1 of 10

Accounts Separation and Approval Project

​

By:

Dat Nguyen

2 of 10

Overview

Shaw Industries

  • Shaw Industries Group, Inc. supplies carpet, resilient, hardwood, laminate, tile and stone flooring products and synthetic turf to residential and commercial markets worldwide

Role / Responsibilities

  • IT Security department under Charles Corcoran
  • Responsible for understanding and planning for risks to the security of information or data, safeguarding information system assets by proactively identifying, mitigating and solving potential security concerns, as well as triaging actual security concerns

​

3 of 10

Justification

Problem

  • Tier 1 Shaw servers were discovered to have a mix of Tier 1 and Tier 2 accounts

Risks

  • Regular associates has access to administrative privileges and may accidentally or intentionally access or modify sensitive data or settings that they should not have access to
  • Security breaches, data loss, and other issues that can compromise the integrity of the server and its data

Challenges

  • Lack of technical knowledge
  • Adjusting to a professional setting

​

​

​

​

4 of 10

Objectives

5 of 10

Objective 1 & Outcome

Created a PowerShell script to look for accounts within the targeted groups

Identified which accounts are admin accounts and regular accounts within the groups

6 of 10

Objective 2 & Outcome

Created a PowerShell script to filter out administrative accounts

Looked into the remaining accounts and identified which accounts should be targeted first

7 of 10

Objective 3 & Outcome

Sent emails to managers to clarify if the contractors/associates still need administrative access to the server

Created change requests to remove accounts that does not need access to privileged servers

Created a request to add administrative status to the accounts that need access to the privileged servers

8 of 10

Accomplishments

Enhanced company security

Reduced security risks

9 of 10

Lessons Learned

CLEARLY COMMUNICATE WITH MANAGEMENT

BE PREPARED TO PRESENT YOUR DATA

10 of 10

Main Takeaway

/

NEW TECHNICAL SKILLS WILL BE DEVELOPED ON THE JOB

BE PROACTIVE