SecurICE from SecurEnvoy is a revolutionary approach to the
age-old problem of providing secure access to corporate
systems in the event of an emergency.
SecurPassword from SecurEnvoy enables Microsoft Windows
domain users to reset their own password using mobile phones
to create two-factor authentication.
SecurMail enables individuals to send and receive email
across the internet using standards based https and strong
two-factor authentication of the recipient.
In order to ensure that the council’s civic responsibility can be met, many of Cambridge City Council’s employees needs to be in constant contact with the organisations, businesses and individuals of Cambridge, and with colleagues at the Council itself.
This involves taking calls from the public, visiting homes and businesses, coordinating with council members and relaying information back to the council’s central system to ensure that data is kept current and comprehensive.
When dealing with a wealth of information regarding such a wide variety of businesses and organisations, however, there is an inherent security risk – any information mishandled, lost or stolen is a potentially damaging security breach, both for the council and those that it works with.
“The Council encourages employees to maintain a good work/life balance, and being able to log on remotely is an important part of this,” said James Nightingale, Head of ICT Client Services at Cambridge City Council. “However, the more remote workers you have, the more the IT security risk goes up – how can the IT team tell users are who they claim to be when logging on remotely?”
Additionally, the Council had to prove it was compliant with the Government’s GSCX Code of Connection (known as CoCo). CoCo is part of Government Connect – the pan-government programme providing an accredited and secure network between central government and every local authority (LA) in England and Wales. All LAs must be compliant with CoCo’s code of practice to prove they have the necessary network security measures in place.
“To comply with CoCo, it was absolutely necessary to have a system in place to make remote access for our employees more secure,” Nightingale continued. “Dealing with information from so many different businesses, people and organisations while on the move is the nature of the job, so there needed to be a way to do that as securely as possible.”
Cambridge City Council began to consider ways in which it could authenticate remote users to facilitate mobile and home working.
A number of other councils around the UK utilise a token-based authentication system, whereby employees pick up a token containing an authentication code that allows them to connect to the system remotely. The main problem facing this option, however, is the time and effort needed to distribute each token to employees.
“The authentication token as a security measure is incredibly time consuming,” said Nightingale. “Staff would have to fill out access request forms, then make a physical appointment to come into the council offices and pick up the token, wasting a lot of time for admin workers and users.”
A token-based system also generates a myriad of other issues – the hardware is often lost, they are easily broken, and creating the large quantities of tokens incurs huge expenses. Frequently, tokens were stored with laptops so if the computer was stolen, the authenticator would go with it.
It therefore seemed logical for Cambridge City Council to turn to SecurAccess, which negates the need for tokens by using employees’ mobile phones to deliver authentication codes.
“The main goal was to achieve CoCo compliance, while keeping any new systems as user-friendly as possible,” said Nightingale. “But in this tight economic period we wanted to do this without wasting council money on unnecessary expenditure.”
“The roll-out of the software at the Council was painless – it took just a few days, and employees got used to the system very quickly,” said Stev More Information
As part of this drive SecurEnvoy participates in several media awards and reviews. The Network Computing 2010 Awards is one such event, where we need your help to ensure that we get the recognition we believe we deserve.
Our success in these awards is in your hands (our partners and customers) and we call upon your support to take two minutes to complete a very simple online form to nominate SecurEnvoy.
What is the next step?
Visit www.networkcomputingawards.co.uk and nominate SecurEnvoy in the following categories:-
• Security Product of the year – SecurAccess
• Environmental Product of the year – SecurAccess
• Software Product of the year – SecurMail
• New Product of the year – SecurICE
• Product of the year – SecurAccess
• Company of the year – SecurEnvoy
Thank you for your continued support and we look forward to working with you all for a successful 2010.
December 2009 Lincoln City Council has nine remote offices. Authenticated access must be easy to use, reliable and above all secure.The Lincoln City Council has nine remote offices, with over 600 members of staff. The Council is responsible for local planning, building control, roads and council housing. With over 80,000 residents in Lincoln, the Council has to handle a vast amount of confidential information. Data security is always a concern – authenticated access must be easy to use, reliable and above all secure.
Two-factor authentication is not a new concept but it has been troubled by ongoing difficulties with system integration and users lacking confidence when using the product. City of Lincoln Council already had an existing two-factor authentication system, which required the use of hardware tokens. The Council was looking to reduce the cost of its managed token provider as the contract with them was ending. SecurEnvoy was just in time to help the Council migrate its authentication system.
“We required a cost effective, secure, reliable and flexible solution providing two-factor authentication for remote access,” said Dave Wormall, Principal IT officer at the Council. “We evaluated three products, including our existing supplier, during the selection process. SecurEnvoy’s cost effectiveness, ‘In Case of Emergency’ (ICE) services and reliability came through as the primary choice.”
The two-factor authentication technology from SecurEnvoy, SecurAccess transforms any mobile phone into a makeshift authentication device. This eco-friendly solution is cost-effective because there is no need to purchase additional hardware.
“We had less than a month before our tokens needed replacing and were concerned that we wouldn’t have time to migrate to a new solution,” said Wormall.
SecurEnvoy’s Deployment Wizard configured multiple accounts for the authentication switch to take place. With a single click, multiple users were migrated quickly and effectively to the new SecurAccess system. The process took less than a minute.
Even though the Council operates on two different remote access solutions, one Windows-based and one Linux-based, SecurEnvoy’s solution configured both channels easily and quickly.
For SecurEnvoy, configuring the Council’s existing authentication system to SecurAccess was simple. However, convincing the Council staff that extra hardware was no longer necessary in ensuring data security was a little bit more difficult.
Some Council members and councillors feared change and were comfortable using their traditional tokens, they were initially apprehensive about a text message based solution. After using tokenless two-factor authentication they soon realised that it was just as reliable and secure with the added bonus that they no longer needed to carry yet another device.
“The City of Lincoln Council’s home and flexible working policy will ensure that SecurEnvoy’s remote access services will always be in demand,” said Wormall.
SecurEnvoy has been able to help the Council reach its goals to find a top-notch security solution at a fraction of the price of its competitors. More Information