When it comes to implementing an IT security platform across an enterprise, the lack of proper upfront planning, design and analysis by an inexperienced team can be the recipe for disaster.
Just ask the women’s apparel company whose initial foray into using the Lawson Security platform created a major “hole” in their system that allowed unauthorized and unlimited access to any and all data throughout the organization.
To help fix the original deployment of Lawson Security 9, protect their data, and provide on-going support for the security platform moving forward, the apparel company looked to Surety Systems.
Lawson Security is a flexible, object-oriented security platform that is designed around a company’s core business processes and the security needs of its users. Lawson’s roles and rules-based architecture assigns a list of security rules and permissions to users within the company, giving them access to just the information they need to do their jobs, while protecting access to other sensitive data.
When implemented properly, Lawson Security has proven to be a reliable and cost-effective solution for a host of companies worldwide.
The apparel manufacturer made the corporate decision to upgrade their Lawson security platform. Unfortunately, the initial implementation turned into a security nightmare for the company.
Using an inexperienced consultant, upfront planning and design didn’t fully capture and address all of the needs, requirements and resources of the entire organization, resulting in the creation and deployment of inappropriate protocols, role responsibilities, and system access. The initial implementation made them vulnerable to major system attacks and unauthorized access to critical company data and program.
According to Surety’s consultant who led the re-launch of the Lawson Security platform for the client, the apparel manufacturer’s initial implementation of Lawson Security, for all intents and purposes, was worthless to them, and their security issues needed to be resolved as quickly as possible. System security is a high impact implementation and when it’s not working correctly it can have extreme consequences for an organization, from a data integrity and segregation of duties/auditing standpoint.
To help the apparel company resolve its data security issues and get its Lawson Security project back on track, Surety Systems conducted a professional assessment of the situation, and hit the ground running. They needed experienced professionals who could come in immediately and assess the state of the security system, fix the high priority access issues in a short order, and then plan long term for resolution of other issues that were a lower priority.
Surety Systems’ team of consultants has extensive experience working and leading projects using Lawson applications, running the gambit from design and implementation to on-going support and post-implementation management. For this project, the Surety consultant brought more than 20 years of Lawson technical experience to the table, including hands-on experience leading Lawson Security projects for several multi-national companies.
The Surety consultant worked closely with the company to conduct a detailed analysis of the situation and found numerous vulnerabilities within the architecture that was deployed.
The company had multiple ‘bright-red’ coded, mission-critical problems with the initial implementation. Once those were resolved, Surety needed to implement new data security rules to further protect the data.
In the first few days after being engaged on this project, the Surety consultant implemented changes and improvements to address many of the ‘bright-red’ platform issues. Within the first week, Surety rolled-out new data security rules across the organization. By the end of the first few weeks on the project, all critical issues were resolved. Then, after about six weeks, the majority of the project was complete.
According to the apparel company, the ability of Surety’s consultant to take the reins and lead a project from beginning to end was important, and helped them save a flawed project in a reasonable timeframe, with minimal additional expense.