Investment management firm secures trading operations
A Marine Vessel Operator Secures Remote Access for Diagnostics, Maintenance and IoT Data Collection
Customer
The customer is the largest Qquant-focused hedge fund under management with revenue of $268M. They have approximately 1400 employees and a global reach with offices in
London, Paris, Zurich, Geneva, Aarhus, Mumbai, Dubai, Shanghai, Hong Kong, Singapore, Sydney
Challenge - Lack of Access Management and Governance
The customer did not have any type of Privileged Access Management (PAM) solution deployed and needed access management, oversight and session recording especially for their new, flagship high-performance computing (HPC) environment in the Nordics. The requirements included:
- Compatibility with highly-modern IT environments
- Scalability to that matches Infrastructure-as-a-Code performance
- PAM to be deployed as a code and integrating with other elements (servers, storage, networks, firewalls,, hardware management consoles) that are also "as-a-code"
- Control, audit and record Ansible and GitLab execution environments, DevOps CI/CD pipelines and configuration management
Solution - Access Governance for High-Performance Environment
PrivX was deployed in the Amazon Web Services (AWS), HPC environment which servers 50 privileged users and 1800 targets altogether, and the environment is in use 24x7. The SSH team also commited to a critical Service Level Agreement (SLA) of 2 hours.
Since PrivX has an extensive, out-of-the-box API library, the customer was able to integrate PrivX with a host of software and solutions, such as:
- Identity and Access Management (IAM)
- Infrastructure and network security
- Security Information and Event Management (SIEM)
- Colocation
- Secrets management and hardening
- Ticketing and messaging software
- Configuration Management Database
Governed, privileged access
Only verified privileged users get secure, just-in-time (JIT) and just enough access (JEA) to the right target.
Auditing and recording
All sessions and auditing and tracked and can be recorded whenever needed.
Scalable, high-preformance PAM
All the elements in the customer environment were deployed as a code, including PrivX,
Securing DevOps
PrivX secures product development with role based access control (RBAC), separation of duties and by protecting push-to-production tasks.
Protecting CI/CD pipelines
PrivX PAM controls and records Ansible and GitLab execution environments and configuraiton management.
PrivX integrated out-of-the-box into existing customer environment with its extensive REST API library.
