Enterprise Password Vault

Testimonial

Billion-dollar Company Controls Thousands of Privileged Passwords with Cyber-Ark

Using Cyber-Ark's Enterprise Password Vault™, a Texas-based company with billions in annual revenue was able to secure, manage and report on thousands of Privileged User Passwords across more than 300 Oracle databases.

The Situation

With billions in annual revenues, one Texas-based company also had a large challenge in terms of updating the Privileged Passwords on all of its Oracle databases. The organization has massive operations that require hundreds of Oracle databases, a solution which comes with 31 pre-defined account, including SYS, SYSTEM, DBSNMP, CTXSYS, MDSYS, WMSYS, and XDB. Combine that with the fact that the company had eight database administrators managing more than 300 Oracle databases, and the result was more than 9,000 Privileged Passwords for Oracle alone.

"Of course, we had to regularly change the Privileged Passwords for these powerful systems," said the IT executive. "However, manually changing thousands of passwords across hundreds of databases was simply impractical. In addition, when an employee is terminated, we would have to disable his or her ID on each individual database -- a highly time-consuming process. Sometimes IT departments try to get around this problem by having the entire database administrative team share the same generic Oracle ID. But our auditors saw that as a huge security risk; we had to know which Administrator logged into which ID, when and for how long."

The Solution

The company evaluated various options and chose to deploy Cyber-Ark's Enterprise Password Vault (EPV). This secure, centralized password repository provides multiple security layers for storing and sharing passwords in an enterprise environment.

"We required that the chosen system would allow us to control, update and report on thousands of passwords across multiple networks," says the IT executive. "In terms of performance, Enterprise Password Vault was the only option that met our needs."

"In terms of performance, Enterprise Password Vault was the only option that met our needs."

Today, the company uses EPV as a centralized password repository which provides multiple security layers for storing and sharing passwords. Analogous to a bank vault, EPV is a safe haven for sensitive passwords and other information, regardless of overall network security, making it immune to loss, corruption, and exposure.

To see a full version of this case study in .doc format, please click here. To discuss how Enterprise Password Vault can help your organization, talk to one of our sales representatives.