Privileged Access Management
Vaulted credentials, session recording and just-in-time administrative access.
Solution detailsCase study — Digital Transformation
Closing a regulator’s findings before the next audit
An IT examination left 23 findings across endpoint control, privileged access and data loss. A layered programme — EDR, DLP, PAM, email security and a real training regime — closed every one of them before the following year’s audit.
- Customer
- Aravalli Finserv Ltd.
- Location
- Jodpur Rajasthan
- Practice
- Digital Transformation
Customer overview
Customer
Aravalli Finserv Ltd.
Before
Challenges they faced
What was holding the business back when they came to us.
Three endpoint products across 46 branches, none of them reporting centrally.
Domain administrator credentials shared between eleven people via a spreadsheet.
Customer data leaving on USB drives and personal webmail with no record.
Repeat audit findings on logging and retention that had never been properly closed.
A 31% click-rate on the baseline phishing simulation.
Remediation had to happen without taking branches offline during business hours.
What we did
The solution we provided
How we answered those challenges, in short.
One endpoint and perimeter estate under a single policy, so a rule written once applies to all 46 branches. Data-loss prevention scoped to the paths that carry customer data — removable media, webmail, cloud sync — rather than everything, so it could go live without stopping work. Privileged access moved into a vault with session recording and just-in-time elevation. Awareness handled as a measured quarterly programme, because the audit finding was about behaviour, not attendance.
- ARCON PAM
- Sophos XDR
- Sophos Firewall
- Safetica DLP
- Email security
Delivered
Solutions procured from us
What this customer runs on today.
Cybersecurity
Firewalls, endpoint protection, DLP and email security under one policy.
Solution detailsAfter
Business impact
What changed once the solution was live.
94%Drop in phishing clicks
1180Endpoints under one policy
46Branches secured
23Audit findings closed
The next examination opened with every prior finding evidenced as closed.
Incident response is a console action rather than a drive to a branch.
Customer data movement is visible, so exceptions can be approved rather than hidden.
IT staff stopped sharing a password spreadsheet, and can prove they stopped.
Cyber-insurance renewal was completed at a lower premium on the strength of the controls.
Branch managers can be told exactly what happened on their machines, and when.
A note from the customer
The difference is that we can now prove things. Before, our honest position on most controls was that we believed they were fine. The auditor does not accept belief.
Related work
See how we solved this elsewhere
Other engagements with a problem, a constraint or a stack in common.
Marwar Utility Services Pvt. Ltd.
38,000 service requests a year, off paper and onto one workflow
A metering and maintenance contractor ran 38,000 service requests a year on paper job cards. WorkDesk put intake, scheduling, field execution and billing on one workflow, with an offline mobile app for crews who work where there is no signal.
Related resources
Related resources
Articles, project stories and events our team has published on this subject.
Insights
Cybersecurity
Ransomware goes for your backups first — plan accordingly
Encrypting production is the noisy part. The quiet part happens earlier, when the attacker deletes the only copy that would have saved you.
Read the articleSoftware Solutions
Why we split Office Manager into five separate applications
One login and one database is not the same thing as one product. Here is why HRMS, WorkDesk, Unified Access, Sales Desk and Support Desk are sold and run on their own.
Read the articleCase studies
Digital Transformation
Closing a regulator’s findings before the next audit
An IT examination left 23 findings across endpoint control, privileged access and data loss. A layered programme — EDR, DLP, PAM, email security and a real training regime — closed every one of them before the following year’s audit.
Read the case studySoftware Development
38,000 service requests a year, off paper and onto one workflow
A metering and maintenance contractor ran 38,000 service requests a year on paper job cards. WorkDesk put intake, scheduling, field execution and billing on one workflow, with an offline mobile app for crews who work where there is no signal.
Read the case studyEvents
Industry celebration
World Telecommunication & IT Day Celebration
On World Telecommunication and Information Society Day we took part in the event organised by BSNL’s Enterprise Business Cell, under the leadership of CGM Mr Sanjay Kumar. We showcased our Office Manager solution to the government bodies and corporates invited by BSNL. Mr Indrjeet Singh of DOIT was the chief guest, and the programme was coordinated by Mr Mukesh Mangal of the Department of Telecom. We were also awarded second place for achieving the highest business among the SI partners associated with BSNL Rajasthan during FY 2023-24.
Read about this eventLive demonstration
Live Showcase of Office Manager at BSNL
The Office Manager team gave a live demonstration of the attendance and access control system using hardware devices. The team also shared how BSNL Jodhpur EB and CREADENT closed the order for AIIMS, Jodhpur together, and discussed the potential for similar orders in other cities of Rajasthan with the BSNL EB team in Jaipur. The event was live-streamed to all EB executives and officers in Rajasthan over Zoom.
Read about this eventAwareness evening
Cybersecurity Awareness Event 2023
We organised a cybersecurity event in collaboration with Sophos at Hotel Novotel, Jodhpur. It brought together corporate leaders from Jodhpur’s software development industry, government organisations and other business sectors, and served as a platform to highlight the growing necessity of robust cybersecurity measures in today’s digital landscape. The evening concluded with a networking session over dinner and cocktails, encouraging conversations and collaborations around cybersecurity awareness and resilience.
Read about this eventSame problem?
Let us scope yours against work we have already delivered
A 30-minute review with our architects is usually enough to size the job honestly.