Office of State Treasurer in the U.S-Security & Access Management
Office of State Treasurer in the U.S-Security & Access Management

OVERVIEW

  • The Office of the State Treasurer is responsible for the disbursement of state funds, and the management of the state’s cash resources. OST generates monthly cash flow for the Governor's Office of Planning and Budget.
  • They approached People Tech to manage security and access. The principal objective was to:
  • Assess and analyze the security posture of customer’s current Azure environment.
  • Configure features that enable direct shipment, management, and security of Microsoft Surface devices to their remote employees.

SOLUTION PROVIDED BY PEOPLE TECH GROUP

  • The solution provided by People Tech Group involved:
  • Assessing customer’s existing security policies, configurations, and settings on Azure such as Multifactor Authentication, Microsoft Intune Device Compliance, etc.
  • Designing a solution by juxtaposing customer’s existing policies with Microsoft recommended practices and settings.
  • Implementing the designed solution by closely working with the customer.
  • Testing the implemented solution by creating test groups to verify the new policies for Microsoft Intune, Multifactor Authentication, while enabling FIDO2 security key login access with Windows Hello for Business.
  • Configuring Autopilot for newly procured Microsoft Surface devices to ensure that users need little to zero assistance.

BENEFITS

  • The solution enabled the customer to procure and directly ship Microsoft Surface devices to end users without having their IT intervene to configure security and device management policies.
  • Multifactor Authentication helped enhance security for remote users’ devices.
  • Enrolled MS Surface devices were configured to automatically register with Azure Active Directory to enable Hybrid Management.
  • The solution allowed the customer carry out rapid provisioning and de-provisioning of users.
  • Direct management of MS Surface devices made possible from the cloud without the need for a VPN.