BACKGROUND
A national health insurer supporting commercial and government contracts with a provision of care division comprised of hospitals and clinics with over 120,000 patients and 270,000 emergency room visits a year.
THE CHALLENGE
An Identity and Access Management (IAM) organization that failed to meet obligations, lacked automation, scored low on operational satisfaction, and lacked basic IAM functionality.
THE SOLUTION
RKON provided a quick, low-cost IAM Assessment that addressed the concerns of the overall program, enabling a multi-horizon achievable approach that reinvented the delivery of IAM services across the organization.
Like many customers the problem wasn’t technology, but substandard delivery and redundant, poorly designed technology. First, RKON helped restructure the existing IAM organization to be more efficient and service focused. Then, within the newly aligned organization RKON consolidated technologies, introduced stronger, less intrusive governance controls, automated services, and added new capabilities.
The improved organizational design and processes streamlined access requests and reviews, while AI integration enabled role modeling for RBAC, passwordless authentication, and improved vendor privilege management.
IMMEDIATE DECREASE IN SECURITY/OPERATIONAL INCIDENTS
DELIVERY EFFICIENCY ROSE BY OVER 50%
DECREASE IN ENTITLEMENT BASED PROVISIONING
THE RESULTS
Customer satisfaction immediately increased with enhanced communication, a decline in security and operational incidents, and service provisioning SLAs reduced by several days. Delivery efficiency, as measured by points delivered per Sprint rose by more than 50%.
The IAM program was able to define its delivery objectives and measure with a management level balanced scorecard. New capabilities for privileged access management, secrets management, and vendor privilege management were expanded.
The use and creation of roles increased, while entitlement-based provisioning decreased, leading to streamlined access requests and reviews with reduced processing times.
The overall refined solution provided a solid foundation for more advanced capabilities including passwordless authentication, advanced identity proofing, and fine grained access controls to support zero trust initiatives.
ABOUT RKON
Operating as a security-first IT advisory and cybersecurity firm since 1998, RKON partners with private equity and enterprise organizations to deliver end-to-end solutions—from strategy to execution to managed services. Our expertise lies in anticipating challenges, mitigating risks, and architecting custom IT solutions that enable businesses to innovate with confidence, adapt quickly, and operate seamlessly.
To do this, RKON provides IT solutions in three stages: first building an advisory practice that sends the strategy in the right direction; an execution practice that ensures the vision is turned into reality; and a management practice that keeps the vision on track as IT evolves to best serve the business.
Where others see challenge, we see opportunity.
