Offering regional and national programs, CIO (and CSO) events bring together some of the most respected names and thought leaders in information technology and security. Presented by CIOs and other senior level executives, these invitation-only programs offer timely topics and strong networking. Learn More »
Public Council Teleconference: Application Rationalization — Hidden Costs and Smart Decisions
November 17 at 11:00 am US/Eastern (GMT-5)
Join Honorio Padrón, of The Hackett Group, who will share the drivers for companies to tackle application rationalization and the results of research that define the hidden cost of complexity. Additionally, we will discuss key decision milestones—to start or not, holding the course steady and fulfilling expectations.
Virtual Desktop Cost-Benefit Analysis — Michael Jacobs, Catlin Group
The analysis contained in this presentation measures the cost of everything from the machines and licenses to the infrastructure for virtual vs. traditional desktop environments.
Honor your best senior team members - Apply for the CIO Ones to Watch Award
Get well-earned public recognition for your top up-and-coming team members, your IT organization and your enterprise. Award winners will be announced, publicized and feted in May 2010, great timing to help attract new IT recruits to your company.
Learn more about the CIO Executive Council »February 27, 2009 — CIO —
Brookdale Senior Living CIO Scott Ranson was facing a challenge. After a three-year growth spurt fueled by mergers and acquisitions, the provider of senior living communities had gone from $400 million to $2 billion in revenue and added more than 7,000 employees to its user base. With that growth came a sharp increase in identity and access management (IAM) requests for IT to handle.
Ranson saw that the existing manual IAM system was like quicksand for his security staff; they were buried by the request volume. "Don't underestimate the complexity of setting up a user in a system," he says. Brookdale has dozens of systems as a result of the mergers, each with its own user set-up specifications.
"We had new hires waiting four days to get set up with the applications to do their job," Ranson says, which hurt effectiveness. Brookdale also has a high turnover rate, with some jobs turning over between 40 percent and 60 percent annually. With 70 access-change requests per day, five IT staff were dedicated to updating employee access. "The process took too long," he says.
Ranson made the decision to automate the process and turned to Courion's AccountCourier to handle setting up and managing user accounts across Brookdale's applications. Deploying the tool reduced the time to complete user-access changes to under 24 hours; it used to take three to five days. That productivity increase let Ranson trim three security staff positions (reducing overall IT costs by about $150,000), tighten regulatory compliance, enhance user support and improve security accuracy. Total ROI is hard to quantify since the tool was implemented last January, but automating the process freed the team to do more work in less time and focus on other projects, he says.
Managing employee access is a key issue. Forrester Senior Analyst Andras Cser points to four drivers for automating: reducing IT administration cycle time, increasing business agility, maintaining compliance and improving security. In fact, with layoffs gripping the economy, the need to control access has intensified. Cser says companies are more likely to seek tools to automate IAM in a recession.
Ranson chose AccountCourier for reasons of licensing cost, implementation and total cost of ownership. Four months after the rollout, Ranson saw "a tremendous increase in productivity." It once took IT an hour to complete employee access changes for five systems; now the changes for 15 systems can be made in five minutes. The tool helps manage 15 of Brookdale's 50 enterprise applications; Ranson hopes to cover them all soon. By automating more processes, Brookdale strengthened security, more efficiently met Sarbanes-Oxley (SOX) and HIPAA requirements, and efficiently allocated budget money at a time when cost savings are crucial.