CHALLENGE
Create a system to facilitate the management of user access to bank systems. Management includes the requesting of access, the approval of access, the fulfillment of access, and the tracking of all steps in the process. Users include bank employees, contractors, and other external partners.
SOLUTION
Tech-Pro partnered with the clients internal staff to design, develop, and deploy a solution. The solution included a custom intranet based front-end and a packaged software backend (BMCs Control SA product). The system performed three main functions: 1) deletion of user system access across the enterprise, 2) addition of user system access, and 3) change of user system access (to accommodate changes in user job functions and responsibilities).
RESULT
The new identity management system gave the Global Information Security Group the ability to identify what systems any one particular employee had access to at any given time. When an employee was fired or quit, the bank could immediately revoke that employees system access across the enterprise. Before the new system was implemented, the bank routinely failed external auditors security audits. After the implementation of the new system, the bank not only passed but received high marks from the audits. The bank was able to redirect the work of five full time administrators as a result of efficiencies gained by the system.
|
Tech-Pro, Inc.