EnatBank uses ADAudit Plus to stay NIST compliant

Challenge:

The National Institute of Standards and Technology (NIST), a national agency in the United States released an updated Cybersecurity Framework , CSF 2.0, in 2024. Like other Ethiopian banks, EnatBank also provides its services to organizations that are headquartered in foreign countries, such as the United States. Therefore, the bank must strictly adhere to the requirements posed in CSF 2.0.

Compliance became their primary requirement, and they were in need of an auditing solution.

Here's how ADAudit Plus helped EnatBank stay CSF compliant

Continuous monitoring: CSF 2.0 requires organizations to continuously monitor its network, assets, and runtime environment to detect vulnerabilities. ADAudit Plus, with its in-built reports, enabled EnatBank to track real-time changes made to their Active Directory (AD) environment and monitor its policies applied, file servers, member servers, and other log sources.

Risk assessment: With ADAudit Plus' Attack Surface Analyzer, EnatBank was able to identify risky configurations in servers and ready to detect 25+ common AD attacks along with evidence reports to further perform root cause analysis, when an incident occurs.

Contextual information: CSF 2.0 required organizations to be equipped with cyber intelligence and anomaly detection procedures. With the tool's User Behavior Analytics, EnatBank is now prepared to identify ideal behavioral patterns of its users and instantly detect the anomalous ones.

Incident-response plan: ADAudit Plus offers real-time alerts to notify important security and system administrators of suspicious events or when an attack is detected. What made EnatBank impressed was the tool's ability to execute any given Powershell scripts when an alert is triggered. This script execution feature was their "first" response in their incident response plan, as mandated by CSF 2.0.

EnatBank chose to deploy ADAudit Plus customized to solve their compliance objectives.

EnatBank chose OnboardPro, ManageEngine's implementation service, as the bank required error-free deployment and make use of the tool's entire potential to solve as many CSF 2.0 requirements as possible. The administrators felt that the entire implementation process was well-organized and smooth. They also felt that organizations who wants to make the best out of ADAudit Plus right after their purchase, must avail OnboardPro.

About ADAudit Plus

ADAudit Plus is a real-time Active Directory change auditing solution that features file and folder monitoring, plus access and permission change capabilities. With more than 200 event-specific reports and real-time email alerts, it provides in-depth knowledge about changes made to both the content and configurations of Active Directory, Azure AD, and Windows servers. Additionally, ADAudit Plus provides thorough insights on workstation and file server access (including NetApp and EMC). For more information about ADAudit Plus, visit https://www.manageengine.com/products/active-directory-audit/.

About OnboardPro

OnboardPro is a ManageEngine service that provides solution implementation to clients upon request. This service includes the installation and customized configuration of ManageEngine solutions. It enables clients to seamlessly begin work without worrying about the complexities of product installation, deployment, and use. Every client environment is unique and requires additional support beyond basic installation and standard features. With our onboarding support, clients have the option to engage a team of product experts to manage the installation, implementation, customization, and training based on their business needs. For more information, visit manageengine.com/onboarding/manageengine-onboardpro-iam-and-siem-professional-service.html.