BeyondTrust Case Studies Cetrel S.A. Replaces sudo with PowerBroker for Servers

Edit This Case Study Record

	Cetrel S.A. Replaces sudo with PowerBroker for Servers BeyondTrust

Cetrel S.A. Replaces sudo with PowerBroker for Servers

BeyondTrust

Technology Category	Application Infrastructure & Middleware - API Integration & Management
Applicable Industries	Finance & Insurance
Applicable Functions	Business Operation
Use Cases	Regulatory Compliance Monitoring Remote Asset Management
Services	System Integration Testing & Certification
Challenge	CETREL S.A., a Luxembourg-based company specializing in electronic transfers and payment technology, was facing challenges with managing their complex IT environment. They had been using sudo to manage their Unix/Linux assets and trace access from their support teams to applicative or generic users. However, as they continued to add Unix and Linux servers to their operations, they found that sudo was not providing adequate security over their logs as required by PCI DSS mandates. The process of reviewing sudo logs was time-consuming as it required accessing every server individually. Additionally, sudo logs could be altered by the super user, and the time required by system engineers to configure sudo was deemed unacceptable. Read More
About Customer	CETREL S.A., headquartered in Munsbach, Luxembourg, is a leader in advanced electronic payment technology. The company, founded in 1985, specializes in electronic transfers and is a trusted partner for electronic payment offers. CETREL operates in three main areas: complete business process outsourcing for cards, acquirer for multi-domestic and international merchants, and providing Shared Service Center Solutions for the financial industry. In 2004, CETREL obtained the status of Payment Sector Professional (PSF) and is a member of the SIX Group. The company aims to become an elite player in the international issuing and acquiring card business. CETREL has 180 employees and offers service support in five languages. Read More
Solution	CETREL's system engineers and security team collaborated to find a solution that could meet their needs for auditing, compliance, and reduced configuration time. They evaluated PowerBroker for Servers and found that it could ease their configuration and management of privileged identities while maintaining the high compliance requirements of the PCI DSS standard. CETREL installed separate PowerBroker for Servers log and management servers on two independent sites, following their Disaster Recovery Plan. They installed 25 PowerBroker for Servers agents over three months to test full capabilities and analyze any potential problems. The transition was smooth, with PowerBroker for Servers integrating seamlessly with their multi-platform flavors of Unix and Linux without any compatibility issues. At each new installation, the sudo program was removed, and all users were notified of the new syntax to use with PowerBroker for Servers. Read More Log in to view content
Contents

Technology Category

Application Infrastructure & Middleware - API Integration & Management

Applicable Industries

Finance & Insurance

Applicable Functions

Business Operation

Use Cases

Regulatory Compliance Monitoring

Remote Asset Management

Services

System Integration

Testing & Certification

Challenge

CETREL S.A., a Luxembourg-based company specializing in electronic transfers and payment technology, was facing challenges with managing their complex IT environment. They had been using sudo to manage their Unix/Linux assets and trace access from their support teams to applicative or generic users. However, as they continued to add Unix and Linux servers to their operations, they found that sudo was not providing adequate security over their logs as required by PCI DSS mandates. The process of reviewing sudo logs was time-consuming as it required accessing every server individually. Additionally, sudo logs could be altered by the super user, and the time required by system engineers to configure sudo was deemed unacceptable.

About Customer

CETREL S.A., headquartered in Munsbach, Luxembourg, is a leader in advanced electronic payment technology. The company, founded in 1985, specializes in electronic transfers and is a trusted partner for electronic payment offers. CETREL operates in three main areas: complete business process outsourcing for cards, acquirer for multi-domestic and international merchants, and providing Shared Service Center Solutions for the financial industry. In 2004, CETREL obtained the status of Payment Sector Professional (PSF) and is a member of the SIX Group. The company aims to become an elite player in the international issuing and acquiring card business. CETREL has 180 employees and offers service support in five languages.

Solution

CETREL's system engineers and security team collaborated to find a solution that could meet their needs for auditing, compliance, and reduced configuration time. They evaluated PowerBroker for Servers and found that it could ease their configuration and management of privileged identities while maintaining the high compliance requirements of the PCI DSS standard. CETREL installed separate PowerBroker for Servers log and management servers on two independent sites, following their Disaster Recovery Plan. They installed 25 PowerBroker for Servers agents over three months to test full capabilities and analyze any potential problems. The transition was smooth, with PowerBroker for Servers integrating seamlessly with their multi-platform flavors of Unix and Linux without any compatibility issues. At each new installation, the sudo program was removed, and all users were notified of the new syntax to use with PowerBroker for Servers.

Impact #1	PowerBroker for Servers has successfully helped CETREL pass PCI DSS compliance mandates.
Impact #2	Improved security and flexibility of access with a centralized policy and log management.
Impact #3	Ease of policy configuration allowed the security access and logs configuration to be shifted from the System Administrators to a team focused on security.

Impact #1

PowerBroker for Servers has successfully helped CETREL pass PCI DSS compliance mandates.

Impact #2

Improved security and flexibility of access with a centralized policy and log management.

Impact #3

Ease of policy configuration allowed the security access and logs configuration to be shifted from the System Administrators to a team focused on security.

Download PDF Version

Overview

Cetrel S.A. Replaces sudo with PowerBroker for Servers

Operational Impact