CASE STUDY

Providing the rightprivileged access to get
the job done
Key Facts

Cavium enables secure access to privileged
credentials with One Identity Safeguard

CompanyCaviumIndustry

TechnologyCountry

United States

Websitewww.cavium.com
Challenges• To protect invaluable
intellectual property assets
while allowing the business torun• Too many admin rights
throughout the company
Results• Simplified and secured accessto privileged credentials• Automated password
changes reduced exposurefor passwords being stolen or
misused• Enhanced security withgranular access control in allcountries• Easy implementation enabledcompanywide deployment in
two weeks
Solution• One Identity Safeguard• Active Roles

The majority of headlines about cybersecurity failures center on the theftor loss of customer or citizen information, and larceny linked to money.
However, for many organizations the “crown jewels” that they must protect
is the intellectual property that is the true value of their businesses. Such isthe case with San Jose, California-based Cavium, a processor manufacturer
that services a wide range of technology solutions.
Cavium processors can be found in many of the world’s leading technology
brands. The company has grown its worldwide presence through mergers
and acquisitions and now has offices around the globe.
“Every day our business units are driving me to open up access to more andmore countries, and many of those countries do not have laws or culturesthat respect intellectual property,” said Abe Smith, director for Enterprise
Security for Cavium. “So the challenge we face is granting the most secureaccess to our users – properly. That means giving the right access, to theright people, at the right time, to the right resources, and only for the timethey need it.”“Safeguard allows me to change passwords
on a daily or hourly basis, which
dramatically reduces the exposure we havefor passwords being stolen or misused.”
Abe Smith, Cavium

With Cavium’s intellectual
property worth hundreds ofmillions of dollars, Smith’s
primary responsibility is to protect
those invaluable assets while
enabling the business to run how
it needs to.
“Without the right tools in place,
we’re left with no other option
than to give users nothing (froman access perspective) if wewanted proper security. Of course,that is unacceptable,” Smith said.
“Consequently, when I arrived atCavium, it seemed that everybody
had admin rights, and that’s crazy– particularly if we have a priority
on protecting our intellectualproperty.”
The right tools to get
the job done
To address this problem, Cavium
turned to One Identity. “I preferto work with as few vendors aspossible,” Smith said. “The waythat One Identity solutions work

together synergistically allows
me to do that – even on theprivileged access management
side - which is a big win for us.”For several years, Cavium
has leveraged One Identity’ssolutions to manage its
infrastructure and access. For
one, the processer maker has
used Active Roles solution tosecure and manage its Active
Directory (AD) environment. Thissolution has been extremely
helpful particularly when taking
on several major acquisitions.
Active Roles delivers the ability todelegate AD admin permissions
so that just the amount of accesscan be granted to get the job
done – nothing more nothingless. In addition to ActiveRoles, Smith and Cavium haveused One Identity’s Privileged
Password Manager solution,
which is a password vault thateliminates the need to shareadmin passwords and assigns
individual accountability to theiruse. Recently, Cavium switchedto One Identity’s next-generation
privileged access management
solution – One Identity Safeguard.
“Safeguard is one of the three legsof critical security solutions I use
which also includes encryption
and perimeter protection
solutions. One Identity Safeguard
allows me to provide granular
access to our users around theglobe, which eliminates the all-ornothing situation we were stuckwith prior to implementing asolution. It also nearly eliminates
the risk for us in regions with
less-than-stringent intellectual
property protection attitudes.”One Identity Safeguard
automates, controls, and securesthe process of granting privileged
credentials. Functionally, it acts
as a privileged-account credential
vault that issues privileged
access to admin users via rolebased workflows, approvals,
and configurable limitations
on time-of-use, automatedpassword changes, and manyother important factors. Key toaccess management capabilities,
including:"Safeguard allows
us to grantgranular accessto servers. It’sessentially giving
the right accessto the rightpeople for theright amount oftime."
Abe Smith, Cavium

Safeguard’s value is its usercentered design that eliminates
the cumbersome nature of
traditional PAM solutions enabling
privileged access from anywhere
and with nearly any device.
“I didn’t have to stick with One
Identity for privileged accessmanagement, but I did,” said
Smith. “Privileged Password
Manager is a great product, but
One Identity Safeguard reallytakes it to the next level. It‘GUI-fies’ these critical processesand makes it very simple to dowhat we need to do. Not only
is Safeguard easier to use, italso is more comprehensive
and has additional functionalitythat is a very good fit for us. Infact, we planned on a six-week
deployment cycle but were able
to do it in two weeks – that’s agreat testimony for the product.”
Safeguard includes acomprehensive set of privileged• Browser and mobile-enabled
password release control• Privileged account discovery• Simple ‘anywhere’ approvals ofpassword requests• Easy integration through a
RESTful API• Role-based activity reporting• Support for multifactor
authentication options
And it’s all delivered on an ultrasecure hardened appliance for
rapid deployment and maximum
protection.
“Safeguard allows us to grant
granular access to servers,” said
Smith. “It’s essentially giving
the right access to the rightpeople for the right amount oftime. And the right time is thecritical thing, most people change
their administrative passwords
every 60 or 90 days. Safeguard
allows me to change passwords
on a daily or hourly basis,
which dramatically reduces theexposure we have for passwords
being stolen or misused.
Because Safeguard makes it
so easy to do the right thing, it
makes my job easier. Insteadof me having to go and impose
security measures, I have themcoming to me and asking for it.”
Driving toward successfuloutcomes.
Even the best technology
can underperform if it isn’tsurrounded by excellent support,a clear understanding oforganization objectives, and theflexibility to do what needs to bedone to achieve desired outcomes.
“One Identity has superbsupport,” said Smith. “I’m very
comfortable with the solutions

One Identity, and the One Identity logo are trademarks of One Identity LLC. Other trademarks andtrade names may be used in this document to refer to either the entities claiming the marks and namesor their products. One Identity disclaims any proprietary interest in the marks and names of others.
Availability and terms of One Identity, Solutions and Services vary by region. This case study is for
informational purposes only. One Identity makes no warranties – express or implied—in this case study.
© 2017 One Identity LLC, ALL RIGHTS RESERVED.
CaseStudy-Cavium-US-RS-31643

they recommend and will deploy
more One Identity solutions as
I replace other IAM products.
They are strategic partners forme. You build trust with technicalexpertise and the sincerity ofthe people that are supportingyour project. I’ve found that One
Identity is very trustworthy andvery professional and that is very
important to me.”For organizations like Cavium,
cybersecurity is one of the mostcritical concerns. As the majorityof breaches result from a failure
in privileged access management,this single aspect of IAM may bethe highest priority.
“Having visibility and control overprivileged access is one of themost important things that youcan do,” said Smith. “For anyone
that doesn’t have some kind ofprivileged access managementin place, I would say it should
be one of their top priorities,
because once a hacker has gained
privileged access, the game isover. A solution like One Identity
Safeguard delivers that visibilityand control."About One Identity
One Identity helps organizations
get identity and accessmanagement (IAM) right. With
our unique combination ofofferings, including a portfolioof identity governance, accessmanagement, privileged
management and identity as aservice solutions, organizations
can achieve their full potential– unimpeded by security, yetsafeguarded against threats.
For more information, visit

www.oneidentity.com