Bedfordshire Hospitals NHS Foundation Trust: Transforming healthcare IT with ManageEngine AD360

Business challenges

• Asset visibility and patch management: NHS Foundation Trust lacked visibility of its IT assets and faced challenges with patch management, relying on inefficient systems that led to missing patches and inadequate tracking.
• management and auditing: Existing methods using Microsoft Management Console and PowerShell were time-consuming and administratively intensive, lacking automation and efficiency.
• User account management: NHS Foundation Trust faced challenges with managing stale and disabled accounts, bulk account creation, and handling high volumes of service desk calls related to account lockouts and password resets.
• Compliance and security: As the NHS Foundation Trust handles sensitive patient information, it needed robust auditing capabilities to ensure compliance and monitor unauthorized access to files.
• Integration and user support: It was critical to implement a solution that could integrate seamlessly with the hospitals' existing systems and provide effective user support, including on-site assistance.

The problem

Bedfordshire Hospitals NHS Foundation Trust, with Hubert Ametefe serving as head of cybersecurity, encountered numerous challenges in its IT infrastructure. These issues were hindering the hospitals' capacity to deliver efficient healthcare services. One of the primary cybersecurity issues was the lack of visibility over IT assets, particularly in the wake of the WannaCry ransomware attack, which highlighted the system's vulnerabilities. The existing patch management process, reliant on Microsoft Windows Server Update Services (WSUS), was proving inadequate. The process led to untracked and missing patches—a critical flaw in an environment where data security is paramount.

Another significant challenge was the management and auditing of Active Directory (AD). Ametefe was using Microsoft Management Console and PowerShell scripts, which were cumbersome, time-consuming, and prone to human errors. This method of AD management and auditing required extensive manual intervention, resulting in a high administrative burden and inefficiency.

User account management was yet another area of concern. Ametefe faced challenges with managing stale and disabled accounts. The process of creating and managing these accounts lacked automation, leading to inefficiencies and increased workload for the IT staff. This issue became particularly acute during password change cycles, leading to a surge in service desk calls as users frequently forgot their newly reset passwords.

Moreover, Ametefe needed to ensure compliance with stringent data protection regulations, including the GDPR. The existing systems were inadequate for monitoring unauthorized access to sensitive patient files, posing a significant risk to patient privacy and organizational compliance.

The outcome

Amefete's team chose ManageEngine AD360, which brought about a significant transformation to the IT operations of the NHS Foundation Trust. The identity management solution, ADManager Plus, changed the game by automating the management of AD accounts.

This was particularly evident in the streamlined and efficient management process of stale and disabled accounts.

ADSelfService Plus was another critical addition. The identity security solution empowered users to resolve common issues such as account lockouts independently, significantly reducing the volume of service desk calls.

The implementation of ADAudit Plus, a UBA-driven change auditor, enhanced the NHS Foundation Trust's security and compliance posture. It provided robust monitoring and reporting capabilities for unauthorized access to sensitive files, a crucial aspect of GDPR compliance.

The overall impact of ManageEngine's solutions on the NHS Foundation Trust was profound, significantly improving the efficiency, security, and user-friendliness of the systems.

The NHS Foundation Trust not only addressed its immediate IT challenges but also established a foundation for a more integrated, secure, and efficient IT environment to support the delivery of high-quality healthcare services.

About AD360

ManageEngine AD360 is a unified identity platform that seamlessly connects people, technology, and experiences while giving enterprises full visibility and control over their identity infrastructure. It offers automated life cycle management; secure SSO; adaptive MFA; and risk-based governance, auditing, compliance, and identity analytics—all from a single, intuitive console. With extensive out-of-the-box integrations and support for custom connectors, AD360 easily integrates into existing IT ecosystems to enhance security and streamline identity operations. Trusted by leading enterprises across healthcare, finance, education, and government, AD360 simplifies identity management, fortifies security, and ensures compliance with evolving regulatory standards. For more information, please visit https://www.manageengine.com/active-directory-360/.