How Bazooka Candy Brands Scales Access Management With Infisign Workforce Identity

About Bazooka Candy

Bazooka Candy Brands is a leading manufacturer of candy and confectionery products. The company has been in business for over 70 years and is known for its iconic brands such as Bazooka bubble gum, Ring Pops, and Push Pops.

With products available in over 40 international markets, Bazooka Candy is a brand name known globally. The brand itself provides high-quality, innovative sweets and products that consumers enjoy and has done so for more than 7 decades.

How Does Infisign’s Workforce Identity Add Value to Bazooka Candy?

Bazooka Candy uses Infisign’s Workforce Identity solution to help them manage employee access to apps, as well as provisioning and deprovisioning, and prevent data breaches. 

Challenges Faced by Bazooka Candy Brands:

• Lack of Scalability in Access Management: Managing Access for 200-500 employees with distribution spread across over 40+ countries.
  
• Visibility on the System and Access Changes: Bazooka has employees in factories, sales offices, and corporate headquarters worldwide.  If someone in the Brazil office suddenly gains access to sensitive financial data in the US system, Bazooka needs to know immediately.  Without good visibility, this company would not catch this unauthorized access until it's too late, potentially leading to financial losses or reputational damage.
  
• Manual Provisioning and Deprovisioning for Applications: Bazooka Candy brands also work with a wide range of applications internally for different roles in their company. For each of these users would need to be added and removed from the applications manually, which can be a time hindrance.‍
• Lack of Security From Unauthorized Access: A weak password policy or the ability for former employees to still access systems after leaving Bazooka Candy are major security risks.  This could be someone guessing a simple password or a disgruntled ex-employee stealing valuable trade secrets or customer data if their access isn't immediately revoked.‍
• Difficulty Integrating With Other Systems: Bazooka uses many different software systems: HR systems, payroll, sales platforms, manufacturing control systems, etc.  If their IAM system can't easily connect to these other systems, it becomes a nightmare to manage access.‍
• The Gap in Compliance Reporting: Regulations like GDPR require companies like Bazooka Candy to demonstrate how they protect personal data. Bazooka Candy needed to easily generate reports showing who has access to what data, and how that access is controlled. If not, they would face hefty fines.‍
• Potential Data Leaks: All the above issues contribute to the risk of data leaks. If Bazooka Candy doesn't have good control over who accesses its systems and data and can't quickly detect and respond to unauthorized access, sensitive information (recipes, financial data, customer lists, etc.) could easily fall into the wrong hands‍
• Expensive Costs that Come With IT Admins for the Widespread Company: Managing IAM for a global company is complex. Since Bazooka Candy at times could rely on manual processes or disparate systems, it needed a large IT staff to handle access requests, troubleshoot issues, and make sure compliance was not a roadblock. This translates to high labor costs.  

Solutions From Infisign:

• Easier Scalability: A centralized IAM system like Infisign has automated provisioning and deprovisioning, using attribute-based access control (ABAC) and role-based access control (RBAC), and scales efficiently by assigning permissions based on job roles, not individual users, across all locations.
  
• Better Visibility: Centralized logging and monitoring within the Infisign IAM system provide real-time audit trails of all access attempts and changes, instantly alerting security teams to anomalies like unauthorized access from unexpected locations.
  
• No Unauthorized Access: In Infisign's multi-factor authentication (MFA) and automated deprovisioning upon employee departure prevent unauthorized access by requiring multiple verification methods and immediately revoking access when an employee leaves.
  
• Automated Provisioning and Deprosioning for Applications: For applications like NetSuite Infisign automates the full user lifecycle management processes making provisioning and provisioning significantly easier for system admins.
• Easy System Integration: Infisign’s system with APIs and connectors integrates with existing HR, payroll, and other business applications, automating user lifecycle management and ensuring consistent access policies across all systems.
  
• Better Compliance Reporting: Built-in reporting features within Infisign’s system generate audit reports demonstrating compliance with data privacy regulations by tracking user access and permissions, simplifying compliance audits.
  
• Remove the Risk of Data Leaks: Strong access controls, activity monitoring, and rapid incident response capabilities within Infisign minimize the risk of data leaks by limiting access to sensitive data and quickly detecting and responding to suspicious activity.
  
• Lower IT Admin Costs: Automated workflows and self-service capabilities within Infisign reduce the manual workload on IT administrators, lowering labor costs associated with access management and freeing up IT resources for other tasks.