Identity Management Starts with Expert Guidance

From Manual Access Rights Management to Modern Identity Management 

The heavy workload generated by government COVID-19 support programs led NBank to rapidly expand its workforce. At the same time, employees needed access to a wide range of different IT systems. Combined with increasing regulatory requirements, particularly BAIT (Supervisory Requirements for IT in Financial Institutions), this created an urgent need to modernize access rights management. 

In 2019, NBank therefore began its journey toward modern Identity and Access Management (IAM). An additional challenge was that the organization itself was undergoing significant change at the same time. New business roles and governance structures not only had to be designed, but also established in an evolving organizational environment. 

IAM: Methodology First, Technology Second 

Rather than starting by selecting IAM software, the project team first developed the methodological and organizational foundations for the new access rights management approach. NBank was supported by external consultants who brought together banking requirements, governance, and technical capabilities. Only once this foundation was in place did the team select the right software – with Garancy Identity Manager emerging as the successful solution from the tender process. 

A key element was the introduction of business roles. This approach translates technical access rights into understandable, business-oriented responsibilities and groups them accordingly. As a result, both access rights administration and periodic recertification become easier and more efficient. 

Greater Transparency, More Efficient Processes, and Stronger Governance 

With its IAM system in place, NBank’s IT team now has a comprehensive view of assigned access rights. Access request processes follow clear, software-supported governance rules. Semiannual recertifications can also be carried out more efficiently: Permissions are easier to review and understand and can be revoked directly when necessary. 

At the same time, NBank is automating access provisioning for new hires, departures, and changes in responsibilities. This reduces recurring manual work while helping both the IT department and managers consistently implement governance requirements. 

Results at a Glance

• Around 75 systems are connected to the IAM platform.

• Around 1,000 business roles have been created.

• Direct access assignments account for less than 5% of all access rights, down from an initial 10–14%.

As a result, NBank is bringing an increasing share of access rights under role-based control. More effective recertification and improved governance also help reduce the operational risk associated with unwanted or uncontrolled access to critical banking applications. 

IAM as a Strategic Success Factor 

NBank’s project demonstrates how methodology, software, and consulting can work together to establish Identity and Access Management as a sustainable part of an organization. All business-critical applications are now connected to Garancy, while the bank continues to pursue its strategy of integrating all access rights administration into its IAM platform.

The full customer success story shows how NBank developed its role model, integrated Garancy into its IT infrastructure, and reduced direct access assignments to less than 5%.

Read the Full NBank Success Story

Learn more about NBank’s success with Garancy. The full customer success story explains how NBank redesigned its access rights management from both a methodological and technical perspective – and how business expertise, consulting know-how, and Garancy work together to make it possible.