Questions that kept surfacing were about the users. The challenge was more or less divided into three main categories:
One type of challenge was how to make sure that users only had access to what they needed.
“How can we make sure that users are handled correctly when changing location, position or are terminated?”
Other questions were related the extensive use of contractors or consultants that frequently got remote access, how to control that? The result of all these unanswered questions was a more or less (mostly less) controlled process of copying users. So when a new user was hired it was decided to give him the same access as an already existing user, leading us straight to the problem that new users usually just got too much and not on a need-to-know basis.
Other concerns were the huge effort and resources that were spend on trying to control all of this. It seemed to be a bigger and bigger task each time the company started hiring more people or adding new systems to their business.
Especially the external people coming in on a daily basis took a lot of resources. Statistics showed that approximately 10% of all users were edited on Meta data or on permissions during the month. So 5000 users meant 500 user changes per month. That’s a lot of manual work from both IT and the Business.
Finally, there were issues around the audits. Each time one of our clients had an audit, the auditors always seemed to find and address some of the above issues. The problem here was not only that the companies were not able to comply; they also had to use a lot of time trying to document it.
So basically when we started the development of IDM365 we had three main objectives. These objectives are still the essential objectives of our products:
- Ease of use – transfer responsibility from IT to Business
- Security – make sure that users only have what they need
- Documentation – always be able to document who, what, when and why
This is IDM365.
My colleague Kim is typing away to let you in on whether IDM365 files under IDM, IAM or IAG.
Stay tuned, you won’t regret it. Get more IDM365 here.