CyberArk > 实例探究 > Leading ERP Provider TOTVS Secures Workloads and Infrastructure Across Cloud Environment with CyberArk

Leading ERP Provider TOTVS Secures Workloads and Infrastructure Across Cloud Environment with CyberArk

CyberArk Logo
公司规模
Large Corporate
地区
  • America
国家
  • Brazil
产品
  • CyberArk Privileged Access Manager Solution
  • CyberArk Privileged Session Manager
  • CyberArk Enterprise Password Vault
技术栈
  • REST APIs
  • AWS
  • Azure
实施规模
  • Enterprise-wide Deployment
影响指标
  • Cost Savings
  • Productivity Improvements
  • Customer Satisfaction
  • Digital Expertise
技术
  • 网络安全和隐私 - 身份认证管理
  • 网络安全和隐私 - 网络安全
  • 网络安全和隐私 - 安全合规
适用行业
  • Software
  • Professional Service
适用功能
  • 商业运营
  • 质量保证
服务
  • 系统集成
  • 云规划/设计/实施服务
  • 网络安全服务
关于客户
Brazil-based TOTVS is the #1 enterprise resource planning (ERP) provider in Brazil, and one of the largest in the world, delivering intelligent and integrated technology solutions that give customers a competitive edge. Organizations in more than 41 countries trust TOTVS to integrate and manage core business processes — from finance and HR to manufacturing and supply chain management — to drive visibility and efficiency across the business. The company has a cloud platform underpinned by public cloud providers such as AWS and its own cloud that allows TOTVS customers to run their TOTVS ERP solutions in the cloud, while delivering enhanced performance, pay-as-you-go flexibility and scalability. But running IT workloads in the cloud is not without risk. As the platform’s usage skyrocketed, TOTVS sought to increase the security of its cloud assets and services, while enforcing consistent privileged access policies across the environment.
挑战
As cloud vendors including AWS and Azure make clear, security in the cloud is a shared responsibility. Though these public cloud vendors take great efforts to secure the cloud infrastructure — compute, storage, etc. — their customers are fully responsible for protecting everything above the hypervisor, including the operating system, applications, data, access to external resources and other assets and infrastructure. Fully appreciating this shared responsibility model, the TOTVS Cloud security team set out to identify a security solution that could not only bolster their cyber resilience but also add value to the TOTVS Cloud by driving automation, standardization and increased efficiency. TOTVS Information Security Cloud Team conducted an in-depth technical analysis of potential solutions, ultimately selecting and deploying the market-leading CyberArk Privileged Access Manager Solution based on overall performance, resilience, health checks, high availability/disaster recovery requirements and cost.
解决方案
The TOTVS cloud infrastructure enables new virtual servers, data stores, containers and other resources to be provisioned as needed. When each new ERP resource is initiated and launched, it is assigned corresponding, privileged credentials to facilitate programmatic requests. But these privileged credentials are unsecured, creating countless new vulnerabilities across the environment. With the CyberArk solution in place, the TOTVS team began automating the once-laborious process of provisioning new instances, securing their associated credentials and secrets in CyberArk’s centralized, encrypted Enterprise Password Vault and managing them using the principles of least privilege. Leveraging REST APIs, these privileged credentials can now be retrieved on-demand by authorized users and applications without requiring human interaction. And when the infrastructure is deprovisioned, the CyberArk solution removes its privileges automatically. To further reduce the size of the attack surface and secure assets across the cloud environment, CyberArk Privileged Session Manager acts as a gateway (or jump server) to limit RDP and SSH access, segregate and harden the network, monitor sessions and produce tamper-resistant audit logs. This enables TOTVS Cloud analysts to access customer servers without ever having direct access to passwords for customer environments. The CyberArk solution has also enabled TOTVS to eliminate hard-coded and visible applications and scripts that utilize the cloud platform’s API while providing a highly secure method for integrations between applications.
运营影响
  • Access to cloud instances occurs exclusively through CyberArk, resulting in consistent, robust protection and security for the privileged accounts, credentials and secrets used across this cloud environment.
  • Significantly improved workflows across the organization, maximizing operational efficiencies through end-to-end automation.
  • Simplified audits and achieved ISO 27001 compliance.
  • The strategy of funneling all access instances through CyberArk has enabled automation and thereby easier management of privileged access management tasks — from account workflow and onboarding rules to permissions granting.
  • These measures have supported TOTVS greatly, improving operational efficiency and giving valuable extra time for TOTVS analysts to work more strategically enabling consistent protection and policies within their dynamic cloud-computing environment.
数量效益
  • The TOTVS deployment spans more than 280 users.
  • More than 3,000 passwords stored and continuously managed by CyberArk.

Case Study missing?

Start adding your own!

Register with your work email and create a new case study profile for your business.

Add New Record

相关案例.

联系我们

欢迎与我们交流!
* Required
* Required
* Required
* Invalid email address
提交此表单,即表示您同意 IoT ONE 可以与您联系并分享洞察和营销信息。
不,谢谢,我不想收到来自 IoT ONE 的任何营销电子邮件。
提交

感谢您的信息!
我们会很快与你取得联系。