Technology Category
- Platform as a Service (PaaS) - Application Development Platforms
- Sensors - Temperature Sensors
Applicable Industries
- Healthcare & Hospitals
- National Security & Defense
Use Cases
- Cybersecurity
- Tamper Detection
Services
- Cybersecurity Services
About The Customer
Healthfirst is the largest not-for-profit health insurer in New York State, offering high-quality, affordable plans to fit every life stage. These include Medicaid, Medicare Advantage, long-term care, qualified health, and individual and small group plans. Healthfirst’s unique advantage is its member-first approach, partnering closely on shared goals with its broad network of providers. The organization is a pioneer of the value-based care model, where hospitals and physicians are paid based on patient outcomes. Healthfirst has an annual revenue of US$14 billion and employs 5,000 staff.
The Challenge
Healthfirst, the largest not-for-profit health insurer in New York State, faced a significant challenge in evolving its cybersecurity operations. With a rapidly growing member base of 1.8 million and an increasingly complex healthcare landscape, the organization needed a robust cybersecurity program. Healthfirst holds a comprehensive database of member-related information, including enrollment, billing, customer care, payments, processing claims, and health data. The protection of these highly sensitive healthcare records and identities of members and staff was paramount. The organization had adopted a cloud-first strategy, with approximately 70% of systems and applications now cloud-based and 10,000 endpoints, 70% of which are remote. This required a sophisticated and robust security solution. The organization aimed to transform the industry by digitally enabling its members, which included heavy investment in digital apps, virtual community-based offices, and mobile solutions.
The Solution
Healthfirst turned to CyberArk, a market leader in identity security, to secure its digital transformation. The insurer had already deployed a range of CyberArk products, including Privileged Access Manager and Vendor Privileged Access Manager. The organization decided to adopt additional technologies from CyberArk to further enhance its security. Healthfirst migrated several legacy secrets management apps to Conjur, a CyberArk product, due to its seamless integration with developer workflows and ability to handle a large volume of secrets. Healthfirst also implemented an education and adoption program alongside the CyberArk solution to help staff understand the risk and impact of modern cyberattacks. The company deployed CyberArk Identity to provide staff with secure access to business resources using single sign-on and multi-factor authentication (MFA). The objective was to make it as hard as possible to break into systems, software, and development chains from inside the system, as it is from outside on the internet.
Operational Impact
Quantitative Benefit
Case Study missing?
Start adding your own!
Register with your work email and create a new case study profile for your business.