Enforce Governance and meet Compliance for a zero-trust, least-privilege security posture
300+ Employees
At Shodair Childrenās Hospital, children get care the minute they arrive, with little to no wait for immediate support of both families and children, so it is up to all staff members to be well prepared and knowledgeable about the operations of their various departments as soon as they arrive at work.
Like many growing healthcare organizations, Shodair encountered challenges with their operations in the background. Many new employees began work without being granted access to the systems, and there have been delays in removing access to the systems for terminated employees, which added unnecessary risk to the organization. These challenges were not due to a lack of effort on behalf of HR or the IT departments, but rather because many of the processes within HR and IT were maintained in silos.
In the current healthcare environment where accuracy, timeliness and protecting data are of utmost importance, Shodair recognized the need for a more dependable and efficient method of accessing and updating all processes within both HR and IT.
Shodair Children’s Hospital is Montana’s only Children’s Miracle Network Hospital, providing specialized psychiatric care, genetic medical services and educational opportunities to children and adolescents throughout Montana.
The hospital employs a diverse employee base that consists of clinicians, caregivers, educators and those in administrative roles, all of whom work within hospital inpatient and outpatient facilities, as well as community-based programs. Many of those occupations require immediate access to both clinical and internal applications as well as sensitive data to carry out their job functions in the most efficient manner.
Due to serving at-risk groups and holding extremely sensitive medical and genetic data, Shodair’s access and security must be reliable and secure. A critical aspect of Shodair’s commitment to trust, safety, and compliance is ensuring that employees are given the correct access at the right time. Once they are no longer required to have access, it must also be taken away without delay.
In the past, as the organization has grown the gap between the HR process and IT processes clearly became larger and larger.
New hires frequently experienced delays in gaining their email and system accesses because their accounts were manually set up through cooperation from both HR and IT, thereby slowing down their onboarding and hindering early productivity.
Any access changes made do not always get communicated to all systems immediately. With sensitive medical information accessible through multiple systems in the healthcare arena, even a one-minute lapse can create the potential for someone to have unauthorized access to this sensitive data.
When an employee terminates employment, their account is not always disabled immediately. This creates potential security breaches that shouldn’t have occurred if account disconnections were automatic.
When an employee’s role or responsibility changes, an IT technician must be contacted to update the employee’s access permissions manually. This creates an unnecessary burden and makes it more difficult to enforce the least privilege standard.
Shodair utilized RoboMQ’s Hire2Retire to improve the automation of how employees’ identity & access are managed across both Paylocity and Hybrid Active Directory.
When employee records were created or modified on Paylocity, it automatically triggered the provisioning of accounts & the updating of all records within Active Directory.
Access to accounts was automatically provisioned with a role based upon employee record in HRIS so that all access was being provided accurately the first day the employee reported to work.
Once an employee’s employment terminated on Paylocity, access to their account was automatically removed (access revoked).
Position changes for employees were automatically reflected in their account, ensuring that permissions were aligned, accurately, without IT having to do so manually.
With Hire2Retire, HR and IT teams can now work off of one version of their records (a single source of truth), eliminating duplicate work and decreasing the probability of error.
The result of implementing automation has led to immediate, measurable impacts across operations that include:
The amount of time IT teams has reclaimed from having to manually manage accounts is significant and leadership has increased confidence in the organizationās access governance process.
Shodair Children’s Hospital was able to achieve more than just operational efficiencies from the implementation of Hire2Retire; it also gained the peace of mind to know that the management of employee access is done accurately, securely, and in a consistent manner throughout its entire organization.
By automating these functions (onboarding, role changes and offboarding), Shodair has added another layer of security, created a better employee experience and allowed their staff to concentrate on providing the greatest benefit to the Montana population by providing care and support for children and families in need.
Ready to join the wave of companies automating their employee lifecycle management processes with Hire2Retire? Schedule a demo call with us today to see what Hire2Retire can do for your business.Ā
300+ Employees
