Penn state leverages application security platform

CHALLENGE

Following an implementation of PeopleSoft Campus Solutions for admissions, financial aid, and records & transcripts, IT Security leaders at Penn State University quickly identified potential security gaps – the most pressing being a lack of 2 Factor Authentication for identity authorization. In addition, further security assessments revealed a potential data leak threat with sensitive PII (ex. social security numbers) being available to access without additional role delegations being required. Needing a PeopleSoft- integrated solution for these security concerns, Penn State began evaluating options to fill these gaps.

SOLUTION

Like many large higher education institutions, Penn State consists of a large global campus – with students, faculty, and staff accessing Campus Solutions all over the globe. Given the sharp increase of breach attempts to large institutions worldwide, Penn State began a thorough assessment of security solutions for intrusion protection and data loss prevention. They sought various consultants, other colleagues in the Big 10, and even consulted with The Higher Education User Group (HEUG). Penn State was then referred to Application Security Platform by Appsian. Adopting DUO for 2-Factor Authentication, Penn State then leveraged Application Security Platform to roll out 2FA widely, providing secure access across all their integrated PeopleSoft applications and on all form factors.

RESULTS

Following the adoption of Application Security Platform, Penn State immediately began seeing the value of the enhanced logging features. With the ability to identity usage patterns from access on various form factors in various locations, these insights equipped security leaders with the data to thoroughly monitor their systems – providing the most up-to-date and relevant usage data to senior leadership. While protecting their users’ most sensitive data, Penn State was able to leverage the Application Security Platform flexibility to implement a system that did not compromise on PeopleSoft’s usability.

“Given the definite gaps in the ERP application, I don’t know how we could live without the capabilities of the Application Security Platform; I don’t know how you would protect your data. It is just not optional in today’s environment.”

Matthew Scott,
IT Manager,
Penn State University