Challenge:

SaverLife began using Okta products in Spring 2020 to protect its technology infrastructure, but needed additional support to roll out Okta to protect more than 20 web applications.

Solutions:

The FCF-Okta project team helped to integrate SaverLife’s various technology systems with a goal to secure a SOC 2 Type II certification.

SOC 2 (System and Organization Controls 2), is an auditing procedure that ensures companies securely manage data to protect the interests and privacy of its clients. As SaverLife grows, larger, more security- conscious underwriters and partners, will require SOC 2 compliance.

The FCF-Okta project team provided best practices customized for SaverLife including security recommendations, password policies, sign-on policies, and more. Other key deliverables included a custom- ized training video featuring Okta’s adaptive multi-factor authentication (MFA) features; pro bono professional services to assist with Life Cycle Management needs, policy settings review including modified password policies and session lifetime, single sign-on (SSO) for five applications covering a variety of use cases and scenarios, sandbox environment to ensure IT systems, such as active directory integrations, are properly integrated and tested, and compliance review to ensure updates would not negatively impact ongoing compliance operations.

Impact on Centro Community Partners mission:

• Accelerate their SOC 2 certification, implement and audit SOC2 Controls.
• Allow the Chief Information Security Officer and ChiefTechnologist to work on high-value projects rather than administration tasks.
• Reduce IT resources for employee onboarding/offboarding by 50%.