Case Study: Adventist Health System achieves HIPAA-compliant Office 365 security and reins in shadow cloud usage with Skyhigh Networks

Adventist Health System enforces security and HIPAA compliance policies across Office 365 and reins in shadow cloud usage

Adventist Health System, a 45‑campus healthcare network with about 70,000 employees, faced strict HIPAA/HITECH obligations while migrating users from on‑premises Exchange to Office 365. The rollout introduced OneDrive and exposed widespread shadow IT—over 2,000 cloud services and 90+ file‑sharing providers—leaving the organization without sufficient visibility or security controls for protecting personal health information.

Adventist deployed Skyhigh for Shadow IT and Skyhigh for Office 365 to discover cloud usage, enforce acceptable‑use policies, and extend DLP, anomaly detection and contextual access controls to Office 365/OneDrive. The solution reduced cloud sprawl and compliance risk, trained users onto sanctioned services, enabled quarantine of sensitive files, improved executive reporting, and supported a more secure, cost‑effective move to the cloud.

Adventist Health System

Mark Dunkerley

Messaging Services Team Lead