About Comune di Siena
Siena is among the most beautiful cities in Tuscany and its historic centre is one of Italy's most visited tourist attractions. The Municipality of Siena has over 700 employees and provides public authority services to five constituencies in the city of Siena and its surrounding province.
As a public authority, the Municipality of Siena retains a large amount of personal data relating to the residents of its community. The Municipality wanted to maximise the security of its IT environment to ensure the best possible protection for this data.
"The Municipality's data contains valuable demographic information and it would be a disaster if a security breach led to its appropriation for commercial use," said Sergio Corbini, IT Manager, Comune di Siena.
Along with ensuring information security, the Municipality was required to comply with recent legislation introduced by the Italian Data Protection Authority. The legislation calls for the application of increased security measures in relation to any personal data which is accessible to system administrators.
Another priority was to improve response times to suspected internal threats. "We lacked the capability to respond in real time to security alerts," said Corbini.
The Municipality also wanted to improve the efficiency and security of user management procedures which relied on line managers to authorise and remove the access rights of users in their departments; a process which was susceptible to tampering and human error.
To create a more secure IT environment, the Municipality of Siena sought out leading identity and security management solutions and selected us.
"We chose Novell (now a part of Micro Focus) because it offered the best-value and most integrated security solutions," said Corbini.
The Municipality worked with Business Partner Net Studio to implement Sentinel™, the new Identity Manager 4 Advanced Edition and Access Manager™. "Our relationship with Net Studio was entirely positive and we were very satisfied with their highly professional approach," said Corbini.
The Sentinel solution provides comprehensive security monitoring for all systems at the Municipality, including external access, VPN and internet. Sentinel significantly reduces the risk of perimeter threats by searching through thousands of events per second in real time to aggregate and display data, alerting the Municipality's IT department to the most pertinent threats which require immediate attention.
The solution also reports, tracks and displays log data in real time to help detect policy violations inside the Municipality. In addition, Sentinel is integrated with Identity Manager to enable the identification of internal users attempting to access unauthorised information. In line with legal requirements, records of systems administrators' access to processing systems and electronic archives are now logged and retained for a minimum of six months.
The implementation of Identity Manager 4 provides 100 percent automation for user management processes. As a result, the Human Resources department can now manage all 700 users without requiring assistance from the IT department-greatly increasing efficiency while doing away with many manual processes.
Identity Manager automatically creates new user accounts and email addresses, using custom-built role-based provisioning workflows to grant appropriate systems' access to new users depending on their job specification and department.
"One of the most exciting and distinctive features of Identity Manager 4 is the solution's cloud provisioning capabilities," said Corbini. "It's something we will certainly be exploring further in the coming months."
The Municipality has also benefited from the user satisfaction and productivity gains provided by Access Manager's single sign-on access to Web-based applications. "Our users were tired of having to remember multiple credentials, so the single sign-on system has received very positive feedback," said Corbini.
With the implementation of Sentinel, Identity Manager 4 and Access Manager, the Municipality of Siena now has an optimised IT infrastructure to manage potential security risks.
"Sentinel has enabled the Municipality of Siena to take a proactive and agile approach to security management," said Enrico Giacomelli, General Manager, Net Studio. "The Municipality now has a more holistic view of its IT environment and can respond to both external threats and internal policy violations in real time, thereby greatly reducing the risk of a security breach."
Crucially, Sentinel has enabled the improved monitoring of systems administrators' access, which has in turn allowed the Municipality to demonstrate compliance with legal data security requirements.
Identity Manager has enabled the centralised and automated management of the Municipality's user directory, enabling a 60 percent reduction in the time taken to create new user accounts. Increased automation enables the Municipality's Human Resources Department to assume full responsibility for user management processes, freeing up IT technicians to concentrate on other higher-value tasks.
"With role-based provisioning, we can be sure that users have access only to information which corresponds appropriately to their position," said Corbini. "Identity Manager allows us to uphold our commitment to high data security standards, while also providing users with timely access to the resources they need to be effective in their jobs."