In response to escalating complexity and inefficiency caused by over 300 user roles in their JD Edwards system, Nufarm Ltd implemented ALLOut to streamline and standardize their security processes. This solution enabled Nufarm to enforce segregation of duties controls, improve visibility into user access, and significantly reduce maintenance hours. As a result, Nufarm achieved enhanced security, operational efficiency, and successfully passed audits with improved compliance.
Nufarm Ltd, headquartered in Victoria, Australia, is a leading global agrochemical company. With over 450 employees and annual revenues reaching $2.68 billion, Nufarm operates manufacturing facilities in 14 countries and sales offices in over 100 nations, ranking among the top 10 companies in its industry worldwide.
Nufarm faced significant security management issues with their JD Edwards EnterpriseOne 9.1 system. The initial implementation resulted in over 300 user-specific roles, leading to a lack of controls, unmanageable maintenance, and no effective segregation of duties. This untenable situation threatened compliance, risking a negative audit report and highlighting the need for a comprehensive security overhaul.
Nufarm implemented ALLOut to rationalize and standardize roles, resolve multi-role issues, and provide auditable security reports. The implementation process included rolling out the new system to 440 users, ensuring all were audited, including segregation of duties controls. This approach enabled Nufarm to establish standard groups of roles and compensating controls, with managers gaining visibility into staff access and the business taking ownership of security.
The adoption of ALLOut led to a streamlined and controlled security environment for Nufarm. The company successfully mitigated the risks of their previous setup, achieving full compliance and avoiding a negative audit report. The new security model significantly reduced maintenance hours and improved reporting, with the ALLOut implementation being recognized as Best Practice within Nufarm and subsequently rolled out across their New Zealand operations.
We use cookies to give you the best online experience. By agreeing you accept the use of cookies in accordance with our cookie policy. You can always revoke your consent by clicking on the icon at the bottom left of the screen.
When you visit any web site, it may store or retrieve information on your browser, mostly in the form of cookies. Control your personal Cookie Services here.
Cookie name | Default expiration time | Description |
---|---|---|
_ga | 2 years | Used to distinguish users. |
_gid | 24 hours | Used to distinguish users. |
_ga_<container-id> | 2 years | Used to persist session state. |
_gac_gb_<container-id> | 90 days | Contains campaign related information. If you have linked your Google Analytics and Google Ads accounts, Google Ads website conversion tags will read this cookie unless you opt-out. Learn more. |
visitor_id<accountid> | The visitor cookie includes a unique visitor ID and the unique identifier for your account. For example, the cookie name visitor_id12345 stores the visitor ID 1010101010. The account identifier, 12345, makes sure that the visitor is tracked on the correct Pardot account. The visitor value is the visitor_id in your Pardot account. This cookie is set for visitors by the Pardot tracking code. |
pi_opt_in<accountid> | If Tracking Opt-in preferences is enabled, the pi_opt_in cookie is set with a true or false value when the visitor opts in or out of tracking. If a visitor opts in, the value is set to true , and the visitor is cookied and tracked. If the visitor opts out or ignores the opt-in banner, the opt-in cookie value is set to false . The visitor cookie is disabled, and the visitor is not tracked. |
visitor_id<accountid>-hash | The visitor hash cookie contains the account ID and stores a unique hash. For example, the cookie name visitor_id12345-hash stores the hash “855c3697d9979e78ac404c4ba2c66533”, and the account ID is 12345. This cookie is a security measure to make sure that a malicious user can’t fake a visitor from Pardot and access corresponding prospect information. |
lpv<accountid> | This LPV cookie is set to keep Pardot from tracking multiple page views on a single asset over a 30-minute session. For example, if a visitor reloads a landing page several times over a 30-minute period, this cookie keeps each reload from being tracked as a page view. |
pardot | A session cookie named pardot is set in your browser while you’re logged in to Pardot as a user or when a visitor accesses a form, landing page, or page with Pardot tracking code. The cookie denotes an active session and isn’t used for tracking. |
Cookie name | Default expiration time | Description |
---|---|---|
_ga | 2 years | Used to distinguish users. |
_gid | 24 hours | Used to distinguish users. |
_ga_<container-id> | 2 years | Used to persist session state. |
_gac_gb_<container-id> | 90 days | Contains campaign related information. If you have linked your Google Analytics and Google Ads accounts, Google Ads website conversion tags will read this cookie unless you opt-out. Learn more. |
visitor_id<accountid> | The visitor cookie includes a unique visitor ID and the unique identifier for your account. For example, the cookie name visitor_id12345 stores the visitor ID 1010101010. The account identifier, 12345, makes sure that the visitor is tracked on the correct Pardot account. The visitor value is the visitor_id in your Pardot account. This cookie is set for visitors by the Pardot tracking code. |
pi_opt_in<accountid> | If Tracking Opt-in preferences is enabled, the pi_opt_in cookie is set with a true or false value when the visitor opts in or out of tracking. If a visitor opts in, the value is set to true , and the visitor is cookied and tracked. If the visitor opts out or ignores the opt-in banner, the opt-in cookie value is set to false . The visitor cookie is disabled, and the visitor is not tracked. |
visitor_id<accountid>-hash | The visitor hash cookie contains the account ID and stores a unique hash. For example, the cookie name visitor_id12345-hash stores the hash “855c3697d9979e78ac404c4ba2c66533”, and the account ID is 12345. This cookie is a security measure to make sure that a malicious user can’t fake a visitor from Pardot and access corresponding prospect information. |
lpv<accountid> | This LPV cookie is set to keep Pardot from tracking multiple page views on a single asset over a 30-minute session. For example, if a visitor reloads a landing page several times over a 30-minute period, this cookie keeps each reload from being tracked as a page view. |
pardot | A session cookie named pardot is set in your browser while you’re logged in to Pardot as a user or when a visitor accesses a form, landing page, or page with Pardot tracking code. The cookie denotes an active session and isn’t used for tracking. |