Serpro Integrates Human Resources System with Identity Management Solution and Ensures Compliance with Federal Security Standards
 
 

Serpro Integrates Human Resources System with Identity Management Solution and Ensures Compliance with Federal Security Standards

As the company that processes nearly 60% of Brazil’s public administration data, Serpro is responsible for customer data security as well as for recommending best practices. To ensure data processing integrity and to comply with federal data security standards, the company wanted to standardize and automate data transactions. After evaluating available solutions, the company adopted Oracle Identity Manager, which, when integrated with its human resources system, improved identity management and provided more control over data access by users, such as customers (government entities) and citizens, and other groups, including public employees, taxpayers, the tax collection agency, and ministries. The solution helped Serpro improve system security for its 8,000 registered internal users. Now operations, such as employment terminations, vacations, and leaves of absence automatically restrict access based on specific user privileges in addition to eliminating manual work, thus enabling the company’s data security to be monitored and strengthened, which is vital to providing more reliable public services.

 
 

 
 

Challenges

A word from Serpro – Serviço Federal de Processamento de Dados

  • "With Oracle Identity Manager, we mapped our 8,000 internal users, enabling us to eliminate nonconformities and achieve compliance with federal security standards.” – Ulysses Machado, General Information Security Coordinator, Serpro – Serviço Federal de Processamento de Dados

  • Standardize and organize access controls and identity management for employees and government entities that use the system to improve the provision of services across 60% of Brazil’s public administration, which needs to guarantee the availability, integrity, confidentiality and authenticity of the services and products it delivers to its customers
  • Unify and implement rigorous access controls for data related to government entities, employees, taxpayers, and ministries for the company’s 8,000 users to avoid unauthorized access
  • Comply with the information security management guidelines set by the Brazilian president’s institutional security cabinet

Solutions

Oracle Product and Services

  • Linked user accounts with employee records automatically with Oracle Identity Manager, enabling operations such as automatic user restriction in case of employment termination, vacation initiation, or leave of absence
  • Consolidated identity management environments into a single repository, eliminating duplicate and stray accounts and enabling data access control in accordance with federal authentication policies
  • Controlled and administered identities, providing access to information and creating an environment that conforms to federal government security standards, such as Instruction GSI/PR no. 1 of June 13, 2008
  • Eliminated manual record entry by the human resources department, enabling professionals who had previously done registration tasks to concentrate on other areas, such as planning and project analysis
  • Integrated Oracle Identity Manager with Serpro’s internal password control system (Senha-Rede) to better control employee access to a system that has 400,000 external users (customers), simplifying future integration with customers that use the same technology
  • Enhanced data security and user integrity, as Oracle Identity Manager supports the identification of unauthorized users and prevents external equipment from connecting to the company’s network in real time

Why Oracle

“We examined alternatives on the market, but chose Oracle Identity Manager because of the tool’s ability to adapt to our specific needs, as well as its excellent Gartner Group ranking. Furthermore, we have always counted on the support of Oracle’s professionals to work in partnership with us to achieve our goals,” said Ulysses Machado, general information security coordinator, Serpro – Serviço Federal de Processamento de Dados.

Implementation Process

Serpro uses and controls legacy systems and distributes market applications—developed in-house or by customers—which means it is responsible for an extremely diverse platform and solution environment. Despite the complexity, Serpro was able to integrate Oracle Identity Manager with Serpro’s human resources system.
 
“We completed the integration between two very different system configurations—our old Cobol-based human resources solution and Oracle’s Java-based solution. In addition, with an enormous information volume and more than 480,000 internal and external users, the system could not be shut down. We therefore sought to create an architectural model that preserved and integrated both kinds of applications. Oracle Identity Manager matched this approach perfectly, and we were able to integrate the solutions to coexist seamlessly without destroying or recreating data. Furthermore, it takes only a few seconds to synchronize the Oracle solution with our data, even though the application serves a great number of systems,” said Ulysses Machado, general information security coordinator, Serpro – Serviço Federal de Processamento de Dados.

Partner

Partner –IT7 Sistemas provided us with great support during the integration process, working as a team with Serpro and Oracle, as this project required a lot of architecture and involved many codes. However, everyone’s contribution enabled us to achieve our goal,” said Ulysses Machado, general information security coordinator, Serpro – Serviço Federal de Processamento de Dados.