{"id":117928,"date":"2024-12-10T11:20:00","date_gmt":"2024-12-10T16:20:00","guid":{"rendered":"https:\/\/jumpcloud.com\/?post_type=resource&p=117928"},"modified":"2024-12-09T16:43:09","modified_gmt":"2024-12-09T21:43:09","slug":"entertainment-studio-uses-jumpcloud","status":"publish","type":"resource","link":"https:\/\/jumpcloud.com\/resources\/entertainment-studio-uses-jumpcloud","title":{"rendered":"Entertainment Studio uses JumpCloud to meet strict enterprise security & compliance requirements"},"content":{"rendered":"\n
A lot of successful entertainment studios start in a garage with a few people and an idea. If that idea ever reaches fruition and is a success, they move onto the next project from there and over time are forced into having to mature quickly as an organization.<\/p>\n\n\n\n
Our entertainment studio’s origin story follows a similar but slightly divergent path. They began with a contract for providing services as a bare-bones operation when they opened for business. <\/p>\n\n\n\n
\u201cWe very quickly found out we were quite big without a lot of internal infrastructure,\u201d says their CIO.<\/p>\n\n\n\n
As the company continued to scale, their clients changed, and with them grew increasing requirements on the company\u2019s IT environment to ensure that their sensitive intellectual property and other data was protected.<\/p>\n\n\n\n
\u201cWe were working with major conglomerate companies, all of which have specific requirements around internal security,\u201d says the CIO. \u201cWe needed a way to effectively secure things at the hardware level to meet these requirements.\u201d <\/p>\n\n\n\n
As their team began looking to enhance the company’s security posture, they started looking for a solution that would enable them to remove local admin accounts from certain devices and manage all hardware from one central interface<\/a>. <\/p>\n\n\n\n At the same time, the right solution would enable users to continue leveraging either Windows or Mac machines, which are both used heavily in their environment. Additionally, the team wanted a solution that worked well with Google Workspace<\/a>, which they\u2019ve been using since the company was incorporated.<\/p>\n\n\n\n \u201cGoogle was well-entrenched in our business at that point and we didn\u2019t have any interest in shifting away to 365 or anything else. We wanted to make sure that there was something that would integrate with Google Workspace.\u201d <\/p>\n\n\n\n After researching the market, they ultimately found JumpCloud\u2014the unified identity, device, and access management platform\u2014which checked all the boxes.<\/p>\n\n\n\n JumpCloud seemed like the best option. We had clear, high-level compliance requirements with major clients. In order to hit those requirements, JumpCloud was the best solution we could find for our environment, and it enabled us to deliver year over year as those requirements got more complicated.<\/p>\nCIO<\/cite><\/blockquote>\n\n\n\n With JumpCloud\u2014which has become the company\u2019s single source of truth that gets rolled out to Google and other services\u2014the team has been able to secure its environment, ensuring only authorized users can access relevant resources from wherever they\u2019re working.<\/p>\n\n\n\n Th[e] integration between Google and JumpCloud made it so easy for us to have single sign-on through Google.<\/p>\nCIO<\/cite><\/blockquote>\n\n\n\n \u201cThe last couple of years, about 50% of our staff have been remote; we\u2019re pretty flexible with the way we let people work. When people are working from home, they VPN into our environment which authenticates with JumpCloud.\u201d<\/p>\n\n\n\n By taking advantage of JumpCloud\u2019s Google Workspace integration, they have been able to deliver a smooth user experience while ensuring only authorized users can access applications.<\/p>\n\n\n\n \u201cThat integration between Google and JumpCloud made it so easy for us to have single sign-on through Google; the native integration to Google SSO is everywhere, so it\u2019s easy to let people use that,\u201d the CIO continues. \u201cBut we have two individual identifiers that are synced in the middle, so you can be your Google account or be your JumpCloud account, and we authenticate with both in different ways and different situations, and it works out perfectly for the different use cases we have in our environment.\u201d <\/p>\n\n\n\n To manage access to internal infrastructure like wireless networks, the company uses Cloud RADIUS<\/a> and Cloud LDAP<\/a> to deliver a seamless experience and enhance their security posture even more.<\/p>\n\n\n\n \u201cBecause the two accounts are so seamlessly synced, most people don\u2019t even think about the fact that it\u2019s not Google.\u201d<\/p>\n\n\n\n Their team is confident that they can scale with ease, all without compromising on security, with JumpCloud serving as the foundation of their IT environment.<\/p>\n\n\n\n \u201cWhen we started using JumpCloud, we were small, and we had major concerns around security, control of devices, and visibility of our assets,\u201d says the CIO. \u201cI\u2019d come from a corporate environment and it felt like we were very far away from being able to scale properly. As we integrated JumpCloud, a lot of that got easier. We quickly knew where everything was, and we could handle any scale. We significantly expanded our workforce, and never had any major system roadblocks along the way.\u201d<\/p>\n\n\n\n When a new user comes on board, they\u2019re initially loaded into the HR system, which then pushes the users to JumpCloud automatically. <\/p>\n\n\n\n \u201cWe don\u2019t have to worry about something being misspelled or other issues like that,\u201d says their Head of IT, who\u2019s been managing their infrastructure \u201cfor as long as I can remember.\u201d<\/p>\n\n\n\n Using Groups<\/a> and Dynamic Groups<\/a>, they are able to easily grant new hires access to relevant hardware and resources automatically.<\/p>\n\n\n\n \u201cWe use roles for different people based on how they\u2019re defined in the HR system and then dynamically assign them to a group, which then gives them access to different hardware or resources,\u201d he says. \u201cQuite often, the approach I tend to take is having a device assigned to a group rather than an individual. As long as they\u2019re in the same group, they can get the same access to a device. It\u2019s very role-based rather than individual-based.\u201d <\/p>\n\n\n\n Their Head of IT says they\u2019re using \u201cquite a number of Policies<\/a>\u201d\u201410 or so\u2014to further shore up the security of their environment and maintain compliance.<\/p>\n\n\n\n Locking down Windows is one of the main things we use Policies for, we also use it to disable particular accounts and force Windows updates\u2014things like that.<\/p>\nHead of IT<\/cite><\/blockquote>\n\n\n\n Additionally, the team is also using JumpCloud Commands<\/a> to keep devices and systems safe.<\/p>\n\n\n\n \u201cWe have a couple of custom commands that, on login, check that users have all the apps they need to have installed\u2014like antivirus and services like that,\u201d he continues. \u201cWe also have some scripts we run on machines that report back to our centralized system once a day so that we can see trajectories of how resources are being used, such as RAM and disk space.\u201d <\/p>\n\n\n\n Due to the nature of their industry, a lot of their employees are \u201cpower users,\u201d their CIO says, adding that most require \u201cadmin access on their machines in order to install IDEs or extensions to their development workflow.\u201d <\/p>\n\n\n\n \u201cIt\u2019s tougher to do full restrictive access, so we use policies and scripts to control as much as we can,\u201d he explains.<\/p>\n\n\n\n They are using two-factor authentication<\/a> (2FA), multi-factor authentication<\/a> (MFA), and JumpCloud Protect<\/a> to ensure only authorized users are able to access systems and apps.<\/p>\n\n\n\n \u201cI don\u2019t think there\u2019s a service we have nowadays that doesn\u2019t have two-factor authentication,\u201d their Head of IT says.<\/p>\n\n\n\n JumpCloud has enabled their team to streamline IT operations, keeping IT headcount to a minimum while the team begins rolling out JumpCloud to other companies in the wider portfolio.<\/p>\n\n\n\n \u201cIt\u2019s allowed us to have a small internal team supporting a large and diverse workforce across all of our portfolio,\u201d says the CIO. \u201cIt\u2019s easy for us to find devices, easy to go in and help people with their machines\u2014just general IT support has gotten simpler than it was. We are able to solve a lot of problems quickly and more remotely with JumpCloud.\u201d <\/p>\n\n\n\n Using Directory Insights<\/a>, JumpCloud\u2019s event logging and compliance feature, they have been able to quickly find the information needed to solve IT problems.<\/p>\n\n\n\n Directory Insights contain a wealth of information, quite often, a lot of the problems people have are solvable through there.<\/p>\nCIO<\/cite><\/blockquote>\n\n\n\n Every year, their clients add on additional security and compliance requirements. With JumpCloud always adding new features to its already feature-rich solution, the team has been able to meet them with ease.<\/p>\n\n\n\n \u201cFrom the beginning, our relationship with JumpCloud has been: \u2018It doesn\u2019t quite do this yet, we wait six months, it does this now, and then we implement it,\u2019\u201d the CIO says. \u201cFor us, the biggest metric to grading the success of JumpCloud is: Are we secure? And the answer is yes<\/em>.\u201d <\/p>\n\n\n\n Both their CIO and their Head of IT are quick to recommend JumpCloud to other companies.<\/p>\n\n\n\n \u201cIt\u2019s worked for us for a long time and we are both big advocates,\u201d the CIO explains. \u201cWhenever someone\u2019s using Google, we recommend JumpCloud. It meets all of our needs for security and compliance.\u201d <\/p>\n\n\n\n Any tips for folks starting out with JumpCloud?<\/p>\n\n\n\n \u201cLean into it,\u201d says the CIO. \u201cIt\u2019s the best thing we did. We\u2019ve never run into any major hurdles. Integrate it as your central system and build layers of security on top of it. You\u2019re building your business around great technology.\u201d<\/p>\n\n\n\n Their Head of IT suggests starting small rather than trying to \u201cgo too deep into the rabbit hole.\u201d <\/p>\n\n\n\n \u201cKeep it simple,\u201d he concludes. \u201cIdentify the aspects of the tool you want to use and stick with those to start.\u201d <\/p>\n\n\n\n JumpCloud\u00ae delivers a unified open directory platform that makes it easy to securely manage identities, devices, and access across your organization. With JumpCloud, IT teams and MSPs enable users to work securely from anywhere and manage their Windows, Apple, Linux, and Android devices from a single platform.<\/p>\n\n\n\n To see the power of JumpCloud yourself, request a demo<\/a> or start a 30-day trial<\/a> today.<\/p>\n","protected":false},"excerpt":{"rendered":" This entertainment studio uses JumpCloud as their single source of truth, rolling out to Google and ensuring only authorized users can access resources.<\/p>\n","protected":false},"author":167,"featured_media":118337,"template":"","categories":[1],"collection":[2777,2775],"wheel_hubs":[],"platform":[],"resource_type":[2313],"funnel_stage":[3014],"coauthors":[2706],"acf":[],"yoast_head":"\n\n
Unlocking more and more value from JumpCloud<\/h2>\n\n\n\n
\n
Set up for scale<\/h3>\n\n\n\n
Streamlining onboarding with Groups<\/h3>\n\n\n\n
Protecting devices with Policies and Commands<\/h3>\n\n\n\n
\n
Restricting access with MFA & JumpCloud Protect<\/h3>\n\n\n\n
Improving IT efficiency as the JumpCloud deployment expands<\/h3>\n\n\n\n
\n
Keeping pace with their own growth<\/h3>\n\n\n\n
About JumpCloud<\/h2>\n\n\n\n