User management is the shortcut to security and compliance

Strict data protection requirements and high security standards challenged many companies in the run-up to the GDPR coming into force in May 2018. Jeudan was ahead of the curve and implemented streamlined, automated and centralized user management processes.

With over 500 employees, including an administrative staff of 200 and 300 workmen, the real estate and service company Jeudan required a modern solution for Identity and User Management. A solution that could bring all employees together on one convenient platform and assign the right users the right accesses. Jeudan found that solution in SIVIS.

"After choosing SIVIS Enterprise Security, we are extra well covered on three key parameters: Automation, security and compliance," says Jesper Møller, IT Director in the Group. In particular, compliance and the work of living up to the regulations of the General Data Protection Regulation played a major role in the choice of the solution.

"The GDPR requires that employees should only have access to the systems they need. No more than that. An old-fashioned method of user management is to copy existing employees' access to new users. We have always worked against this in Jeudan, because if you do that, you are simply not compliant with the regulation," Jesper Møller explains.

"With automated processes, we save time and our user management has been systematized even more. In SIVIS Enterprise Security, we get documentation that rights are removed and users are terminated if an employee leaves the company - every single time," he says.

A QUESTION OF SECURITY AND COMPLIANCE

Systematized user management optimizes work processes, but also maximizes corporate security. SIVIS Enterprise Security makes it easy to get a full overview of which employees have access to which data - and why they have been granted that access. Corrections to user profiles are rolled out across all systems, and all access rights are canceled the moment the user is terminated in the system. This protects Jeudan from security breaches.

"We have a solution that is easy to use for our employees. Every change in the systems is logged, so we have a full overview of access and data.

This makes it easy to document our handling and processing processes, which is crucial for us to be GDPR compliant," he emphasizes.

A MUTUAL COLLABORATION

In addition to providing an automated solution that matched the high security and compliance requirements, SIVIS as a company was also an important part of Jeudan's choice.

"It was important for us to choose an established supplier that we can trust will be around tomorrow. SIVIS is not a large company, and that has been an advantage. There has been close dialogue, and it has been incredibly nice for us to have direct access to the decision-makers - instead of having to negotiate with an assistant director-subdirector-subdirector-salesman, which you can encounter in large groups," Jesper Møller explains. "In terms of IT technology, it has also been crucial that SIVIS Enterprise Security is built on a modern Microsoft platform. That was personally very important to me. It makes it operationally more advantageous and much easier for us to handle."

In the other direction, Jeudan and Jesper Møller have also contributed greatly to the continued development of SIVIS Enterprise Security through their knowledge and commitment to the business and IT challenges associated with the GDPR.

"Companies' IT needs are constantly evolving, and it is important that we constantly listen to our customers and learn from their wishes," says David Nykjær, CEO of SIVIS A/S, and continues: "Jesper Møller has a special insight into GDPR, and therefore we are in close dialogue with him and Jeudan about the future development and optimization of SIVIS Enterprise Security.