Bedfordshire Hospitals NHS Foundation Trust: Transforming healthcare IT with ManageEngine AD360
About Bedfordshire Hospitals NHS Foundation Trust
Bedfordshire Hospitals NHS Foundation Trust cares for a population of around 620,000 people in and around Bedfordshire, United Kingdom. The NHS Foundation Trust has two sites, Bedford Hospital and the Luton and Dunstable (L&D) University Hospital. With a workforce of approximately 8,000 staff, it is the largest NHS employer in Bedfordshire. There are approximately 500 volunteers who contribute to the delivery of healthcare services at the hospitals.
-
Country
UK -
Industry
Hospitals and Healthcare -
Employees
5,100-10,000
“ManageEngine's solutions have streamlined our operations, bolstered our security, and ensured we remain compliant with essential regulations.”
Hubert Ametefe
Head of Cybersecurity,
NHS
Business challenges:
- Asset visibility and patch management: NHS Foundation Trust lacked visibility of its IT assets and faced challenges with patch management, relying on inefficient systems that led to missing patches and inadequate tracking.
- management and auditing: Existing methods using Microsoft Management Console and PowerShell were time-consuming and administratively intensive, lacking automation and efficiency.
- User account management: NHS Foundation Trust faced challenges with managing stale and disabled accounts, bulk account creation, and handling high volumes of service desk calls related to account lockouts and password resets.
- Compliance and security: As the NHS Foundation Trust handles sensitive patient information, it needed robust auditing capabilities to ensure compliance and monitor unauthorized access to files.
- Integration and user support: It was critical to implement a solution that could integrate seamlessly with the hospitals' existing systems and provide effective user support, including on-site assistance.
The Problem:
Bedfordshire Hospitals NHS Foundation Trust, with Hubert Ametefe serving as head of cybersecurity, encountered numerous challenges in its IT infrastructure. These issues were hindering the hospitals' capacity to deliver efficient healthcare services. One of the primary cybersecurity issues was the lack of visibility over IT assets, particularly in the wake of the WannaCry ransomware attack, which highlighted the system's vulnerabilities. The existing patch management process, reliant on Microsoft Windows Server Update Services (WSUS), was proving inadequate. The process led to untracked and missing patches—a critical flaw in an environment where data security is paramount.
Another significant challenge was the management and auditing of Active Directory (AD). Ametefe was using Microsoft Management Console and PowerShell scripts, which were cumbersome, time-consuming, and prone to human errors. This method of AD management and auditing required extensive manual intervention, resulting in a high administrative burden and inefficiency.
User account management was yet another area of concern. Ametefe faced challenges with managing stale and disabled accounts. The process of creating and managing these accounts lacked automation, leading to inefficiencies and increased workload for the IT staff. This issue became particularly acute during password change cycles, leading to a surge in service desk calls as users frequently forgot their newly reset passwords.
Moreover, Ametefe needed to ensure compliance with stringent data protection regulations, including the GDPR. The existing systems were inadequate for monitoring unauthorized access to sensitive patient files, posing a significant risk to patient privacy and organizational compliance.
The Outcome:
Amefete's team chose ManageEngine AD360, which brought about a significant transformation to the IT operations of the NHS Foundation Trust. The identity management solution, ADManager Plus, changed the game by automating the management of AD accounts. "The automation capabilities of ADManager Plus have drastically reduced human error and freed up valuable time for our IT staff," Ametefe said. This was particularly evident in the streamlined and efficient management process of stale and disabled accounts.
ADSelfService Plus was another critical addition. The identity security solution empowered users to resolve common issues such as account lockouts independently, significantly reducing the volume of service desk calls. "This self-service capability has not only improved user satisfaction but also allowed our IT team to focus on more critical tasks," Ametefe observed.
The implementation of ADAudit Plus, a UBA-driven change auditor, enhanced the NHS Foundation Trust's security and compliance posture. It provided robust monitoring and reporting capabilities for unauthorized access to sensitive files, a crucial aspect of GDPR compliance. "With ADAudit Plus, we have a clearer insight into our network activities and can ensure the protection of sensitive patient information," Ametefe noted.
The overall impact of ManageEngine's solutions on the NHS Foundation Trust was profound, significantly improving the efficiency, security, and user-friendliness of the systems. "ManageEngine's solutions have streamlined our operations, bolstered our security, and ensured we remain compliant with essential regulations," Ametefe said. The NHS Foundation Trust not only addressed its immediate IT challenges but also established a foundation for a more integrated, secure, and efficient IT environment to support the delivery of high-quality healthcare services.
About AD360
AD360 is an integrated identity and access management (IAM) solution for managing user identities, governing access to resources, enforcing security, and ensuring compliance. From user provisioning, self-service password management, and AD change monitoring, to single sign-on (SSO) for enterprise applications, AD360 helps you perform all your IAM tasks with a simple, easy-to-use interface. With AD360, you can just choose the components you need and start addressing IAM challenges across on-premises, cloud, and hybrid environments from within a single console.