ADAudit Plus helps Budney Industries achieve NIST 800-171 compliance

Business challenges

• NIST 800-171 Compliance: Being an aerospace manufacturing company, Budney has been receiving queries about the organization's compliance with the NIST 800-171 guidelines from its customers. This prompted the organization's IT team to ensure compliance with the standard.
• Active Directory monitoring: The organization needed a mechanism to establish an audit trail of user actions within its AD environment. Furthermore, they also needed insights into file changes and modifications performed by users.

The Problem

Budney Industries faced significant IT challenges with the introduction of the NIST 800-171 compliance requirement, which defines and mandates the necessary guidelines, and security controls to federal contractors that stores controlled unclassified information. According to Matthew Thibodeau, IT Manager at Budney Industries, the need for a comprehensive solution to track AD and file changes became crucial. Troubleshooting login failures due to password issues and monitoring user behavior within file shares were additional pain points. Without an efficient auditing tool, ensuring NIST 800-171 compliance and maintaining security were daunting tasks for the IT team.

The Solution

Budney Industries implemented ADAudit Plus, ManageEngine UBA-powered change auditing solution to address their IT challenges. ADAudit Plus provided a complete record of user activities, aiding in compliance with NIST 800-171. "The reports show everything we've needed so far," remarked Thibodeau, emphasizing the tool's effectiveness in user action auditing. ADAudit Plus' user monitoring capabilities, such as tracking login failures, helped troubleshoot issues efficiently. The tool's user behavior analytics offered insights into user activities within file shares, enabling better security permission management.

ADAudit Plus has aided Budney's IT team by generating comprehensive insights, with Thibodeau remarking that ADAudit Plus is "a complete solution at this time. We have not had an instance where we need info that was not tracked by the software." With ADAudit Plus, Budney Industries found a comprehensive solution that tracked all necessary information, significantly easing their compliance and security burdens.

About ADAudit Plus

ADAudit Plus is a real-time Active Directory change auditing solution that features file and folder monitoring, plus access and permission change capabilities. With more than 200 event-specific reports and real-time email alerts, it provides in-depth knowledge about changes made to both the content and configurations of Active Directory, Azure AD, and Windows servers. Additionally, ADAudit Plus provides thorough insights on workstation and file server access (including NetApp and EMC). For more information about ADAudit Plus, visit https://www.manageengine.com/products/active-directory-audit/.