A large healthcare system on the east coast, with over 40,000 employees and over 8,000 physicians providing services such as hospitals, research facilities, patient care, academic centers, etc.
Currently, user on-boarding or the “Joiner Process” would take more than two to three weeks before access to critical applications was provided to the employees. The provisioning process consisted of manual silo processes, resulting in high costs and high risk. In addition, user access removal, or the “Leaver Process” was laborious and inefficient and resulted in access reminiscence even after the user was not working at the organization.
iQuasar Cyber, Inc. advised the client on business process automation design and implementation, which reduced the user on-boarding process. Due to the automation process, access to critical applications was provided from day one of a user joining the organization. With iQC expertise and experience, access for physicians, nurses, and other staff would be provided on day one of employment. iQC utilized the latest Identity and Access Governance tools to strategize, plan, design, and implement a solution that resolved user access processes.
As trusted advisors, iQC consultants reviewed the current state of the IAM processes. iQC consultants gathered critical business requirements for user on-boarding and off-boarding processes. Instead of providing a technical solution from the get go, iQC consultants addressed and documented the IAM processes and identified gaps and opportunities. Business process gaps and inefficiencies were documented, including time to get access and the high costs associated with manual processes. Once gaps were identified and reviewed with the client, the scope for the identity and access solution was presented to the client. iQC consultants provided future state for business process changes and implementation of IAM solution.
Joiner and Leaver business processes are complex and can result in high costs and high risk to an organization. iQC implemented business process automation resulting in efficiency, cost savings, lowering of access risk, and meeting the organization’s compliance requirements.
With the goal of implementing a successful business transformation program, iQC put together an action plan consisting of multiple phases and releases. After presenting their vision for the future state, each phase was carefully crafted with defined goals that ensured continued progress towards completion. Below is a summary of the functionality that was provided to the client:
In addition, iQC implemented automated terminations for employees without any manual interventions removing access to the organization’s network and critical applications, including privileged access, thereby reducing manual errors, eliminating access reminiscence, and lowering risks to the organization.
