Merck Achieves Silent Security with Zero Trust Identity Fabric

Objective

Merck aimed to transition from an outdated castle and moat security model to a modern Zero Trust architecture. The primary goal was to secure sensitive intellectual property and GxP-regulated data while transforming identity into a competitive differentiator that delivers a superior, training-free user experience.

Challenge

Legacy tools were so complex they created a training failure barrier, risking lower adoption and the rise of shadow IT as scientists bypassed frustrating security gates. Furthermore, relying on static credentials made Merck vulnerable to phishing, while a lack of granular control risked non-compliance with global regulatory agencies.

Solution

Merck implemented a Zero Trust Identity Fabric by integrating the PingOne Platform with Amazon Verified Access (AVA). This solution uses PingFederate and PingOne as a centralized authentication authority and employs PingOne Protect to evaluate real-time contextual factors—such as geolocation and device reputation—before granting access.

Results

The transformation enabled a Silent Security model where friction is dynamically adjusted based on risk. Merck successfully eliminated the need for access training courses and achieved significant operational efficiencies, including a 90% reduction in manual effort and a 70% faster assessment of change proposals.