A major operator had a manual process for systems and buildings access. Creating access for new starters, as well as removing for leavers and adjusting for movers created significant complexity for IT and HR teams.

Similarly, at any point, the team might be asked to confirm the access credentials and any one or group of employees, or they may be requested to alter an employees access so that it did not confirm to a group policy or role specific set of permissions.

It was apparent that the business suffered from a lack of visibility and struggled to maintain effective control of the systems accessed by their staff. This has led to an increased risk of employees who have exited the business and those moving departments having access to applications that are no longer relevant to them, or for movers, not to be able to do their new role as effectively as they should.

Discovery and UAM was a quarterly process which included an audit by the security teams. Each audit revealed a number of issues and as growing business it was increasingly concerned by its own inability to close out the growing list of issues. Cyber teams needed this to be addressed, as did the business as not only did this pose material security concerns but had resulted in substantial productivity losses.