„The requirements with respect to data security within our industry have increased, accompanied by an increase in the complexity of our business processes. The first audit of the IAM system has shown that we successfully cover all compliance requirements. The professional, external support from IAMaaS allows us to operate flexibly with absolute cost trans-parency and thus to always keep the IAM system up to date.“

Yves Oggier, Head of IT Operations Support Processes, Sanitas

Identity and Access Management as a Service ensures the availability of expertise and optimal use of resources

As one of Switzerland’s largest health insurers, Sanitas places high demands on its own data processes. The strategy of digitisation requires traceability, security and quality for all IAM processes. External operational support (IAMaaS) enables the company to operate the IAM system efficiently and securely.

The Sanitas Group introduced a modern IAM system in the spring pf 2015. At the same time, the aim was to enable Sanitas employees to operate the IAM system, which includes support for end users along with handling any errors and adaptation requests (first and second-level support). To achieve this, the necessary IAM expertise had to be developed via training, and secure operation free of issues had to be ensured right from the start. The assignment covered:– Knowledge transfer of IPG AG to Sanitas IAM administrators– Operation and maintenance of IAM infrastructure– Role formation and maintenance– Implementation of authorisation checks and corrections – Functional expansion of IAM infrastructures

With around 825,000 insured persons and a premium volume of CHF 2.5 billion, the Sanitas Group is one of the largest Swiss

health insurers. In the Compact, Original and Preference segments, it offers its customers health insurance solutions for mandatory basic insurance and supplementary insurance in accordance with their needs. Sanitas develops services on the cutting edge.

Success StoryIAM Insurance

Assignment and objectives

Sanitas Group

Objectives achieved

– Training of internal IAM administrators to manage users and authorisations in the IAM system for all systems and applications

– Each employee has the authorisations required for his or her work.

– It is possible to trace which employee has assigned which authorisations for which reason,

at any time.– The annual revalidation guarantees continuously

high data quality– Line managers are integrated into the approval

and review process– The foundations for new, digitised products have

been laid in cooperation with partners

Challenges of the project

In addition to knowledge of internal company processes, operating the IAM system requires technical IAM knowledge. For this reason, IPG provided operation support with an external administrator during a so-called stabilisation phase. At the same time, knowledge transfer from IPG AG to the customer was ensured via training courses and real case work from live operation.

Approach and methodology

The IAM system was commissioned on site at the customer’s premises by an IPG administrator. This enabled quickly addressing and dealing with any questions that arose. All open issues were recorded, prioritised and handled accordingly. After basic training in IAM administration at the IPG Academy, the prospective internal IAM administrators were continuously trained with the test system as well as on a case-by-case basis with the active system. The focus was on both the transfer of specific IAM expertise and on the newly established processes within the company. Various communication measures in internal and management communi-cation accompanied the new features, thereby achieving increased acceptance for use of the IAM system.

„Only live operation enables recognition of issues that still need to be clarified or of what technical or procedural adjustments need to be undertaken. That is why conti-nuous transfer of our knowledge to the customer is crucial. With intensive training, we ensure that the customer’s administrators can test and expand their expertise on a case-by-case basis, thus ensuring that the IAM system develops in line with the business processes.“

Michael Steinhauer, Head of Operation Services / IAM Consultant, IPG AG

IPG

_Suc

cess

_Sto

ry_S

anita

s

IPG AGTheaterstrasse 17 CH-8400 WinterthurT +41 52 245 04 74info@ipg-group.comwww.ipg-group.com

Berlin

Vienna

BerneWinterthurConstance