Automated, repeatable, robust, efficient and EN-05 Business Partner & Service effective implementation of business process. Provider On-boarding Improved turn-around of access requests. A trusted, governed, managed Assurance that the right people have the right and easy-to-use online access to the right systems at the right time. capability for business Reduced number of data breaches due to mature partner and service provider and robust on-boarding approval processes and access requests to ICT systems timely off-boarding. and resources. Enable external organisations to locally manage and EN-06 Delegated Admin authorise access requests. A delegated administration Further improved turn-around of access requests. capability to support business Reduced administration burden for departments. partner and service provider Low maintenance, consistent, repeatable and EN-08 Access Control accurate enrolment to ICT systems and resources (RBAC) Provisioning on role rather than the individual. Establish access based on Initial access is aligned with the authoritative source position titles, attributes roles, (HR). etc (RBAC/ABAC) Automated workflow approval Low maintenance, consistent, repeatable and robust EN-09 A common approval workflow user provisioning practices. capability that facilitates Instantiation of an identity trust framework to support Line Manager approval secure federated identity across departments and determination of a level of external identity providers. identity assurance Ability to increase level of assurance of an identity identity assurance step-up (step-up) for access to more sensitive ICT systems escalation management and information. Robust approval processes with follow up for process closure. Other Customised to meet administrator needs. EN-10 A fit-for-purpose administration Reports to facilitate data cleansing activities. interface to manage workforce Ability to override workflow constraints and issues access, run reports and with approval. troubleshoot issues. Reduced demand on IdAM technical specialists to resolve operational problems. Lifecycle Management Objective Deliver common, fit-for-purpose and efficient identity lifecycle management and provisioning of access to ICT systems and resources. Reference Direction Purpose Automated, repeatable, robust, efficient and effective LM-01 Staff Changes & Exits implementation of business process. A trusted, governed and Improved turn-around of access changes and revocation. managed online lifecycle Assurance that the right people have the right access to management capability for the right systems at the right time. changing and revoking staff Reduced number of data breaches due to mature and access to department ICT robust on-boarding approval processes and timely systems and resources.
EN-05 Business Partner & Service Provider On-boarding A trusted, governed, managed and easy-to-use online capability for business partner and service provider access requests to ICT systems and resources. Automated, repeatable, robust, efficient and effective implementation of business process. Improved turn-around of access requests. Assurance that the right people have the right access to the right systems at the right time. Reduced number of data breaches due to mature and robust on-boarding approval processes and timely off-boarding. EN-06 Delegated Admin A delegated administration capability to support business partner and service provider Enable external organisations to locally manage and authorise access requests. Further improved turn-around of access requests. Reduced administration burden for departments. EN-08 Access Control (RBAC) Provisioning Establish access based on position titles, attributes roles, etc (RBAC/ABAC) Low maintenance, consistent, repeatable and accurate enrolment to ICT systems and resources on role rather than the individual. Initial access is aligned with the authoritative source (HR). EN-09 Automated workflow approval A common approval workflow capability that facilitates Line Manager approval determination of a level of identity assurance identity assurance step-up escalation management Low maintenance, consistent, repeatable and robust user provisioning practices. Instantiation of an identity trust framework to support secure federated identity across departments and external identity providers. Ability to increase level of assurance of an identity (step-up) for access to more sensitive ICT systems and information. Robust approval processes with follow up for process closure. EN-10 Other A fit-for-purpose administration interface to manage workforce access, run reports and troubleshoot issues. Customised to meet administrator needs. Reports to facilitate data cleansing activities. Ability to override workflow constraints and issues with approval. Reduced demand on IdAM technical specialists to resolve operational problems. Lifecycle Management Objective Deliver common, fit-for-purpose and efficient identity lifecycle management and provisioning of access to ICT systems and resources. Reference Direction Purpose LM-01 Staff Changes & Exits A trusted, governed and managed online lifecycle management capability for changing and revoking staff access to department ICT systems and resources. Automated, repeatable, robust, efficient and effective implementation of business process. Improved turn-around of access changes and revocation. Assurance that the right people have the right access to the right systems at the right time. Reduced number of data breaches due to mature and robust on-boarding approval processes and timely
SOD-IDAM-01-Workforce-Identity-and-Access-Management.docx