{{item.title}}
{{item.text}}
{{item.text}}
Leading health tech organization
Healthcare
Workday
When a large health tech company expanded its Workday footprint to include financials, it faced new scrutiny from auditors — putting new pressure on its security and controls. With limited resources, the organization had to embed new financial controls and streamline existing ones without slowing down the business. Staying compliant meant moving fast and getting it right the first time.
PwC worked alongside the client to reimagine core IT controls, policies and procedures — strengthening oversight across financial systems. Along the way, we streamlined Workday security, creating a more intuitive structure that’s easier to manage and scale. Together, we simplified access reviews and improved how configuration changes can be monitored.
Using Enterprise Control a PwC product we automated segregation of duties (SoD) reviews — shifting focus to high-risk access points and unlocking time savings and better insights. We assessed the client’s security environment and uncovered opportunities to help reduce duplication, like consolidating overlapping security groups and removing outdated elements. The takeaway? A cleaner security model that’s easier to manage, faster to navigate and built for better oversight.
Balancing compliance priorities with the company’s resource capacity was one of the keys to sustaining momentum. We automated wherever we could. And where manual controls were necessary, we redesigned them for speed and simplicity — helping reduce friction without sacrificing oversight. To integrate changes without disrupting operations, the company had PwC engage stakeholders across the organization and create control documentation to help support long-term operation. We also remained involved after the redesign to help with ongoing adoption and a smooth handoff.
With PwC’s help, the company met audit milestones with confidence and strengthened its control environment. Seven key IT general control gaps previously flagged by auditors were resolved. Security groups assessed in access reviews were reduced by 24% — streamlining the process and making it easier to manage. Momentum gained: less risk, more control and a stronger position ahead of future audits.
Expertise. Technology. Results. Powered by collaboration. Explore our case studies to see what’s possible.
{{item.text}}
{{item.text}}