Identity & Access Management Issue Remediation​

To address significant business, technology, and regulatory risks, the Client recognized the need to modernize its internal identity and access management (IAM) solution, especially after audit findings highlighted insufficient information and cybersecurity controls in the legacy platform. The initial focus was on migrating applications critical to mission processes and financial reporting, such as SOX payments, to reduce risks. RGP assisted the Client by implementing a new vendor-based platform and facilitating the migration of applications for the Capital Markets division, following the prioritized migration schedule.​

RGP deployed technical risk consultants and IAM experts to drive the IAM remediation program across the Capital Markets division. The team worked closely with business and technology stakeholders to ensure the division’s applications were migrated according to enterprise and audit schedules. As part of the migration, they reviewed migrating metadata for accuracy and integrity, collaborating with application owners to correct any errors. RGP also coordinated various application-specific activities to validate migration efforts, including vendor attestations, business roles and access certifications, and compliance with separation of duties policies. Additionally, the team implemented foundational governance to maintain division-owned applications.​

RGP supported the client in migrating critical applications and metadata, resolving audit issues, and ensuring ongoing compliance with identity and access management.​