Stone and Tile Retailer Updates Seperation of Duty Rulesets to Maintain SOX Compliance

As a publicly traded company, our client was obligated to maintain SOX (Sarbenes-Oxley) compliance. The organization had already implemented FastPath, (acquired by Delinea), but were struggling to achieve maximum value from the tool after making changes to their internal business processes. Due to these changes, there were multiple configuration updates that the client was struggling to implement, including updates to the SoD rulebook, pre-defined mitigation controls, security roles, and access certifications. 

In order to maintain compliance, the retailer understood they needed to make updates, but lacked the internal expertise to do so. FastPath does not offer this type of service, so they sought out a partner to assist them.

The client brought on MajorKey to update their FastPath implementation and bring them into compliance. The first step was sitting down with the client to understand exactly how their business processes had changed. Once we understood their specific situation, our team conducted an examination of their FastPath instance to identify gaps in their Seperation of Duties (SoD) controls.

We then created a roadmap for addressing this gaps and presented it to the client. Once approved, the MajorKey team implemented the updates, resulting in the client being able to successfully run SoD reports and pass audits.