McKesson Protects its Most Sensitive Data with CyberArk’s Secure, Compliant Sensitive Information Management Solution
Company Size
1,000+
Region
- America
Country
- United States
Product
- CyberArk Sensitive Information Management Solution
- CyberArk Secure Digital Vault
Tech Stack
- Secure Digital Vault
- Granular Access Controls
- Audit Reporting
Implementation Scale
- Enterprise-wide Deployment
Impact Metrics
- Customer Satisfaction
- Digital Expertise
Technology Category
- Cybersecurity & Privacy - Application Security
- Cybersecurity & Privacy - Identity & Authentication Management
- Cybersecurity & Privacy - Security Compliance
Applicable Industries
- Healthcare & Hospitals
- Pharmaceuticals
Applicable Functions
- Business Operation
- Quality Assurance
Services
- Cybersecurity Services
- System Integration
About The Customer
McKesson, one of the oldest and largest healthcare companies in the United States, distributes pharmaceuticals to retail and institutional pharmacies and provides software, services, and consulting to a variety of healthcare organizations. McKesson serves 50 percent of American hospitals and delivers one-third of all medications used in the United States each day. As a large, publicly traded healthcare company, McKesson has a significant amount of sensitive financial, personal, and patient health information that must be protected for both security and compliance purposes.
The Challenge
Members of McKesson’s legal department need to frequently exchange sensitive documents that contain financial data, intellectual property, and information about pending lawsuits. The information within these documents is typically highly sensitive and regulated. As such, the legal team needs to be sure that their documents are safe from unauthorized access and securely stored in a way that is compliant with industry regulations and standards. When the legal team began searching for a file sharing and storage solution, they required a system that would protect their most sensitive information from unauthorized access and that would meet compliance guidelines out-of-the-box. Specifically, the team needed a solution that offered granular access controls and enabled administrators to audit access to files without having access to the files themselves. After evaluating the options available, the legal team selected the CyberArk Sensitive Information Management Solution.
The Solution
CyberArk’s Sensitive Information Management Solution enables McKesson’s legal team to have confidence that their sensitive documents are both safe from unauthorized access and secured in a way that is compliant with applicable regulations. After deploying CyberArk’s Sensitive Information Management Solution, employees in McKesson’s legal department each gained access to his or her own private safe within the CyberArk Secure Digital Vault. Here, employees are now able to electronically store sensitive documents and have confidence that these documents will be safe from unauthorized access. The team also gained the ability to securely and compliantly share documents with each other and necessary outside parties. Further, because all activity is automatically tracked, the IT team is able to generate audit reports at any time to prove compliance. After seeing how well-received the CyberArk Sensitive Information Management Solution was within the legal department, the IT team realized they could leverage the same solution to solve a similar challenge elsewhere in the business. Members of the Board of Directors needed to exchange highly sensitive information with each other prior to board meetings, but electronic file transfer was considered too high risk due to the sensitivity of the files. As a result, the process of sharing sensitive information was manual, time-consuming, and cumbersome, and the board members wanted an easier alternative. With the infrastructure already in place, the IT team extended the use of CyberArk’s Sensitive Information Management Solution to McKesson’s Board of Directors. Now, thanks to the CyberArk solution, board members are able to quickly and easily share sensitive documents prior to board meetings without having to worry about unauthorized parties accessing their sensitive, regulated information.
Operational Impact
Quantitative Benefit
Case Study missing?
Start adding your own!
Register with your work email and create a new case study profile for your business.
Related Case Studies.
Case Study
Case Study: Pfizer
Pfizer’s high-performance computing software and systems for worldwide research and development support large-scale data analysis, research projects, clinical analytics, and modeling. Pfizer’s computing services are used across the spectrum of research and development efforts, from the deep biological understanding of disease to the design of safe, efficacious therapeutic agents.
Case Study
Hospital Inventory Management
The hospital supply chain team is responsible for ensuring that the right medical supplies are readily available to clinicians when and where needed, and to do so in the most efficient manner possible. However, many of the systems and processes in use at the cancer center for supply chain management were not best suited to support these goals. Barcoding technology, a commonly used method for inventory management of medical supplies, is labor intensive, time consuming, does not provide real-time visibility into inventory levels and can be prone to error. Consequently, the lack of accurate and real-time visibility into inventory levels across multiple supply rooms in multiple hospital facilities creates additional inefficiency in the system causing over-ordering, hoarding, and wasted supplies. Other sources of waste and cost were also identified as candidates for improvement. Existing systems and processes did not provide adequate security for high-cost inventory within the hospital, which was another driver of cost. A lack of visibility into expiration dates for supplies resulted in supplies being wasted due to past expiry dates. Storage of supplies was also a key consideration given the location of the cancer center’s facilities in a dense urban setting, where space is always at a premium. In order to address the challenges outlined above, the hospital sought a solution that would provide real-time inventory information with high levels of accuracy, reduce the level of manual effort required and enable data driven decision making to ensure that the right supplies were readily available to clinicians in the right location at the right time.
Case Study
Gas Pipeline Monitoring System for Hospitals
This system integrator focuses on providing centralized gas pipeline monitoring systems for hospitals. The service they provide makes it possible for hospitals to reduce both maintenance and labor costs. Since hospitals may not have an existing network suitable for this type of system, GPRS communication provides an easy and ready-to-use solution for remote, distributed monitoring systems System Requirements - GPRS communication - Seamless connection with SCADA software - Simple, front-end control capability - Expandable I/O channels - Combine AI, DI, and DO channels
Case Study
Fusion Middleware Integration on Cloud for Pharma Major
Customer wanted a real-time, seamless, cloud based integration between the existing on premise and cloud based application using SOA technology on Oracle Fusion Middleware Platform, a Contingent Worker Solution to collect, track, manage and report information for on-boarding, maintenance and off-boarding of contingent workers using a streamlined and Integrated business process, and streamlining of integration to the back-end systems and multiple SaaS applications.
Case Study
Driving Digital Transformations for Vitro Diagnostic Medical Devices
Diagnostic devices play a vital role in helping to improve healthcare delivery. In fact, an estimated 60 percent of the world’s medical decisions are made with support from in vitrodiagnostics (IVD) solutions, such as those provided by Roche Diagnostics, an industry leader. As the demand for medical diagnostic services grows rapidly in hospitals and clinics across China, so does the market for IVD solutions. In addition, the typically high cost of these diagnostic devices means that comprehensive post-sales services are needed. Wanteed to improve three portions of thr IVD:1. Remotely monitor and manage IVD devices as fixed assets.2. Optimizing device availability with predictive maintenance.3. Recommending the best IVD solution for a customer’s needs.