Kyivstar will manage user rights on Oracle

In November, 2012 Kyivstar and Jet Infosystems company announced project completion on creation of a management system and control of access rights based on the product Oracle Identity Manager. Received Kyivstar the tool for structuring and ordering of processes of management of accounts allowed to reduce much waiting time of obtaining access rights, to reduce risks of the wrongful acts connected with unauthorized issue of powers and to simplify investigation of the corresponding incidents of cybersecurity.

Prerequisites of the Project

Number of employees Kyivstar – about 5000. For effective work each of them is allocated with a permission set for access to information systems which in the company about 120, and the quantity of the existing accounts is measured by tens of thousands. Processing of such number of data turned management of access rights of employees into the difficult multistage process requiring considerable time and labor resources.

For example, scheduled inspection of correctness of the powers conferred to employees in such conditions could take more than three months. All this formed the basis for start of the large-scale project on creation of a management system and control for access rights of employees Kyivstar.

Project Progress

For implementation the centralized solution on user account control of Oracle Identity Manager which is the best in the class was selected. The Jet Infosystems company, Oracle Platinum Partner having experience of creation and development of the systems of the class IdM became the contractor of the project.

During the project processes of management of access rights, accounts and a role model of providing access rights to employees were developed and implemented.

Project Result

As a result in the company there was an opportunity to provide control of access rights of each employee on the basis of his provision in an organization structure. The created system is completely adapted according to the business processes existing in Kyivstar.

The most significant effect is gained when using functionality of management of access rights of call center specialists. It allows to save considerably time required for providing powers to trainees due to mass creation of accounts in a system on the basis of a template in the Excel format and automatic generation of requests for a request of powers. At the same time control and updating of access rights of employees according to change of their powers at acceptance to the state, transition from department to department or leaving on outsourcing are provided.

"The first practical results appeared already at a system implementation stage: data on the created accounts in the connected systems were structured, and each such record is personalized, –Andrey Peshy, CIO of Kyivstar company comments. – Using Oracle Identity Manager the processing speed of requests for providing the rights many times increased. Since September of last year more than 50,000 such requests are registered - it is about more than 100 requests every day. Earlier on their processing it was required up to 10 – 15 days, with system implementation of control and management of access rights this time was reduced to 1 – 2 days".

The functionality of the created system gives to heads of divisions to the company an opportunity in the online mode to obtain the complete information about access rights of employees to different information systems in visually clear form. It allows to make reasoned decisions on a response or providing access rights of each employee to information systems of the company. Moreover, it helps each user to see the powers and to control their relevance according to the changing job responsibilities.

Development Plans

Today 40 most critical are successfully connected to a management system and control of access rights for business of Kyivstar company of information systems. The further plans of the company are connection to it of all existing ICs.