Powerful data privacy and enhanced productivity for a leading KPO service provider
One of India’s largest BPO/KPO organizations needed to ensure the security of the highly sensitive healthcare data under their management.
Powerful data privacy and enhanced productivity for a leading KPO service provider
One of India’s largest BPO/KPO organizations needed to ensure the security of the highly sensitive healthcare data under their management.
Powerful data privacy and enhanced productivity for a leading KPO service provider
One of India’s largest BPO/KPO organizations needed to ensure the security of the highly sensitive healthcare data under their management.
The Challenge
Handling sensitive medical data requires secure processes that comply with stringent regulations including HIPAA in the USA.
Manual management of password assistance requests from employees was costing the IT administration team dozens of person-days each month.
Visibility into user access was limited, especially with employees sharing devices across shifts.
Implementing a unified access management system for over 8000 users across locations was a big challenge.
In short, our client needed to implement an identity and access management solution to enhance data security and privacy, eliminate wasted manual effort, and comply with statutory requirements.
SOLUTION
Akku’s Solution
- A time-based access restriction based on the shift timings of each user was configured to automatically log out users at the end of their shift timing.
- The IP addresses of each of the client’s office locations were whitelisted through Akku’s IP-based restriction functionality, to permit access to sensitive patient or customer data only from the organization’s offices.
- Multi-factor authentication was set up to reinforce security during login.
- Akku’s automated password manager functionality was deployed to provide self-service password setting and recovery by users.
- A standards-compliant password policy was applied to ensure users would set strong passwords and also reset their passwords periodically.
- Google Workspace and other internal applications were integrated with Akku through readymade connectors to provide a robust single sign-on.
By automatically logging out users at the end of their shifts, overlap of access between users sharing the same computers is avoided. This prevents the next user from accessing any of the previous user’s data, ensuring no user has more access than they really need.
For our client, ensuring the security of sensitive medical data for their customers was of paramount importance. By restricting users to accessing this data only through the company’s secure internal office networks, the possibility of data breaches or misuse is minimized.
The IT admin team makes significant savings of time and resources with the burden of password recovery and assistance removed from their responsibilities.
Users and admins save time on one-click application access and single-point access management, respectively.
