AVIC International Protects Confidential Business Information by Eliminating Illegal User Accounts
 
 

AVIC International Protects Confidential Business Information by Eliminating Illegal User Accounts

AVIC International Holding Corporation has interests in a diverse range of industries, including aviation parts trading, spare parts support, flight training, and after-sales services; retail sales; commercial, residential, and industrial real estate; and hotel management and property services. AVIC International has subsidiaries or holding companies in all major Chinese cities, 60 offices in 30 countries, and it serves clients in over 180 countries.

 
 

 
 

Challenges

A word from AVIC International Holding Corporation

  • “Thanks to Oracle’s open and flexible identity management solutions, our application systems are fully integrated with the identity management platform, ensuring we have central control over the systems our users can access. This eliminates potential security issues as we can check for any unauthorized access and quickly deactivate their accounts.” – Zhu Dong, General Manager, Information Technology, AVIC International Holding Corporation

  • Standardize identity management and access authorization policies across the organization to simplify the task of managing more than 50,000 employee identities
  • Manage the lifecycle of employees by linking the identity management system with the human resources (HR) system
  • Centralize access authentication and single sign-on processes for enterprise applications, including HR, enterprise resource planning (ERP), and business intelligence (BI) systems, to ensure sensitive airplane manufacturing data is kept secure

Solutions

Oracle Product and Services

  • Engaged Oracle Partner Beijing Richfit Information Technology to build an identity management platform
  • Achieved centralized identity management by using Oracle Identity Management to provision user identities, which uses HR information, such as the user’s full name, job title, department, and phone number to authorize access to the Oracle HR, Oracle E-Business Suite ERP, Oracle’s Hyperion Planning, and Oracle Business Intelligence Enterprise Edition BI systems
  • Increased consistency of employee IT account authority, job status, and other identity information from 67% to 100%, by synchronizing user information between the HR system and the central directory server, which lists all employees in the group
  • Achieved greater vigilance over user access to aviation data by unifying password security policies and synchronizing password changes across the HR, ERP, and BI systems
  • Enabled the IT team to rapidly activate users’ access rights based on their job role and authority level
  • Protected aviation data from unauthorized access by gaining visibility into accounts that violate security issues, enabling the removal of illegal accounts that made up 10% of total accounts