Case Studies

Zero-trust infrastructure enabled secure access to business systems from outside the office

We moved to identity-based access control to address VPN congestion and gaps in removing former employees' access rights.

Challenges

• Increased remote working congested the VPN appliances, causing unstable connections during morning and evening peaks.
• Access changes after transfers and departures relied on requests; an audit identified discrepancies between intended and actual permissions.
• The bank needed audit trails consistent with the supervisory guidelines applicable to financial institutions.

Our Approach

• We made the HR system the authoritative source for access rights and automated identity provisioning, applying transfers and departures on the same day.
• Access conditions were defined for each business system, including device, location and multifactor authentication, gradually reducing reliance on the VPN.
• All privileged activity was recorded, and quarterly access-review reports were generated automatically.
• Deployment began with a three-department pilot and expanded across the organization over six months.

Results

"Audit findings fell to zero. Being able to enforce controls through the system has made a significant difference." - Risk Management Department

Figures are measured results from the client's environment and do not guarantee equivalent outcomes elsewhere. Information reflects the project at completion.