Case Study: EdFinancial Services achieves NIST 800-53 compliance and cuts password-change time with Delinea Secret Server

EdFinancial Services achieves NIST 800-53 compliance for Service Accounts

EdFinancial Services, a Tennessee-based student loan servicer, needed to meet FISMA requirements by complying with NIST SP 800-53. Their biggest challenges were expiring service account passwords every six months, gaining better control and visibility over accounts on the network, and documenting compliance for audits—tasks that were being handled manually and consuming significant after-hours effort.

In May 2013 they deployed Thycotic’s Secret Server to centralize roughly 200 service accounts, assign roles and permissions, and create an audit trail. While full automatic password rotation is still being phased in, the tool has already cut password-change time from 30 hours to 5 hours and is expected to require about one hour of maintenance per week once fully implemented, giving stronger access control and easier compliance reporting.

EdFinancial Services

Joanne Wetzel

Systems Architect