Retail Property / Real Estate — 10

End-to-End PAM Capability Uplift for a Major Australian Retail Property Group

A major Australian retail property group partnered with Modern 42 over multiple years to embed a mature Privileged Access Management capability.

Industry

Retail Property / Real Estate

Sector

Property Management

Engagement Type

Strategic Advisory, Analysis and Service Design, Architecture, Engineering

Technologies

BeyondTrust (PasswordSafe, Privileged Remote Access), Apporetum

Frameworks

ASD Essential Eight (Restrict Administrative Privileges)

Duration

Multi-year

Retail PropertyPAMBeyondTrustEssential EightIAM StrategyAccess ReviewsService DesignVendor AccessBlended Team

The Situation

This organisation approached the market looking for an IAM partner to assist with policy uplift and IAM remediation planning. Modern 42 was the successful respondent and has since become the organisation's ongoing IAM Strategic Advisory and services partner. The initial engagement established the foundation: a current state analysis, IAM strategy definition and a comprehensive three-year roadmap. The roadmap identified Privileged Access Management as the highest-priority uplift, leading to a full end-to-end PAM program.

What We Did

Assessment and Strategy

IAM Current State Analysis against the Modern 42 IAM Capability Model. IAM Strategy definition aligned to overarching ICT and Cyber strategies. Three-year roadmap with actionable work packages prioritised by risk and business value. IAM Policy Uplift and Monitoring Uplift. IAM Audit Response and Improvement Plan.

PAM Program Delivery

PAM Blueprint and Platform Options Analysis (impartially assessed against three market-leading vendors). PAM Discovery and remediation of existing privileged access. PAM Service Design and Process Design and Implementation. PAM Architecture and Design. PAM Solution Deployment (BeyondTrust PasswordSafe and Privileged Remote Access). PAM onboarding of core infrastructure and business-critical applications.

Access Governance

IAM Business Rules and Service Design. Access Review of 24 critical applications. Access Review of third-party vendor access.

The Outcome

The organisation has embedded an organisational PAM capability encompassing people, process and technology, aligned to the ASD Essential Eight. Privileged access is now governed through defined rules and processes, supported by tooling that secures core infrastructure and critical applications. The PAM capability was deployed with full documentation, including service design, standard operating procedures and operational guides, ensuring long-term sustainability. Modern 42 continues as the organisation's IAM partner, now supporting the next phase: Identity Governance and Administration platform implementation and capability rollout.

Key Wins

✓Multi-year strategic partnership evolving from initial assessment to full capability delivery
✓PAM capability deployed and aligned to ASD Essential Eight requirements
✓Impartial vendor assessment across three market-leading PAM platforms ensured best-fit selection
✓Privileged access governance embedded across people, process and technology
✓Completed access reviews of 24 critical applications and third-party vendor access
✓Ongoing partnership now extending into Identity Governance and Administration

Ready to move forward? Pick your path.

Whether you need a quick conversation, a structured assessment, or hands-on engineering — we’ve got an engagement that fits.

Start a conversation

30 minutes. No commitment. Let’s understand your environment and discuss where identity security can add the most value.

Book a call

Get an assessment

Identity maturity assessment, gap analysis, or architecture review. Walk away with a clear picture and a prioritised roadmap.

Explore advisory

Engage our engineers

PAM migration, identity modernisation, CIAM build, or platform uplift. Our specialist engineers deliver what your team needs.

Explore engineering