Jet Infosystems automated management of access rights in TNK-BP

The Jet Infosystems company announced in August, 2011 creation of a management system identification granted and access rights of users to information resources (Identity Management, IdM) for TNK-BP. The project is implemented based on Oracle Waveset (before Sun Java System Identity Manager).

TNK-BP pays much attention to information security support of company assets and management efficiency of IT. System implementation of IdM is one of the most efficient and perspective methods of the solution of similar tasks, says Jet Infosystems company. Products of this class are integrated with information systems and allow to exercise automatic and centralized control of access rights and accounts of users.

"TNK-BP is one of leading oil companies of Russia. For the last five years in business processes of TNK-BP more than two hundred information systems of different degree of complexity most of which part is implemented in DO (subsidiary) of the company are implemented. In terms of information security management of access rights of users to data assets becomes the major task in such heterogeneous environment — Alexander Podolsky, the vice president of TNK-BP company told. — For this reason we made the decision on a project startup — implementation of an IdM-system allowed to minimize the risks on information security connected with management of access rights of employees".

Jet Infosystems won the tender for execution of works for implementation of the IdM-solution for TNK-BP. Specialists of the company were faced by a task to create a system which as much as possible would conform to requirements and business processes of TNK-BP. It was for this purpose necessary to finish standard functionality of a product. During the project specialists of Jet Infosystems developed and implemented business processes of management of lifecycle of accounts and also business processes of management of access rights of employees, resource managements and a role model of providing access rights.

Application programming Role model, allowing to exercise control of access rights in such a way that the privileges of the employee in information systems depend on his position and business division in which it works became an important part of the project.

The standard functionality of a product gives an opportunity of creation of reports on changes of accounts, access rights and about work of business processes. In addition specialists of Jet Infosystems company implemented the system of expanded audit, having finished the mechanism of registration of events and report generation.