IAM Strategy, Conditional Access Uplift and CIAM Blueprint for a National Health Services Organisation
A national health services organisation, designated as critical infrastructure, engaged Modern 42 to define its IAM strategy and deliver targeted security uplifts across its broad identity ecosystem.
At a glance
- Critical infrastructure
- 3-year roadmap
- CA uplift delivered
The situation
This organisation had undergone significant change: the introduction of remote hybrid working, adoption of SaaS-based applications, and a shift in strategic business focus. These changes highlighted the need for an effective, mature Identity and Access Management strategy covering all areas of identity.
The organisation commissioned a strategy to support future business objectives, reduce technology and business risk, and establish appropriate governance. With a broad range of identity types across an extensive ecosystem, the challenge was both strategic and technical.
What we did
- 01
Current State Analysis
We assessed the organisation's IAM posture against the Modern 42 IAM Capability Model, identifying findings and a placemat of pain points and pressure points.
- 02
IAM Data-Driven Insight
Using Apporetum, we deployed data insights and reporting capability to validate the effectiveness of current IAM tooling in managing accounts and entitlements against the Information Security Policy. This provided a baseline for improvement and targeted recommendations for process and tooling uplifts.
- 03
IAM Strategy and Roadmap
We reviewed the Corporate Strategy, IT Strategy, Cyber Strategy and future directions to define a target state for IAM aligned to organisational objectives. We developed a three-year roadmap structured in six-month increments, designed to deliver progressive value with clear business objectives at each stage.
- 04
Conditional Access and CIAM
We delivered a Conditional Access Policy Assessment and Uplift, and developed a CIAM Blueprint to guide the organisation's approach to external identity management.
The outcome
The organisation now has a clear IAM strategy aligned to its business objectives, a practical roadmap for execution, and data-driven insights that inform prioritisation. The Conditional Access uplift has strengthened its security posture, and the CIAM Blueprint provides a foundation for managing external identities at scale.
Modern 42 continues to partner with the organisation as it progresses through its IAM transformation roadmap.
Key wins
- Delivered comprehensive IAM strategy and three-year roadmap for a national critical infrastructure organisation
- Data-driven insights via Apporetum validated and informed the transformation approach
- Conditional Access uplift strengthened the organisation's security posture
- CIAM Blueprint established the foundation for external identity management
- Ongoing partnership progressing through the transformation roadmap