Hi, I am a IT Service Owner and I need to on-board to a Identity & Access Management (IAM) platform(s). How do I get started?
First, you need to answer a couple of questions...Is the IT Service / Application new or existing? Is the IT Service / Application a urgent or non-urgent request based on financial and/or business impact?
I have or can obtain that information so, what do I do next?
Second, you need to engage and collaborate with IAM, Business Owner(s), Architect(s) (Solution / Security), Technical Subject Matter Expert(s) (SMEs), Business Unit Delivery Lead, CS / CST TISO and the Vendor (if applicable).
WOW that's great! Then what would I do?
I have reviewed the Identity & Access Management (IAM) Platform(s) On-boarding Lifecycle and am I responsible for all six phases?
Third, you will need to complete the Identity & Access Management (IAM) Platform(s) On-boarding Lifecycle.
As the IT Service Owner you are ultimately responsible for all six phases of the IAM On-boarding Lifecycle but it is a shared responsibility across the IT Service Owner, IAM, Architecture and Business. It is important to note that the IT Service Owner only needs to complete phases 1-3 initially to on-board a IT Service to a Identity & Access Management (IAM) platform(s).
What are phases 1-3 all about and what if I need assistance?
You should engage and collaborate with IAM, Business Owner(s), Architect(s) (Solution / Security), Technical Subject Matter Expert(s) (SMEs), Business Unit Delivery Lead, CST TISO and the Vendor (if applicable) for each of the following phases:
Phase 1: Choose an IAM Pattern(s)Phase 2: On-boarding ReadinessPhase 3: On-boarding
It is VERY important as the IT Service Owner once the IAM Patter(s) are chosen that you complete / update the following:The IT Service is documented in the CS / CST Cyber Interlock "Shared Plan" based on the date required.Routinely update the CS / CST Cyber Interlock "Shared Plan" to reflect any date changes, financial / business impact, blockers, etc.Attend all CS / CST Cyber Interlock "Shared Plan" Scrum Meetings as required.
Can the IT Service be on-boarded to more than one Identity & Access Management (IAM) platform(s) at the same time?
Yes an IT Service can be on-boarded to one or a combination of Identity & Access Management (IAM) platform(s) at the same time. An example would be an IT Service on-boarded to IntelliMatch and SingleSignOn.CBA (PingSSO) at the same time.
Great and thank you!
You are welcome and remember to reference the Identity & Access Management (IAM) Hub athttps://one.cba/#/content/collection/detail/1236 for all the current IAM information.