Oplon Secure Access is out.

Università Cattolica del Sacro Cuore:

Secure remote access and NIS2 and ISO 27001 compliance

Summary

Università Cattolica del Sacro Cuore, an Oplon customer for over 10 years and one of Italy’s leading academic institutions, needed to simplify and secure remote access for faculty and administrative staff. In a context marked by the entry into force of the NIS2 directive and alignment with ISO/IEC 27001 best practices, the University was looking for a solution that was efficient, user-friendly, and fully compliant with security standards.
With Oplon Secure Access, the university achieved centralized, traceable, role-based access management, improving overall security while supporting audit and compliance requirements without impacting the user experience.

  • Industry: Higher Education – Private University (LSR)
  • Stores: Università Cattolica del Sacro Cuore
  • Size: 30,000 students, 2,000 faculty members
  • Mission: To provide excellence in education and research while ensuring secure and efficient digital access for academic and administrative staff.

Context

The university needed to manage remote access for around 300 users—faculty, administrative staff, and IT teams—while ensuring access to desktops, applications, and critical systems. The existing solution was no longer adequate to meet the growing requirements for governance, access control, and traceability, which are central to NIS2 and ISO 27001. It was therefore necessary to adopt a modern platform to strengthen the university’s security, reduce operational risks, and provide concrete support for compliance processes.

Challenges

  • Complex remote access: faculty and staff required secure access to desktops and applications from any device.
  • Technical administration: IT teams needed centralized tools for the remote management of Linux servers and network devices.
  • Systems integration: implementation of Single Sign-On (SSO) and centralized web access without impacting existing workflows.
  • Efficient migration: rapid replacement of the existing service with no interruptions.
  • Regulatory compliance: adoption of a solution compliant with NIS2 and ISO/IEC 27001 requirements, particularly in terms of access control, accountability, and MFA auditability.

All information,
at a glance

Download the case study PDF to learn about the solutions adopted, the challenges faced, and the benefits achieved in terms of security and compliance.

Solutions

The university implemented Oplon Secure Access, achieving the following benefits:
  • Secure RDP access: faculty and staff can access remote desktops without using a VPN, relying solely on an internet connection.
  • Remote technical management (PAM): IT teams administer server systems directly through a web browser.
  • Centralized web access and SSO: seamless integration with Microsoft via reverse proxy and MFA.
  • Rapid migration: transition completed in a short timeframe, with minimal downtime and very positive user feedback.
  • NIS2 compliance: management of privileged access and roles, activity monitoring, dashboards, and reports to support regulatory requirements.

Results & Benefits

  • Simplified and Secure Access: Unified entry point for all user types, including suppliers and dministrators.
  • Elimination of Outdated VPNs: Reduced complexity and improved security posture.
  • Accelerated Integration: Federated authentication added to web apps without modifying services, cutting implementation times significantly.
  • High Availability: Continuous service delivery through clustered architecture.

Related Success Stories

MAXIDI

Simplifying Corporate Access, Replacing VPNs, and Achieving NIS2 Compliance

REGIONE
EMILIA-ROMAGNA

Revolutionised Digital Identity in Healthcare

What's the next step?

Discover how Oplon Secure Access can strengthen identity protection and improve your organization’s security posture.
Get in touch with our team to request a demo or schedule a conversation with one of our specialists.

.st0 { fill: #ec6b4f; }

Request a demo

Fill out the form to be contacted by one of our operators.