Informations Service Center (ISC Münster) is a leading IT service provider based in Münster, Germany, which offers customized solutions to its customers in the health insurance industry. ISC Münster provides customers with consulting services and implements IT infrastructure and software development. In total, it manages the data of more than a million patients insured by its customers. The company has 62 employees and an annual turnover of approximately ten million euros. Read more here: https://www.netiq.com/success/stories/isc-munster.html

1. S U C C E S S S T O R Y
ISC Münster Reduces Security Risk and
Strengthens Compliance with NetIQ
Executive Summary
INDUSTRY DESCRIPTION
Informations Service Center (ISC
Münster) is a leading IT service provider
offering customized solutions to
statutory health insurance companies.
To remain competitive, ISC Münster
must adhere to regulations and retain its
ISO27001 certification (the international
standard for data security).
BUSINESS SITUATION
ISC Münster’s customers are legally
required to store patient data securely.
To boost competitiveness, ISC Münster
sought ISO27001 certification, for
which central log management is a
prerequisite.
THE NETIQ DIFFERENCE
ISC Münster implemented
NetIQ® Sentinel™ Log Manager to
reduce operational risks and prove to
auditors that it fulfills the strict ISO27001
requirements regarding data security.
PRODUCTS AND SERVICES
NetIQ® Sentinel™ Log Manager
Informations Service Center (ISC Münster)
is a leading IT service provider based
in Münster, Germany, which offers
customized solutions to its customers
in the health insurance industry. ISC
Münster provides customers with
consulting services and implements IT
infrastructure and software development.
In total, it manages the data of more
than a million patients insured by
its customers. The company has 62
employees and an annual turnover
of approximately ten million euros.
Security is very important for ISC Münster
and its customers, particularly where
data processing is concerned. As health
insurers, its customers are legally required
to store patient data securely. To become
more competitive, ISC Münster decided
to apply for ISO27001 certification—
the internationally accepted data
security standard. To gain and keep this
certification, it was crucial for ISC Münster
to build a central log management system
on a stable platform. Doing so ensures
compliance and reduces operational risks.
The Solution
ISC Münster asked NetIQ partner TWINSEC
to provide a reliable solution that could
support central log management and
increase IT security. TWINSEC provides
architecture, solutions, design and
implementation for security products.
It has 16 security consultants and many
years of experience with NetIQ products.
After considering several other solutions,
ISC Münster chose NetIQ Sentinel Log
Manager to reduce operational risks
associated with IT security and to ease
compliance. Bernhard Fahr, Head of
Technology at ISC Münster, commented,
“We decided to implement NetIQ
Sentinel Log Manager because it is a very
sophisticated product that provides a very
intuitive and advanced search function,
and offers good value for the money.”
ISC Münster seamlessly integrated
NetIQ® Sentinel™ Log Manager into its
existing IT environment, which includes
Microsoft Windows Server, Microsoft

2. Worldwide Headquarters
1233 West Loop South, Suite 810
Houston, Texas 77027 USA
Worldwide: +1 713.548.1700
U.S. / Canada Toll Free: 888.323.6768
info@netiq.com
www.netiq.com
http://community.netiq.com
For a complete list of our offices
in North America, Europe, the
Middle East, Africa, Asia-Pacific
and Latin America, please visit
www.netiq.com/contacts.
Follow us:
Active Directory and Microsoft
Exchange. TWINSEC also connected
the NetIQ solution to various UNIX
systems, firewalls and switches. In the
space of just six months, ISC Münster
integrated around 500 systems with
NetIQ Sentinel Log Manager to monitor
failed logins and authentications in
internal systems, changes in access
management rights, and detect
attempts to breach firewall rules.
The Results
Simplifies Reporting to
Improve Compliance
NetIQ Sentinel Log Manager has
simplified reporting, helping ISC
Münster easily prove to auditors that
data is stored securely. Fahr explains,
“The NetIQ Sentinel Log Manager
includes a report generator, which
provides us with all the information
necessary for ISO27001 certification.
We can easily find archived log
data and send it to auditors to
fulfill all reporting requirements.”
Saves Time on System Administration
The user-friendly interface of NetIQ
Sentinel Log Manager reduces
the amount of time the company
spends on system administration. It
provides a single view of important
status information from multiple
systems, so employees do not need to
manually log in to different systems to
monitor them. Fahr comments,“Since
monitoring became easier, staff keep
a closer eye on the systems. This helps
us to keep our IT systems stable.”
Improves IT Security
NetIQ Sentinel Log Manager
automatically informs relevant staff
members of potential security breaches,
such as failed logins and changes
in access management, so they can
quickly resolve the issue. The solution
also automatically archives historic
data, helping ISC Münster recognize
trends and take a proactive approach
to IT security—identifying and
preventing problems before they occur.
ISC Münster is very satisfied with
the NetIQ solution, which easily can
be scaled up to provide for new
customers. In the future, the company
is planning to use NetIQ Sentinel
for security information and event
management (SIEM). SIEM enables
real-time analysis of data security to
actively prevent security breaches.
Learn more today by contacting
your NetIQ partner or a local NetIQ
sales representative, or by visiting
www.netiq.com for contact
information in your area.
“NetIQ Sentinel Log
Manager includes a
report generator, which
provides us with all the
information necessary for
ISO27001 certification”
Bernhard Fahr,
Head of Technology,
ISC Münster
NetIQ, the NetIQ logo, and Sentinel Log Manager are trademarks or registered trademarks of NetIQ Corporation in the USA.
All other company and product names may be trademarks of their respective companies.
© 2013 NetIQ Corporation and its affiliates. All Rights Reserved. CSS90066ISCM ST 1/13