IAM Strategic Advisory and Data-Driven Access Reviews for a Federal Government Authority
An Australian Government statutory authority engaged Modern 42 to review its workforce identity capability and develop a prioritised uplift plan, supported by data-driven access insights.
At a glance
- Apporetum access reviews
- Data-driven roadmap
- Six-month increments
The situation
This authority went to market for a comprehensive review of its workforce Identity and Access Management capability. The objectives were clear: assess the current state, define target-state requirements, prepare an options paper with a prioritised implementation plan, and undertake access reviews of critical applications to understand whether access was being appropriately managed.
What we did
- 01
Current State Analysis
We assessed the authority's IAM posture against the Modern 42 IAM Capability Model, identifying findings, pain points and pressure points requiring attention.
- 02
IAM Requirements
We reviewed the Corporate Strategy, IT Strategy, Cyber Strategy and future directions to define target-state requirements aligned to organisational objectives.
- 03
IAM Options Paper
We developed a three-year implementation plan designed to deliver incremental value, with business objectives met in each six-month period, along with resource and dependency mapping.
- 04
Access Reviews
Using Apporetum, we conducted access reviews across critical applications, providing data-driven insight into how effectively access was being managed against policy.
The outcome
Modern 42 provided the authority with a comprehensive view of its IAM current state and a clear plan for uplift. The data-driven access insights proved particularly valuable, enabling the authority to prioritise areas where cyber risk could be addressed early through targeted process improvements.
Key wins
- Delivered a complete IAM current state assessment, requirements definition and implementation plan
- Conducted access reviews across critical applications using Apporetum
- Data-driven insights directly informed roadmap prioritisation, identifying quick-win opportunities for risk reduction
- Roadmap structured in six-month increments for progressive value delivery