End-to-End PAM Capability Uplift for a Major Australian Retail Property Group
A major Australian retail property group partnered with Modern 42 over multiple years to embed a mature Privileged Access Management capability.
At a glance
- BeyondTrust deployed
- 24 app access reviews
- Multi-year partnership
The situation
This organisation approached the market looking for an IAM partner to assist with policy uplift and IAM remediation planning. Modern 42 was the successful respondent and has since become the organisation's ongoing IAM Strategic Advisory and services partner.
The initial engagement established the foundation: a current state analysis, IAM strategy definition and a comprehensive three-year roadmap. The roadmap identified Privileged Access Management as the highest-priority uplift, leading to a full end-to-end PAM program.
What we did
- 01
Assessment and Strategy
IAM Current State Analysis against the Modern 42 IAM Capability Model. IAM Strategy definition aligned to overarching ICT and Cyber strategies. Three-year roadmap with actionable work packages prioritised by risk and business value. IAM Policy Uplift and Monitoring Uplift. IAM Audit Response and Improvement Plan.
- 02
PAM Program Delivery
PAM Blueprint and Platform Options Analysis (impartially assessed against three market-leading vendors). PAM Discovery and remediation of existing privileged access. PAM Service Design and Process Design and Implementation. PAM Architecture and Design. PAM Solution Deployment (BeyondTrust PasswordSafe and Privileged Remote Access). PAM onboarding of core infrastructure and business-critical applications.
- 03
Access Governance
IAM Business Rules and Service Design. Access Review of 24 critical applications. Access Review of third-party vendor access.
The outcome
The organisation has embedded an organisational PAM capability encompassing people, process and technology, aligned to the ASD Essential Eight. Privileged access is now governed through defined rules and processes, supported by tooling that secures core infrastructure and critical applications.
The PAM capability was deployed with full documentation, including service design, standard operating procedures and operational guides, ensuring long-term sustainability.
Modern 42 continues as the organisation's IAM partner, now supporting the next phase: Identity Governance and Administration platform implementation and capability rollout.
Key wins
- Multi-year strategic partnership evolving from initial assessment to full capability delivery
- PAM capability deployed and aligned to ASD Essential Eight requirements
- Impartial vendor assessment across three market-leading PAM platforms ensured best-fit selection
- Privileged access governance embedded across people, process and technology
- Completed access reviews of 24 critical applications and third-party vendor access
- Ongoing partnership now extending into Identity Governance and Administration