Beach Energy is Australia’s premier oil and gas exploration and production company. When reviewing their security ecosystem, Beach Energy realized how overly manual the onboarding, offboarding and user management process was, coupled with a poor user experience. With SailPoint, Beach Energy has been able to grant IT access rapidly, improve compliance, and manage security risk with greater visibility into user access.
Service desk calls slashed by 12%
Consistent, easy access to applications
Access requests are fulfilled in hours, not days
Founded in 1961 and in its 60th year of operation, Beach Energy is a publicly-traded oil and gas exploration and production company based in Adelaide, South Australia. Currently, Beach Energy produces oil and gas within five basins across Australia and New Zealand and is a crucial supplier of gas into the Australian East Coast gas market. Dedicated to sustainable energy delivery for its communities, Beach Energy operates while maintaining the highest health, safety, and environmental standards.
Beach Energy holds the same high standards for the quality of its business-technology systems. Delivering a high level of service to its staff and contractor users is a priority, although it has been challenging during the shift to the cloud in recent years.
It’s not just technological change that’s proven to be a challenge, but also dramatic changes within the Beach Energy organization in the past few years — such as the acquisition of Integrated Lattice Energy assets and systems and the growth from 200 to more than 1,000 users.
To meet these challenges, and to build the technical efficiencies and agility necessary for the future, the technology and security teams within Beach Energy began evaluating what their people would need to be more productive and to access the resources they need seamlessly. After the self-assessment, the technology and security teams at Beach Energy got to work, especially in identity security, access, and governance.
The Focus On Identity Security
Aaron Finnis, information security manager at Beach Energy, explains that the teams began retiring their legacy and insecure systems and putting new technologies and processes that would provide a consistent and modern technical control to prevent better, detect, and recover from unwanted cyber events. “We are a low-cost operator, which presents challenges for a foundational cyber security capability,” Finnis says.
“The more that we can minimize and control that user access and automate it, the better we can authenticate our users with more certainty and better manage that risk.”
Information Security Manager at Beach Energy
14% of Active Directory users remained active in the system after termination, and roughly 60% of IT service tickets were related to password resets, unlocks, and application requests. Further, employees conducted 8 – 10 logins per day, decreasing their effectiveness.
Choosing The Ideal Identity Security Platform
With that in mind, Finnis and the team sought an identity security platform that would help them to accelerate their identity management and access efforts. “We wanted to quickly enable managers to manage access themselves and instead improve and automate these processes,” he says. “This would free the team to focus on other strategic areas,” Finnis adds.
The team searched for an identity and access management platform that would handle both the volume and the complexity of their day-to-day operations. After finishing their evaluations, the Beach Energy team identified the identity governance platform to help them build the identity security program they sought: SailPoint. With SailPoint, Beach Energy has everything it needs to manage its identity access efforts effectively. SailPoint provides identity and access governance throughout Beach Energy’s hybrid IT environments. With SailPoint, Beach Energy can now automate its time-consuming manual identity processes, increase account access accuracy, and readily prove its compliance to regulators.
SailPoint helps automate identity lifecycle management, compliance management, and provides AI-driven identity. SailPoint provides employees, contractors, partners, and software bots with swift and secure access to resources and adjusts automatically as people join, change job roles, or leave the organization. SailPoint ensures sensitive and regulated information is continually managed to regulatory requirements and automates access certifications when it comes to compliance. Hence, teams are always on-the-ready for an audit.
Smooth Sailing Implementation
One of the primary benefits Beach Energy reaped is SailPoint’s ability to enable service providers to gain immediate and secure access, improve regulatory compliance and reduce cybersecurity risks surrounding that access. “We’re managing that security risk better because we now have continuous visibility of everything our users can access,” says Finnis. And the team can also quickly certify that access.
Usability And Efficiency
Moving forward, Beach Energy’s vision for identity security is to continue building on its accomplishments with SailPoint. “We will focus on continuing to be kind to the user. We want to make it as easy and as seamless as possible to access our systems and services,” explains Finnis. In the end, Finnis explains, that means when someone commences in a particular role, they are onboarded quickly, and SailPoint enables them to meet their regulatory compliance and security requirements.
“Our vision is to keep doing what we’re doing, keep deriving value from the solutions that we’ve invested in, such as SailPoint,” he says. “The identity security program has accelerated because of our investment in SailPoint. What SailPoint has enabled us to do very rapidly is to put the power into our manager’s hands to manage IT access accurately and rapidly themselves,” Finnis says.
We’re proud to have Beach Energy in the Admirals Club
By becoming a SailPoint Admiral, you will have the opportunity to:
- Network with peers, industry experts, and SailPoint’s leaders
- Share your story and elevate your brand
- Earn rewards