About Comune di Siena
Siena is among the most beautiful cities in Tuscany and its historic centre is one of Italy's most visited tourist attractions. The Municipality of Siena has over 700 employees and provides public authority services to five constituencies in the city of Siena and its surrounding province.
As a public authority, the Municipality of Siena retains a large amount of personal data relating to the residents of its community. The Municipality wanted to maximise the security of its IT environment to ensure the best possible protection for this data.
"The Municipality's data contains valuable demographic information and it would be a disaster if a security breach led to its appropriation for commercial use," said Sergio Corbini, IT Manager, Comune di Siena.
Along with ensuring information security, the Municipality was required to comply with recent legislation introduced by the Italian Data Protection Authority. The legislation calls for the application of increased security measures in relation to any personal data which is accessible to system administrators.
Another priority was to improve response times to suspected internal threats. "We lacked the capability to respond in real time to security alerts," said Corbini.
The Municipality also wanted to improve the efficiency and security of user management procedures which relied on line managers to authorise and remove the access rights of users in their departments; a process which was susceptible to tampering and human error.
To create a more secure IT environment, the Municipality of Siena sought out leading identity and security management solutions and selected Novell.
"We chose Novell because it offered the best-value and most integrated security solutions," said Corbini.
The Municipality worked with Novell Business Partner Net Studio to implement Novell Sentinel™, the new Novell Identity Manager 4 Advanced Edition and Novell Access Manager™. "Our relationship with Net Studio was entirely positive and we were very satisfied with their highly professional approach," said Corbini.
The Novell Sentinel solution provides comprehensive security monitoring for all systems at the Municipality, including external access, VPN and internet. Novell Sentinel significantly reduces the risk of perimeter threats by searching through thousands of events per second in real time to aggregate and display data, alerting the Municipality's IT department to the most pertinent threats which require immediate attention.
The solution also reports, tracks and displays log data in real time to help detect policy violations inside the Municipality. In addition, Novell Sentinel is integrated with Novell Identity Manager to enable the identification of internal users attempting to access unauthorised information. In line with legal requirements, records of systems administrators' access to processing systems and electronic archives are now logged and retained for a minimum of six months.
The implementation of Novell Identity Manager 4 provides 100 percent automation for user management processes. As a result, the Human Resources department can now manage all 700 users without requiring assistance from the IT department-greatly increasing efficiency while doing away with many manual processes.
Novell Identity Manager automatically creates new user accounts and email addresses, using custom-built role-based provisioning workflows to grant appropriate systems' access to new users depending on their job specification and department.
"One of the most exciting and distinctive features of Novell Identity Manager 4 is the solution's cloud provisioning capabilities," said Corbini. "It's something we will certainly be exploring further in the coming months."
The Municipality has also benefited from the user satisfaction and productivity gains provided by Novell Access Manager's single sign-on access to Web-based applications. "Our users were tired of having to remember multiple credentials, so the single sign-on system has received very positive feedback," said Corbini.
With the implementation of Novell Sentinel, Novell Identity Manager 4 and Novell Access Manager, the Municipality of Siena now has an optimised IT infrastructure to manage potential security risks.
"Novell Sentinel has enabled the Municipality of Siena to take a proactive and agile approach to security management," said Enrico Giacomelli, General Manager, Net Studio. "The Municipality now has a more holistic view of its IT environment and can respond to both external threats and internal policy violations in real time, thereby greatly reducing the risk of a security breach."
Crucially, Novell Sentinel has enabled the improved monitoring of systems administrators' access, which has in turn allowed the Municipality to demonstrate compliance with legal data security requirements.
Novell Identity Manager has enabled the centralised and automated management of the Municipality's user directory, enabling a 60 percent reduction in the time taken to create new user accounts. Increased automation enables the Municipality's Human Resources Department to assume full responsibility for user management processes, freeing up IT technicians to concentrate on other higher-value tasks.
"With role-based provisioning, we can be sure that users have access only to information which corresponds appropriately to their position," said Corbini. "Novell Identity Manager allows us to uphold our commitment to high data security standards, while also providing users with timely access to the resources they need to be effective in their jobs."