Pano AI Automates User Access Reviews, Reducing ISO27001 audit time by 75% with Zluri

Challenge: Manual and Error-Prone Access Reviews

Before adopting Zluri, Pano AI’s IT and Information Security (InfoSec) teams faced significant challenges with their user access review (UAR) process. These reviews were critical for maintaining ISO27001 compliance and robust security controls, but manual and inefficient workflows hindered them.

• Time-consuming Process: Quarterly access reviews took 4-5 hours per session and involved IT, HR, and over ten application owners.
  
  
• Reliance on Spreadsheets: Reviews were conducted using manually created spreadsheets with VLOOKUPs, which introduced complexity and potential for oversight, such as missed terminated accounts.
  
  
• Compliance Complexity: Limited visibility into user access and reliance on manual audit trail maintenance made achieving ISO27001 requirements more resource-intensive.
  
  
• Resource Drain: The process consumed valuable IT bandwidth that could have been utilized for strategic initiatives.

With these challenges slowing operational efficiency and compliance readiness, Pano AI sought a solution to streamline and automate its User Access Review process.

Solution: Zluri’s Automated User Access Reviews

Pano AI evaluated several solutions, including BetterCloud, but chose Zluri for its focus on automating UAR processes alongside its closed loop remediation (deprovisioning access for users who left the organisation with Zluri workflows) along with comprehensive SaaS visibility.

Key Zluri Features Valued by Pano AI:

1. Integration with Existing Systems: Seamless connection with Pano AI’s critical IT and tech applications, including Slack, Google Workspace, and Jira.
   
   
2. Automated UAR Workflows: Certification workflows with designated primary and fallback reviewers, automated reminders via Slack and email, and Jira ticket creation for documentation.
   
   
3. Audit-Ready Reports: Easy-to-download, compliance-ready evidence for ISO27001 audits.

Implementation Success

The onboarding process with Zluri was smooth and highly collaborative.

• Structured Setup: Zluri’s team guided Pano AI through integrations and workflow creation, ensuring alignment with their compliance and security needs.
  
  
• Dedicated Support: Weekly syncs, progress updates, and a shared Slack channel ensured a transparent and responsive onboarding experience.
  
  
• Workarounds for Challenges: Zluri provided creative solutions for applications with limited integration capabilities, demonstrating flexibility and expertise.
  
  

Results: 75% Reduction in Audit Effort and Enhanced Compliance

Pano AI achieved significant improvements in its access review process:

• 75% Reduction in Effort: Quarterly reviews that took 4-5 hours were reduced to 1-1.5 hours, freeing up IT resources.
  
  
• Simplified Compliance: Audit-ready reports eliminated the need for extensive documentation and ensured smooth ISO27001 audits.
  
  
• Enhanced Security: Automated remediation workflows minimized the risk of over-privileged access and improved access governance.

Future Plans with Zluri

Pano AI plans to expand its use of Zluri by:

• Centralising software inventory, including licence costs, renewal dates, and application ownership.
  
  
• Leveraging Zluri’s reporting capabilities to improve software tracking and resource allocation.

Customer Quote

"Zluri has revolutionised how we manage access reviews. What used to take hours of manual effort is now automated and streamlined. The audit-ready reports have made compliance seamless, and the support from Zluri’s team was outstanding. The Access Review tool has been exceptional in helping us audit user access levels and identify remediation steps concisely."

— Sejal Chadha, IT and Security Manager, Pano AI