It may sound more like a traditional rhyme—"something you know, something you have, something you are”—but these are the basic tenets of multi-factor authentication (MFA). The National Institute of Standards and Technology (NIST) (link resides outside of ibm.com) defines MFA as “an authentication system that requires more than one distinct factor for successful authentication.” As a simple password can always be stolen, getting access to two factors proves to be far more difficult. For Software AG, adding this additional layer of security was vital.

Nicole Ritchie, Director of Product Marketing for Adabas & Natural, explains: “We are tasked with supporting very large enterprises running mission-critical applications on IBM zSystems as securely as possible and with the highest availability. Adding MFA to our process helps us provide more secure access management and peace of mind in what we deliver to our end-users and their end-users.”

Software AG’s security strategy is multi-layered. In addition to migrating to MFA, the company adopted stronger data encryption to help defend against attacks and facilitate compliance across all regions. Jürgen Lind, Senior Director of Product Management at Software AG uses an analogy during IBM’s ISV zSecurity webinar series: “Implementing encryption without secure access is like installing a new fence without a gate. And secure access without encryption is like a gate without a fence” (link resides outside of ibm.com). Therefore, Software AG is implementing a holistic mainframe security strategy.

Hans-Georg Saftig, Director for A&N R&D Mainframe Infrastructure at Software AG, adds: “We are the first link in a long chain of cybersecurity responsibility. We need to empower our developers who are building new features and capabilities to take Adabas & Natural into the next half-century. Our strategy must provide protection for as many scenarios as possible, using methods that we can expand as new threats surface.” 

One of the advantages of adopting an MFA solution was the ability to move at a pace that worked for Software AG’s developers. Mr. Saftig explains: “We needed to make our work on the IBM zSystems platform more secure, but it was really important to find a balance. We take security risks very seriously, and we also need to enable our development team to remain productive and focus on development. IBM Z Multi-Factor Authentication helped in two ways: we didn’t have to roll it out to everyone at once, and as we roll it out to each segment of users, that segment will quickly be in a more secure posture.”

Mr. Saftig adds: “During the PoC, we initially faced some challenges in incorporating the IBM Z Multi-Factor Authentication solution in a way that would work seamlessly across our complex environment. With help from the folks at IBM Lab we optimized the configuration and now all is well."

Software AG also stresses the importance of the planning step in the change process. “Once we made our decision to adopt a stronger security posture, our IBM team walked us through an IBM Mainframe Security Workshop (link resides outside of ibm.com)”, shared Saftig. “They helped us identify and capture our current status, where we wanted to be, what we needed for compliance, and how we could get there—even down to how we would stage and test the new implementation. In the end we had a recipe for success, and everyone was happy.”

Software AG’s mantra is “Simplify the Connected World.” The company has devoted itself to supporting digital transformation and helping its clients meet ever-changing customer expectations. The key is to establish a digital backbone that enables systems to integrate more seamlessly, connect more effectively, and process more efficiently.

Ritchie states: “We're protecting the development environment for our core products and add-ons, which then support hundreds upon hundreds of our enterprise customers. By keeping that environment secure, we're able to provide faster delivery and updates to our customer base.”

Saftig adds: “It’s most important that the big banks, the government organizations, the insurance companies relying on Software AG’s mainframe solutions can be confident that the code they are using, the applications they rely on, are secure and we’re making every effort to ensure they’re secure in the future. It’s as simple as that.” Software AG’s investment in IBM zMFA outlines the importance of securing access to the mainframe, no matter the size of the environment.

Software AG (link resides outside of ibm.com) simplifies the connected world. Founded in 1969, it helps deliver the experiences that employees, partners and customers now expect. Its technology creates the digital backbone that integrates applications, devices, data and clouds; empowers streamlined processes; and connects “things” like sensors, devices and machines. Software AG helps more than 10,000 organizations to become a truly connected enterprise and make smarter decisions, faster. The company has more than 5,000 employees across more than 70 countries and annual revenue of over €830 million. Its ambition is to exceed €1 billion of organic revenue in 2023.