC in the U.S.A. and other countries. For a complete list of One Identity trademarks,3please visit our website at www.oneidentity.com/legal. All other trademarks, servicemarks, registered trademarks, andregistered servicemarks are the property of their respective owners. CaseStudy-3DS-PG-83929®