Skip to main content
All case studies
Higher Education14

PAM Implementation and Essential Eight Uplift for an Australian Research University

A leading Australian research university engaged Modern 42 to expand its Privileged Access Management capability and progress toward ASD Essential Eight Maturity Level 2.5.

Industry

Higher Education

Sector

Research University

Engagement Type

Analysis and Service Design, Architecture and Design, Engineering and Development

Technologies

BeyondTrust Password Safe, BeyondTrust Secret Safe (migrated from Delinea Secret Server)

Frameworks

ASD Essential Eight (targeting Maturity Level 2.5)

Higher EducationPAMBeyondTrustEssential EightCredential MigrationService DesignChange ManagementBlended Team

The Situation

This university sought to expand its PAM capability by implementing BeyondTrust Privileged Account and Session Management (PASM). The objectives were to strengthen governance, enforce privileged access controls and streamline credential management, all supporting progress toward Essential Eight Maturity Level 2.5. While the technical scope was well defined, the broader challenge lay in navigating a complex environment of distinct teams, inconsistent practices and varied organisational readiness. Success required close collaboration, flexibility and hands-on support throughout the implementation.

What We Did

Credential Migration

We migrated secrets from the existing Delinea Secret Server to BeyondTrust Secret Safe, then transitioned into BeyondTrust Password Safe to support greater maturity and control over privileged credentials.

Platform Configuration and Onboarding

We configured Password Safe, onboarded privileged assets, and uplifted associated business processes and governance to ensure successful adoption across the university.

Service Design

We completed a PAM service design defining key people, process and technology components, along with standard operating procedures aligned to the university's Essential Eight Maturity Level 2.5 target state.

Training, Support and Change Management

We provided training and augmented BAU support through a blended delivery model, ensuring internal teams could sustain the capability independently. We partnered with the university's Change Management team to support communication, engagement and user readiness throughout the program.

The Outcome

The engagement delivered several key outcomes: successful migration from the legacy password vault, matured credential management within BeyondTrust Password Safe, and a tailored service design aligned to Essential Eight controls supporting progress toward Maturity Level 2.5. The program also built strong working relationships across business and technical teams, establishing the foundation for continued PAM maturity through an ongoing augmented support model.

Key Wins

  • Successfully migrated from Delinea Secret Server to BeyondTrust Password Safe
  • PAM service design aligned to ASD Essential Eight Maturity Level 2.5 target
  • Partnered with the university's Change Management team to drive adoption
  • Blended delivery model ensures sustainable internal capability
  • Laid the foundation for ongoing PAM maturity and future collaboration

Ready to move forward? Pick your path.

Whether you need a quick conversation, a structured assessment, or hands-on engineering — we’ve got an engagement that fits.

Start a conversation

30 minutes. No commitment. Let’s understand your environment and discuss where identity security can add the most value.

Book a call

Get an assessment

Identity maturity assessment, gap analysis, or architecture review. Walk away with a clear picture and a prioritised roadmap.

Explore advisory

Engage our engineers

PAM migration, identity modernisation, CIAM build, or platform uplift. Our specialist engineers deliver what your team needs.

Explore engineering

We use cookies

We use cookies and similar technologies to help personalise content, measure the performance of our site, and provide a better experience. By clicking Accept, you consent to the use of all cookies.
Learn more.