COVER STORY
nd-user
ss
,
Luke Fairless, Technology
Director – Security and
Capability at Tesco, tells us
how the company is using
an identity and access
management solution from
OneLogin to secure its
distributed workforce.
Te
ch
no
lo
W
His team looks after everything from risk
compliance through to digital forensics,
the Security Operations Centre and
identity access management.
He’s also tasked with ensuring security
awareness and education across all
450,000 colleagues in offices, shops
and distribution centres.
Tesco was looking for a multi factor
authentication solution that would
provide visibility over account access
and ensure sensitive employee data did
not end up in the wrong hands. Here,
we find out more about the solution
Tesco chose and how it is already
providing benefits.
|
Issue 20
Dire
ctor – Securit y and Ca
pa b
i
SECURING A DISTRIBUTED
WORKFORCE WITH MFA
ith the exception of
its banking operation,
Luke Fairless oversees
cybersecurity strategies
across Tesco’s range of operations
including its Express businesses,
superstores and metros in the UK, Ireland,
Europe, Asia and other global offices.
www.intelligentciso.com
gy
o
sc
Te
,
y
lit
The challenge
Tesco is increasingly using cloud
services and while it is only office staff
and store managers who have access to
email, the wider workforce is accessing
pay slips from the cloud.
“Anybody working in stores or distribution
centres, as well as offices, need to be
able to log into that,” Fairless said. “And
we want to be able to protect it because
pay slips have got a lot of information on
them that you could use to try and do an
identity takeover of somebody.
“Increasingly we want to be able to make
these self-service so if you need to
change your bank account details then
you can just do it yourself online rather
than needing to come through your
personnel manager.
“If you're allowing people to do that
though, you can imagine an attacker
could change that bank account detail to
their own just before the monthly paydays.
51