The Social Security and National Insurance Trust proactively mitigates security threats with ADAudit Plus

About Social Security and National Insurance Trust (SSNIT)

Founded in 1965, the Social Security and National Insurance Trust (SSNIT) is Ghana's primary public trust organization responsible for administering the Basic National Social Security Pension Scheme, as mandated by the National Pensions Act, 2008 (Act 766). Serving as the foundation of Ghana’s contributory three-tier pension system, SSNIT ensures the financial security of its members by managing the First Tier of this scheme. As the largest non-bank financial institution in the country, SSNIT plays a critical role in the national social protection framework, safeguarding the pensions and benefits of Ghana's workforce for a secure retirement.

Company

SSNIT

Industry

Finance

Location

Ghana

Employees

500+

Business challenges

  • Active Directory management challenges: SSNIT found the monitoring of AD activities time-consuming and complex, leading to challenges in maintaining the security and accuracy of the AD system.
  • Comprehensive audits and compliance needs: SSNIT needed a way to ensure that AD audits were thorough and met compliance standards, while addressing potential vulnerabilities proactively

The problem

The IT team at SSNIT faced difficulties in continuously monitoring their vast and dynamic AD environment, according to Salawu Kabiru, the IT Manager Communication and Network at SSNIT. With security audits and compliance checks essential to SSNIT’s operations, Kabiru and his team needed a solution that would provide continuous visibility into AD changes and help address potential vulnerabilities promptly. Additionally, monitoring unusual user behavior was another crucial requirement for proactive security management, which the prior system lacked.

The Solution

SSNIT deployed ADAudit Plus, ManageEngine's auditing solution, in their IT environment. The solution's AD auditing and reporting capabilities ensured that the organization's IT team found the one missing piece in their security puzzle: IT visibility. Kabiru remarked "I can now effectively monitor on a real-time basis every change that is carried out on our Active Directory system". ADAudit Plus also delivered comprehensive reports, supplying Kabiru with actionable data that supports regular weekly audits, compliance assessments, and proactive risk management.

In addition to real-time tracking, ADAudit Plus user behaviour analytics enabled SSNIT’s security team identify suspicious behavior for immediate attention. This feature empowered the team to mitigate risks more proactively than ever. Kabiru also appreciated the product’s report generation tools, which produced detailed, customizable reports that provided critical information for security audits. This ease of access to granular insights into user activities allowed SSNIT to maintain a strong security framework while meeting rigorous compliance requirements.

Furthermore, Kabiru noted the exceptional customer support offered by the ManageEngine. With ADAudit Plus, Salawu Kabiru and the SSNIT IT team are well-equipped to oversee AD management with strengthened security and simplified compliance processes. Rating his overall experience a 10 out of 10 and expressing a high likelihood of recommending the product, Salawu Kabiru acknowledges ADAudit Plus as a vital asset to SSNIT’s AD management and security strategy, noting that "As part of my supervisory role over my AD engineers, I use the ADAudit Plus system to audit changes in our Active Directory System every week."

"As part of my supervisory role over my AD engineers, I use the ADAudit Plus system to audit changes in our Active Directory System every week."

Salawu Kabiru, IT Manager Communication and Network, Social Security and National Insurance Trust (SSNIT)

About ADAudit Plus

ADAudit Plus is a real-time Active Directory change auditing solution that features file and folder monitoring, plus access and permission change capabilities. With more than 200 event-specific reports and real-time email alerts, it provides in-depth knowledge about changes made to both the content and configurations of Active Directory, Azure AD, and Windows servers. Additionally, ADAudit Plus provides thorough insights on workstation and file server access (including NetApp and EMC). For more information about ADAudit Plus, visit https://www.manageengine.com/products/active-directory-audit/.

Similar case studies

 

Take control of your identity and access management with AD360

Discover how AD360 helps your organization manage, secure, and govern identities across your entire IT environment from a single, unified console

Get your copy now!

Fill in the details below and get instant access to the case study.

  •  
  •  
  • By clicking " Submit now", you agree to processing of personal data according to the Privacy Policy.
Email Download Link