The maintenance team of a water company comes and goes to and from their operational workstation and the maintenance one. As the latter are used occasionally, they are stored in the treatment stations - offline. Keeping those machines on-site enables strict physical isolation between the – sensitive – maintenance environment and the operational one.
Although it ensures a high-security level, this setup has a major downturn: the machines stored on-site can’t be updated remotely. Consequently, when the user needs them to complete their maintenance tasks on the stations, they frequently face crashes due to update delays.
The users move a lot, from one site to another, between their workplace and their home. They are constantly running against time. When they are on site to complete an urgent maintenance task, any dysfunction of the workstation is not only time consuming but also frustrating. They need the maintenance environment to always be functional whenever and wherever they need it.
Kerys technology provides the maintenance team with two separate environments in a single machine: the maintenance one, and the operational one. The solution meets the main cybersecurity regulations and is designed for secure frictionless user experience.
The strict isolation of environments makes them secure enough to implement sensitive setup into the machine without compromising the security. YS::Desktop by Kerys Software enables a detailed, granular permissions policy for each domain. This was one the key assets that influenced the CISO decision to deploy the solution.
The other asset was that Kerys’ YS::Desktop was fully deployable and operational for the CIO: its fleet management consol allows them to efficiently manage updates without having to go on each workstation.
On a regular day, maintenance employees use their operational environment for their daily tasks. They do not experience any interference with the maintenance environment, nor friction. Yet, whenever there’s an emergency call for on-site intervention, the maintenance set up is up to date, operatable and ready to be used if needed. Each environment is impermeable to the other.
In terms of security and flexibility, the information is stored locally, meaning that it remains accessible even offline. This point was relevant for those users who often experience unstable connection on-site.
YS::Desktop can also support non-standard NIC, for a high level of security.
Having both environments on one machine offers more comfort to the team while enabling the CIO to centralize updates management. This approach helps to reduce crash occurrences and improve security.
As a result, the deployment of YS::Desktop increased the company reactivity. In case of emergency, the collaborator can now quickly complete their maintenance tasks on a workstation that is always ready-to-be-used.