Case Study: The Football Pools proves ISO/IEC 27001 compliance in one hour per week with Netwrix Auditor

The Football Pools Spends Only One Hour per Week to Prove ISO/IEC 27001 Compliance

The Football Pools, a long-established UK entertainment company, needed to prove to auditors that all access and changes to its SQL databases were monitored in line with UK Gambling Commission requirements based on ISO/IEC 27001. With DBAs working remotely from the USA, India, Sweden and Poland, the Liverpool IT team had limited visibility and faced the risk of fines or licence revocation unless it could track privileged user activity and changes across SQL servers.

By deploying Netwrix Auditor for SQL Server, IT gained out-of-the-box compliance reports mapped to ISO/IEC 27001, an Interactive Search to quickly review changes, and video recording of every remote DBA session for full visibility. The solution reduced audit effort to about one hour per week, provided clear evidence of continuous compliance, lowered the risk of data loss and downtime, and increased DBA accountability and overall peace of mind.

The Football Pools

Paul Edwards

IT Infrastructure Manager