BNP Paribas Fortis: Ensuring Compliant Access Review Recertification Campaigns

Read the transcript:

My name is Naveen Kulshreshtha and I’ve been working since sixteen years for BNP Paribas Fortis. My job is more to deal with the security model that it remains in line with the objectives and it evolves as the organization changes and the requirements change.

My name is Ian Buysse. I’m working as an IAM monitoring and tool control architect. I need to ensure that our current framework is preserved. We need to ensure that we are in continuous compliance with regulations.

My task is mainly to ensure that the monitoring control framework is preserved and is maintained. We were looking for a product which was able to make and create scalable recertification campaigns and ensure the effort needed to launch those campaigns, to follow-up on those campaigns, to ensure the quality of the reviews.

We have selected Radiant Logic for different reasons. One of the reasons is that the number of objects and connections to recertify is very high and complex and we needed to find a product which was able to filter all those connections to a very specific set of connections to be recertified.

The contact between the bank and Radiant Logic is very positive in the sense that although we have a quite complex model and architecture, our first use cases were already integrated. So I think within three months our first recertification campaign was ready.

So we were very surprised of the time to market, which was so short, that we wanted only to integrate more and more use cases.

It’s a specialized tool in analytics. While our other IAM tools also have analytics and reporting and recertification capabilities built, but not to the level of specialization that Radiant Logic has. So it allows us to take advantage of that capacity of the tool as well as also to look for consolidation of data that is not in our IAM tools for other sources different entities and different types of data and then move into the next phase of IAM where it’s getting more challenging in that domain.