They are two essential public services. More than 130,000 people rely on Southern California's Imperial Irrigation District (IID) for water each day - water to drink, to wash, water fields and run equipment with. And they count on IID electricity to keep their lights on. But last year, IID faced a big problem, one that drained resources and choked the flow of information.
IID's SAP system had been in place for seven years, running financial, HR and other core processes. But it wasn't optimized. It lacked appropriate user authentication. There was no standardized method to ensure that 1,400 users could access systems they needed and could not access other systems. When internal auditors required compliance verification, the small IT staff had to do time-consuming, manual-labor-intensive steps. This unwieldy reporting process wasted time and money and strained professional relationships.
"Our customer service was never affected by our IT issues," said Frank Hernandez, supervisor, Corporate Infrastructure Engineering. "But we knew we needed a better system."
It's not a publicly traded company so IID is not subject to Sarbanes-Oxley rules. But it is committed to best practices in compliance, so Hernandez went looking for a tool to help.
In February 2007 it found one. After discovering it at the SAP SAPPHIRE event, IID executives selected and deployed Security Weaver. It took just one day to install and offered immediate results.
Security Weaver gives IID real-time access monitoring. It gives IID a standardized system to manage segregation of duties. It enables staff to generate reports ad-hoc and at regular intervals to meet auditing needs. Overall, IT maintenance and support is more efficient.
IID's cumbersome reporting process has been replaced by a modern, best practices-based system. "In the past we downloaded data into Excel files and handed them over to our internal auditors. The auditors had no guarantee that the data wasn't manipulated," Hernandez said. "With Security Weaver, auditors see reports generated in real time, directly from SAP. They know the data is timely and accurate."
IID's best practices policies have also been codified. Security Weaver let IID establish corporate policies for data access. And it serves as a tool to enforce them.
Hernandez notes yet another important and positive result. "Thanks to Security Weaver the professional relationship between our auditors and IT team is much better. Everyone is less stressed." It's a result any company would relish.
The Imperial Irrigation District (IID) sits in Southern California's fast-growing Imperial and Coachella valleys. Operating for almost 100 years, it's the nation's largest irrigation district, with 1,400 employees, and 138,000 residential, commercial and industrial customers.
Security Weaver permite el cumplimiento de la normativa Sarbanes-Oxley y otras normativas mediante procesos de control de auditoría simplificados y estandarizados.
Security Weaver no requiere hardware adicional y no afecta al rendimiento del sistema de TI.
Security Weaver es fácil de instalar y configurar. Se proporciona apoyo las 24 horas del día, los 7 días de la semana, y rara vez se necesitan consultores.
Security Weaver tiene interfaces de usuario intuitivas y fácil navegación.
Security Weaver automatiza los informes y la documentación.
Security Weaver protege las definiciones de seguridad y realiza un seguimiento de los cambios en la segregación de funciones. Ofrece una pista de auditoría precisa y completa.