“More efficient, consistent, and easier to manage.”
That’s how Jason Sharabani, Senior Manager of Internal Audit & Compliance at Member Driven Technologies (MDT), describes life after rolling out SCC’s Access Auditor. For anyone who has ever chased down managers to confirm who should have access to what, that’s a pretty appealing trio.
Security Compliance Corp (SCC), a provider of identity and access governance software, announced that it helped MDT streamline its identity governance program. MDT is a credit union service organization (CUSO) that supports more than 100 credit unions as they work through complicated financial technology ecosystems. Keeping tabs on who can get into critical systems is a big job at that scale.
Why MDT made the move
MDT wanted to automate its user access review process, the periodic check where a company confirms that each person’s system permissions still make sense. Done by hand, these reviews tend to be slow and tedious. They’re also easy to get wrong.
MDT turned to SCC’s Access Auditor platform, which now reviews user access to critical systems across the company. According to SCC, deployment was rapid, and the payoff showed up in a few places:
- Time savings: Automating the reviews took a significant chunk of manual work off the team’s plate.
- Better user experience: The review process is noticeably smoother for the people who take part in it.
- Ongoing monitoring: The platform watches for changes to user access rights, so changes don’t slip by between review cycles.
- A win for compliance: SCC calls the project a great success for MDT’s compliance team.
What MDT says about it
Sharabani said the platform has become a core part of how the company handles access auditing. “We use the platform extensively for user access auditing, and it has made our review process more efficient, consistent, and easier to manage,” he said, calling it an excellent addition to MDT’s identity and access management controls.
He also pointed to broader gains: “Overall, SCC Access Auditor has helped us improve the effectiveness of our user access rights auditing, privileged-access oversight, and compliance processes. The automation and visibility it provides has made it a valuable tool for strengthening our control environment, and we have been very pleased with the software.”
Privileged-access oversight deserves a quick explanation. It means keeping a close eye on accounts with extra power, such as administrators who can change settings or reach sensitive data. Those are the accounts auditors care about most.
What to watch next
Financial institutions face steady pressure to prove their access controls actually work, and CUSOs like MDT sit in the middle of that. Watch for whether more credit union service providers follow MDT toward automated access reviews, and whether continuous monitoring of access changes becomes the expected standard rather than a nice extra.