Today Yahoo Chief Information Security Officer Bob Lord released this – “We have confirmed, based on a recent investigation, that a copy of certain user account information was stolen from our networks in late 2014 by what we believe is a state-sponsored actor. The account information may have included names, e-mail addresses, telephone numbers, dates of birth, hashed passwords (the vast majority with bcrypt), and, in some cases, encrypted or unencrypted security questions and answers.” Why should this matter to PeopleSoft customers? You might think that this wouldn’t affect your organization directly. But you could be horrifyingly wrong. With a US population of a little over 300 million people, you can almost guarantee that a significant number of your end-users have had one of their commonly-used passwords compromised. The bad guys now have two things that can help them attack your organization (and probably already have since the breach occurred in 2014):

1. Knowledge of ID and password combinations that are likely in use at your organization (since you can’t prevent people from re-using passwords across systems)
2. Rich repository of passwords people use (500 million).  This can be fed into cracking algorithms to shortcut brute force attacks against your PeopleSoft systems

There are a number of things you can do to protect yourself. GreyHeller recommends:

• Immediately require all your users to reset their passwords
• Log all attempted logins from untrusted locations to detect an attack
• Implement 2FA so that a compromised password would have limited value to the bad guys

How can GreyHeller help?

• Engage Greg Wendt, Exec Director Security Solutions, to perform an in-depth Security Readiness Assessment on your PeopleSoft systems. Email us at [email protected]
• Implement our ERP Firewall with Multi-Factor Authentication, Data Masking, Detailed Logging, High Privilege User Access Control and Location-based Access Control. Email us at [email protected]

Our customer – Florida State University – and our partner – Oracle – presented at OpenWorld this week. The components of FSU’s solution are:

• Enterprise Portal: MyFSUPortal
• Mobile Platform: ModoLabs
• UI Optimization Layer: PeopleMobile (that’s us!)
• Security Layer: ERP Firewall (that’s us!)

If you’d like a copy of the OpenWorld deck, email me at [email protected]

Jim Marion’s PeopleTools Tips & Techniques session at Oracle OpenWorld 2016 was standing room only.

Please join us for our Fall Webinar Series.

UX Webinars

Make The Most of Campus Solutions 9.2 and Fluid

Wednesday, September 21st at 11 AM PST / 2 PM EST
Presenters: Larry Grey, Co-Founder; Jim Marion, Senior Technology Evangelist July 26, 2016 marked the release of Campus Solutions 9.2 and the introduction of Fluid Self-service transactions. In this demo-intensive session, we will outline the Fluid functionality and deployment options included in this release. University of Massachusetts Mobilizes and Modernizes PeopleSoft

Wednesday, September 28th at 11 AM PST / 2 PM EST
Presenters: Wendy Mulcahy, Applications Manager – UMass Office of the President Larry Grey, Co-FounderThis session will include details of how UMass and GreyHeller worked together to transform the Student Center to have a fully responsive design for students.Enterprise UX Strategies

Wednesday, November 9th at 11 AM PST / 2 PM EST
Presenters: Larry Grey, Co-Founder
Jim Marion, Senior Technology Evangelist

In this demo-intensive session, we will explore options for making PeopleSoft modern, mobile, and easy to use — including key use cases spanning PeopleSoft Campus Solutions, Human Resources and Financial/Supply Chain systems.

Security Webinars

State of North Dakota Protects PeopleSoft from Cybercrime

Thursday, September 22nd at 11 AM PST / 2 PM PST
Presenters: John Wohl, State of North Dakota
Greg Wendt, Executive Director of Security Solutions

John Wohl from the State of North Dakota will discuss how and why they implemented ERP Firewall based security measures across their PeopleSoft Systems, including role based data masking, location-based access to sensitive transactions, and detailed logging of all transactions. Phase 2 is focused on the two-factor authentication (2FA) rollout. PeopleSoft Breaches: True Cost and How to Mitigate

Wednesday, November 2nd at 11 AM PST / 2 PM PST Presenter: Greg Wendt, Executive Director of Security Solutions

This webinar will describe how to leverage ERP Firewall and our Security Readiness Assessment to protect PeopleSoft user’s sensitive data from cybercrime and inadvertent breach.

Tips & Techniques Webinars

PeopleSoft Tips and Techniques: Advanced PeopleSoft People Tools Development Strategies

Wednesday, October 5th at 11 AM PST / 2 PM EST
Presenter: Jim Marion, Senior Technology Evangelist

Jim Marion will share interesting, thought provoking PeopleTools tips and techniques to help customers make the most of their PeopleSoft development investment. Mobility Options for PeopleSoft Applications

Thursday, October 6th at 11 AM PST / 2 PM EST
Presenter: Jim Marion, Senior Technology Evangelist

Learn how to build and deliver mobile solutions for PeopleSoft Applications. The Cloud to Ground Mashup

Tuesday, October 25th at 11 AM PST / 2 PM EST
Presenters: Jim Marion, Senior Technology Evangelist Larry Grey, Co-Founder

Why choose between Cloud and Ground when you can get the best of both? In this demo-intensive session, we will illustrate the flexibility and safety of your PeopleSoft investment.