Silk Road Medical strengthens security posture and ISO Compliance with ADAudit Plus

Business challenges

• Lack of centralized visibility and alerting: Before implementing ADAudit Plus, Silk Road Medical had limited visibility into user and device authentication events, making it difficult to track security-related activities in Active Directory.
• Challenges in tracking AD changes and reporting: Without a centralized reporting system, generating reports for compliance audits (SOX) and security monitoring was a time-consuming and inefficient process.
• Difficulty in detecting anomalous user behavior: Silk Road Medical required a solution that could correlate user activities across multiple platforms, including file servers, VPN access, and authentication failures, to detect suspicious or unauthorized behavior.

The problem

Prior to adopting ADAudit Plus, Silk Road Medical’s IT team struggled with limited visibility into AD events, making it challenging to track security-related incidents, authentication failures, and misconfigurations. Jeremy Donavich, IT Director at Silk Road Medical, explained, “We lacked centralized visibility, alerting, and reporting on user and device authentication, which made security monitoring difficult.”

Additionally, achieving and maintaining SOX compliance required frequent audits and accurate reporting, which was cumbersome without an automated, real-time auditing solution. The company needed a tool that could streamline compliance efforts, enhance security, and provide meaningful insights into AD activities.

The solution

Silk Road Medical implemented ManageEngine ADAudit Plus, significantly improving Active Directory visibility, security monitoring, and compliance reporting. The solution provided intuitive, real-time insights into AD changes, ensuring accurate and meaningful visibility into authentication events. “ADAudit Plus gives us accurate and meaningful visibility into changes within our Windows Active Directory,” Donavich stated.

The pre-packaged reports of ADAudit Plus were particularly valuable for SOX compliance. The IT team frequently used reports such as User Login Activity, Login Failures, Locked Out Users, Recently Created & Deleted Users, User Management, and Failures due to Bad Passwords. “The reports are very accurate, easy to understand, and essential for maintaining SOX compliance,” Donavich emphasized.

ADAudit Plus ML-based user behavior analytics (UBA) features also enhanced user monitoring by correlating user account activity with file server access, VPN access, and suspicious user behavior. With ADAudit Plus' dashboard and detailed reports on Top User Logon Failures & Locked Account reports, Silk Road Medical’s IT team could proactively identify anomalous activity, misconfigurations, and potential security threats.

Additionally, Donavich highlighted the exceptional support from ManageEngine, stating, “Their support is fantastic—always responsive and quick to address our business needs. They are also very receptive to feedback and enhancement requests.” Donavich concluded, “ADAudit Plus is the best out-of-box AD auditing solution on the market! It’s easy to implement, extremely reliable, and the built-in dashboards, alerts, and reports are fantastic. We haven’t found a better solution for the value.”

With a 10/10 rating, Silk Road Medical highly recommends ADAudit Plus as a powerful and cost-effective Active Directory auditing solution.

About ADAudit Plus

ADAudit Plus is a real-time Active Directory change auditing solution that features file and folder monitoring, plus access and permission change capabilities. With more than 200 event-specific reports and real-time email alerts, it provides in-depth knowledge about changes made to both the content and configurations of Active Directory, Azure AD, and Windows servers. Additionally, ADAudit Plus provides thorough insights on workstation and file server access (including NetApp and EMC). For more information about ADAudit Plus, visit https://www.manageengine.com/products/active-directory-audit/.