Challenging access management
Changes to the company's operating model have transformed how Höegh Autoliners manages access for employees and external partners. The company has outsourced many operational tasks and works closely with agents worldwide. Only employees of the agents who actually work with Höegh should have access to the company's business systems, primarily by considerations of confidentiality.
Distributed access management
Managing access became increasingly complex as the number of agents and users grew. In a needs analysis, it emerged that the company wanted to streamline access management and increase security. The agents were therefore made responsible for managing their employees' access to Höegh Autoliners' business systems. The access is dependent on the tasks the individual employee is to perform and within the security context Höegh Autoliners has assigned to the agent.
Standardization of access
Access was standardized using a Role-Based Access Control (RBAC) model, linking permissions to users' roles and responsibilities. For Höegh's global organization, equal roles and regulations for all agents contribute to simplification and scalability.
Governance campaigns ensure confidentiality
In order to ensure confidentiality at all times, agents must regularly recertify access for their employees. This recertification is organized as Governance campaigns. These are implemented automatically, where staff managers confirm or revoke existing access. Any changes are implemented immediately and the implementation of the Governance campaign itself is logged for later reference. In this way, Höegh documents their ongoing security work.
Automation ensures confidentiality and efficiency
Automation of access management brings many benefits, including strengthening security. When identity changes are managed manually, it can be easy to forget that access should not only be granted but also removed. Automation ensures users receive the right access based on their role and business needs throughout the identity lifecycle. With access management, Höegh ensures the confidentiality and efficiency of on- and offboarding processes.
The result is a more secure, scalable, and efficient approach to identity governance across Höegh's global organization.
Technology: NetIQ by OpenText
