Cornell University Enhances PeopleSoft Logging For Improved Auditing & Reporting With Pathlock Native for PeopleSoft

Challenge

Cornell University’s IT department set out to improve logging for PeopleSoft Campus Solutions. Their aim was to record user activity data that wasn’t captured by native authentication and database logs. The PeopleSoft Development team’s initial approach was to undertake custom programming to build the desired capability. However, they quickly found the process to be extremely intensive with mediocre results and significant negative system performance ramifications. The University’s PeopleSoft’s native logging capabilities were not capturing user activity data. The logs were bulky, unstructured, and provided insufficient information. Furthermore, the log data lacked any context around user activity. These limitations caused a gap in capabilities necessary for the University’s incident response, auditing, and compliance efforts.

Solution

The University’s IT department utilized Pathlock Native for PeopleSoft to enhance PeopleSoft’s logging capability by recording user-centric data points such as the location of access, user id, field and transaction-level interaction, IP addresses, and more. Pathlock’s user activity logging allowed internal audit teams to conduct periodic and on-demand audits efficiently. The logs generated also helped acquire necessary data for GDPR and FERPA compliance reports. Furthermore, the institution leveraged these information to monitor for credential compromise and insider threats such as privilege misuse, data leakage, and more.

Results

Using Pathlock Native for PeopleSoft, the IT and PeopleSoft teams at Cornell University are able to generate rich and comprehensive user activity logs. Equipped with granular details on the context of access, their logs can now be readily used for faster reporting and data visualization. The enhanced logging capability allows the University’s IT team to be prepared for incident response and fast-track compliance reporting requests. The user activity logs also enable the customer to maintain an efficient audit trail for internal governance and audit.

“Pathlock Native for PeopleSoft has allowed Cornell to selectively address long-standing audit findings and concerns about a lack of comprehensive system and user action logging in PeopleSoft. The system does not provide this functionality off the shelf, and our efforts to custom code a solution were expensive, time-consuming and ultimately insufficient. Pathlock stepped up with an effective solution, a friendly and efficient implementation team and ongoing support that has exceeded our expectations.”

– Rob Bandler, PeopleSoft Operations And Development Manager