Credissimo Complies with GDPR and Spends 85% Less Time on Audits

Boytcho opted for Netwrix Auditor because it is cost-effective and user-friendly. It has invaluable features for compliance, such as predefined reports and user activity monitoring.

• Visibility across file servers. Boytcho monitors changes and activities across all servers where sensitive data resides and promptly responds to file deletions, bulk copy operations and other anomalous events. Reports on user permissions enable him to right-size access rights to avoid data overexposure.
• Continuous compliance. Thanks to out-of-the-box compliance reports mapped to ISO/IEC 27001 controls, Boytcho prepares for audits with less effort. It now takes him just one day — instead of a week — to generate reports on security controls. When the GDPR came into effect, Credissimo hired a data protection officer (DPO), and Boytcho uses Netwrix Auditor to provide him with daily activity reports on changes to security group memberships and logons outside business hours. Also, Boytcho uses the Interactive Search to retrieve specific information whenever the DPO has additional questions.
• Control over admin activity. Daily reports on changes across Active Directory and Group Policy and alerts on most critical ones (e.g. changes to the Domain Admins group) enable Boytcho to increase the accountability of system administrators. He spots potential issues and takes prompt action to avoid outages and service interruptions.