The municipality also needed to comply with the Italian Data Protection Authority’s recent legislation, which requires increased security measures for personal data to which system administrators have access. In addition, it wanted to improve response times to suspected internal threats. “We lacked the capability to respond in real time to security alerts,” said Corbini. Read more here: https://www.netiq.com/success/stories/the-municipality-of-siena.html

1. S U C C E S S S T O R Y
Comune di Siena Solution Provides
Security and Efficiency
Executive Summary
INDUSTRY DESCRIPTION
The Municipality of Siena retains a large
amount of personal data on community
residents, so it must maximize its IT
environment’s security to ensure the best-
possible data protection.
BUSINESS SITUATION
To enhance its security and comply with
recent legislation, the Municipality needed
to improve the efficiency and security
of user management procedures and
improve its response times to suspected
perimeter and internal threats.
THE NETIQ DIFFERENCE
Integrated identity, access management
and security solutions enabled the
Municipality to:
• Comply with new data security
legislation
• Set up continuous user activity
monitoring and reporting for real-time
response to threats and internal policy
violations
• Reduce by 60 percent the time it
needed to create user accounts
PRODUCTS AND SERVICES
Identity Manager
Access Manager™
Sentinel™
The Municipality of Siena located in the
Tuscany region of Italy provides public
authority services to five constituencies
in Siena and its surrounding province.
As a public authority, the municipality
retains a large amount of personal
data about community residents.“The
Municipality’s data contains valuable
demographic information, and it would
be a disaster if a security breach led
to its appropriation for commercial
use,”said IT manager Sergio Corbini.
The municipality also needed to
comply with the Italian Data Protection
Authority’s recent legislation, which
requires increased security measures
for personal data to which system
administrators have access. In addition,
it wanted to improve response times
to suspected internal threats.“We
lacked the capability to respond in real
time to security alerts,”said Corbini.
And finally, with more than 700
employees, the municipality wanted
to improve the efficiency and security
of user management procedures that
relied on line managers to authorize
and remove user access rights, a
process currently susceptible to
tampering and human error.
The Solution
To create a more secure and efficient IT
environment, the Municipality of Siena’s
sought out leading identity and security
management solutions. In the end, the
IT team worked with Net Studio, an IT
services partner, to implement Sentinel™,
Identity Manager 4 Advanced Edition
and Access Manager™.“Our relationship
with Net Studio was entirely positive and
we were very satisfied with their highly
professional approach,”said Corbini.
Sentinel provides comprehensive
security monitoring for all systems at the
Municipality, including external access,
the virtual private network, and the
internet. Sentinel significantly reduces
the risk of perimeter threats by searching
through thousands of events per second
in real time to aggregate and display
data, alerting IT to the threats that require
immediate attention.
The solution also reports, tracks and
displays log data in real time to help
detect policy violations inside the
Municipality. In addition, Sentinel
integrates with Identity Manager to
identify internal users attempting to
access unauthorized information. The
The Municipality
of Siena

2. Worldwide Headquarters
1233 West Loop South, Suite 810
Houston, Texas 77027 USA
Worldwide: +1 713.548.1700
U.S. / Canada Toll Free: 888.323.6768
info@netiq.com
www.netiq.com
http://community.netiq.com
For a complete list of our offices
in North America, Europe, the
Middle East, Africa, Asia-Pacific
and Latin America, please visit
www.netiq.com/contacts.
Follow us:
solution logs system administrators’
access to processing systems and
electronic archives and retains the logs
for a minimum of six months.
Because Identity Manager fully
automates user management
processes, human resources (HR) can
manage all 700 users without assistance
from IT, greatly increasing efficiency
while eliminating manual processes and
reducing human error. Identity Manager
creates new user accounts and email
addresses, using custom-built, role-
based provisioning workflows to grant
appropriate access depending on job
specification and department.
“One of the most exciting and
distinctive features of Identity Manager
4 is the solution’s cloud provisioning
capabilities. It’s something we will
certainly be exploring further in the
coming months,”said Corbini.
The municipality also benefits from
the user satisfaction and productivity
gains that Access Manager’s single
sign-on access to web-based
applications provides.“Our users were
tired of having to remember multiple
credentials, so the single sign-on system
has received very positive feedback,”
said Corbini.
Comune di Siena Optimizes
Its Security
The Municipality of Siena now has
an optimized IT infrastructure to
manage potential security risks.
Enrico Giacomelli, general manager
of Net Studio, said,“The Municipality
now has a more holistic view of its IT
environment and can respond to both
external threats and internal policy
violations in real time, thereby greatly
reducing the risk of a security breach.”
Crucially, because Sentinel enables
improved monitoring of system
administrators’access, the Municipality
can now demonstrate compliance
with legal data-security requirements.
And because Identity Manager
centralizes and automates the user
directory, the municipality spends
60-percent less time creating new
user accounts. Furthermore, HR can
now assume full responsibility for
user management processes, so IT
technicians are free to concentrate on
other, higher value tasks.
Identity Manager allows the
Municipality of Siena to uphold its
commitment to high data security
standards, while also providing its users
with timely access to the resources
they need to be effective in their jobs.
“With role­based provisioning, we can
be sure that users have access only to
information which corresponds to their
position,”said Corbini.
Learn more today by contacting
your NetIQ partner or a local NetIQ
sales representative, or by visiting
www.netiq.com for contact
information in your area.
“With role-based
provisioning, we can be
sure that users have access
only to information which
corresponds appropriately
to their positions.”
Sergio Corbini,
IT Manager, Comune di Siena
NetIQ, the NetIQ logo, Access Manager and Sentinel are trademarks or registered trademarks of NetIQ Corporation in the USA.
All other company and product names may be trademarks of their respective companies.
© 2013 NetIQ Corporation and its affiliates. All Rights Reserved. CSS90054CDS PO 02/13 F