Accountant at Work

Privileged Accounts Assessment

CLIENT SUCCESS STORIES

Client Profile:

One of the nation’s largest cabinet manufacturers, with $1 Billion in revenue, and publically traded under a parent organization with $7+ Billion in revenue.

 

Client Challenge:

A cabinetry manufacturer’s vision was move pieces of their network environment to the Cloud. A goal of this vision was to improve stability and reduce down time in manufacturing facilities. The initial step of this vision was to perform a privileged accounts assessment. The objective of the assessment was to identify the current state of privileged accounts maturity, and provide guidance through recommendations to advance their maturity in order to improve security.

Management brought in Herndonwood to manage the resolution of the gaps because they understood the need to supplement existing staff, obtain missing skills, act quickly, and create structure around the process.

 
Approach & Solution:

Herndonwood utilized a phased, analytical approach to assess privileged account security and infrastructure. The assessment considered Servers, Network Devices, Directory Services, and Databases.

Herndonwood services:

  • Reviewed privileged access management policies and procedures

  • Reviewed reports and findings from internal audit, the external auditor, and other consultancies

  • Reviewed control deficiencies or any current projects to remediate

  • Interviewed employees responsible for IT policy and process administration on a day-to-day operations

  • Executed privileged account scans

  • Compared current control posture to industry-leading practices

  • Identified areas for improvement and developed recommendations for specific improvements

  • Reviewed observations and recommendations with stakeholders

  • Developed guidance to execute recommendations

 

Business Impact:

The assessment identified the manufacturer’s current and target privileged account maturity level. Herndonwood’s tailored recommendations enabled the manufacturer to strengthen their privileged account security, and meet their target maturity level based on their industry and level of risk.