Italian multi-utility group a2a specializes in the production, distribution and sale of electric energy and gas, and the distribution and sale of district heating. It provides its services to the entire region of Lombardia, and is currently one of Italy’s leading multiutility corporations, with future plans for international business growth. Learn more today by visiting:http://bit.ly/IDMadvanced

1. SUCCESS STORY
A2A Boosts Security Compliance
With Identity Manager
Executive Summary
Industry Description
Headquartered in in Milan and
Brescia and serving the whole region
of Lombardia, A2A specializes in
the production, distribution and
sale of electric energy, gas and
district heating. It is one of Italy’s
leading multi-utility groups.
Business Situation
A2A wanted a trusted and
comprehensive solution that could
help provide full and continuous
control over its internal users’ Italian multi-utility group A2A specializes The NetIQ Solution
access to any application. in the production, distribution and
sale of electric energy and gas, and Following a competitive tender, A2A
The NetIQ Difference
the distribution and sale of district decided to implement Identity Manager.
Identity Manager has provided A2A with
the reliability and flexibility needed to heating. It provides its services to the
manage the access rights of all 6,000 of entire region of Lombardia, and is “Identity Manager had all the features
its users. The company can now comply currently one of Italy’s leading multi- we were looking for: flexibility, reliability,
more easily with national regulations utility corporations, with future plans ease of configuration and use, and great
around the security and protection of for international business growth. value for [the] money,” Cuscito said.
confidential data.
A2A must comply with a series of Working with Deloitte, A2A implemented
NetIQ Products and Services
national regulations and policies that Identity Manager in two phases. The
Identity Manager
establish the correct management of first was finalized in nine months. A2A
identities and mitigation of business is currently undergoing phase two of
risk. Gianfranco Cuscito, ICT manager the implementation and is confident
of A2A, said, “We perceived pressure that it will be able to complete this
on us because we lacked an automated phase within its 12-month time frame.
and reliable tool to manage our users
and detect any incorrect or suspect Identity Manager has enabled A2A
action performed on our systems.” to create a standard set of rights
and authorizations for regular users,
As Cuscito explained, “Managing our and to use this set as a basis for
6,000 users’ authorisation profiles across subsequent changes, additions or
multiple non-integrated applications removals of privileges. “The system
and in some cases manually would not immediately recognizes who accesses
have been feasible, in that it would an application, what their rights are
have taken at least five days per person. and which applications they can
We needed an automated solution use,” said Cuscito. “In this way, we can
for managing users’ authorisation make sure that operational risks are
profiles for critical applications.” removed or controlled and that the

2. area manager agrees and updates the Identity Manager has also
user’s set of privileges accordingly, revolutionized adding, removing or
“The system immediately the system will automatically take editing a user’s set of rights. “In the
in those changes and enable the past, these processes were performed
recognizes who is person to continue their work.” manually and on paper sheets, wasting
authorized to access considerable amounts of time and
Identity Manager covers all the resources,” Cuscito said. “With Identity
an application, what company’s core applications, which Manager all of this occurs automatically
their rights are and are largely based on SAP software, and and in real time, allowing us to
also will allow A2A to automatically understand right from the beginning
which applications manage password synchronization. what is happening on our network,
they can use.” and if assigning a certain role to a
Using Identity Manager, A2A user is going to put us at risk or not.”
Gianfranco Cuscito, helps ensure Compliance with
As A2A pursues its plans for
ICT Manager, A2A National Security Regulations international growth, IT is already
With Identity Manager, A2A can planning to extend the successful
manage all access to its numerous solution to the whole group.
national regulations in terms of applications, and also determine
segregation of duty are respected.” whether a certain user is allowed to Learn more today by contacting
perform a specific task by accessing a your NetIQ® partner or a local NetIQ
With Identity Manager, A2A can given application. “For instance,” said sales representative, or by visiting
provision new users quickly and Cuscito, “if the same user performs www.netiq.com for contact
easily, and apply all updates to actions belonging to separate information in your area.
identity information in real time. areas—such as creating a purchase
order, issuing an invoice and, finally,
“When users need to access a entering the payment received—the
particular area that they are normally system will warn us so that we can
not allowed to use, they can ask take action accordingly and in a timely
the area manager for a specific fashion, to avoid any possible risk.”
authorization,” said Cuscito. “If the
Worldwide Headquarters For a complete list of our offices
1233 West Loop South, Suite 810 in North America, Europe, the
Houston, Texas 77027 USA Middle East, Africa, Asia-Pacific
Worldwide: +1 713.548.1700 and Latin America, please visit
U.S. / Canada Toll Free: 888.323.6768 www.netiq.com/contacts.
info@netiq.com
www.netiq.com
http://community.netiq.com Follow us:
NetIQ and the NetIQ logo are registered trademarks of NetIQ Corporation in the USA.
All other company and product names may be trademarks of their respective companies.
© 2012 NetIQ Corporation and its affiliates. All Rights Reserved. CSS90038A2A PO 08/12-F