REDUCING COMPLEXITY IN IDENTITY AND ACCESS MANAGEMENT
IN ASSOCIATION WITH
PwC
DIGITAL REPORT 2020
02
REDUCING COMPLEXITY IN IDENTITY AND ACCESS MANAGEMENT
03
www.pw c. com
PWC
PWC’S IVO VAN BENNEKOM AND DUANE CARSTENS ON THE ROLE OF IDENTITY AND ACCESS MANAGEMENT IN FACILITATING DIGITAL TRANSFORMATION
P
wC has identified a number of trends. affecting organisations, centered around a digital landscape that was growing in
complexity even before the COVID-19 pandemic. “We are in a very strange and unprecedented situation - the ‘new normal’, as we call it within PwC,” 04
says Ivo Van Bennekom, Director, Digital Identity. “What that new normal means, is that it’s accelerated a big change that was already happening prior to the COVID-19 situation, where we see clients changing from a traditional value chain that was very direct, to starting to become more part of a digital ecosystem, collaborating to delivering a variety of services towards the end consumer.” Increased digital complexity and ever-changing employee roles within an organisation means identifying and allowing the access of users is all the more important. “Managing identity is vital, but it’s also a daunting task for many organisations who lack proper identity and access management (IAM) for governing their digital identities,” says Duane Carstens, Director, Cybersecurity & Privacy. “That’s regardless of their IAM service maturity
05
www.pw c. com
PWC
“ W E ARE IN A STRANGE AND UNPRECEDENTED SITUATION -THE ‘NEW NORMAL’, AS WE CALL IT WITHIN P W C” — Ivo Van Bennekom, Director, Digital Identity, PwC
and whether they are adopting or replacing digital technology through their digital transformation”. To help organisations with digital identity, the company maintains more than 950 digital identity professionals as part of a broader cyber team that is 3,500 strong, with extensive experience across various industries. PwC consequently differentiates itself from competitors in the space along a number of lines. “One of the biggest benefits that clients see when work-
06
ing with us, is that we can deliver an integrated approach to the whole breadth and depth of cybersecurity and digital identity management,” says Van Bennekom. Carstens believes in the transformative power of PwC’s cyber business. “The purpose of our cyber business is to help build a secure digital society. This is done through three key aspects, including 1) serving our clients, 2) extensive research and disruption to the market and to threat actors which is done by challenging conventional thinking, and 3) shaping society by being an exemplar. These three key aspects are encompassed by our DNA which includes
empowering an innovative and
which companies must respond to.
diverse team.
“We see key emerging cybersecurity
PwC is equally focused on forging
risks as a result of COVID-19,” says
strong bonds with their customers.
Carstens. “There are a lot of opportun-
“Our value is defined by the relation-
istic threats at the moment.
ship with the client,” says Carstens.
The increasing attacks on businesses
“That relationship is born from an
means that identity and access man-
intelligent, engaged, highly collabora-
agement continues to be of paramount
tive process. It’s about helping them
significance, in the risk management
through their digital transformation
priorities of organisations.”
journey, through their challenges and
“The focus should be on provid-
providing the insight to assist clients
ing the right people, with the right
to reach their objectives.”
access, at the right time through the
The ongoing COVID-19 pandemic is resulting in innovative attack vectors
identification, authentication and app ropriate authorisation information
E X E C U T I V E P R O FILE :
Ivo Van Bennekom Title: Director, Digital Identity Location: Arnhem-Nijmegen Region Ivo leads the PwC Digital Identity Impact Center for the EMEA region. Ivo has over 15 years of experience within the digital technology space, with a specific focus on global identity market patterns and translating them to business objectives for clients. He is a strategic and tactical Subject Matter Expert on digital identity topics advising Client Senior management. Ivo works for a variety of sectors, with a main focus on Finance, Retail and high-tech firms. He is engagement leader of several global Cyber Security & Digital Identity programs. www.pw c. com
07
PWC
1998
Year founded
9,400
Number of employees in Africa
27,600
Number of employees globally 08
security principles” Carstens adds. “Identity and access management is not just about the technology, it also involves the organisation’s people, processes and governance on the service. This holistic approach will provide secured flexibility for your remote workforce to remain productive and ‘work from anywhere’.” Defending against those threats requires capabilities across a range of arenas. “Digital identity can roughly be carved up into four different areas,” says Van Bennekom. “One is the workforce identity space, so access management, but also identity governance. Second, is privileged access management, for users such as database administrators that, basically with one press of a button, can wipe out a complete IT estate. Thirdly, we have customer identity, from B2B customers to consumer scenarios, or even governments and how they interface with their citizens. Lastly, we have artificial intelligence, RPA and the identity of things.” With such a wide range of areas to be aware of, a holistic approach is necessary. “What’s most important www.pw c. com
09
BUSINESS AT THE SPEED OF INNOVATION Privileged Access Management for the New Digital Landscape. Move fearlessly forward into the new digital landscape with CyberArk and secure access to the organization’s entire digital business, protecting all privileged credentials.
LEARN MORE
“ M ANAGING IDENTITY IS VITAL, BUT IT’S ALSO A DAUNTING TASK FOR MANY ORGANISATIONS” — Duane Carstens, Director, Cybersecurity & Privacy, PwC
E X E C U T I V E P R O FILE :
Duane Carstens Title: Director, Cybersecurity & Privacy Location: City of Johannesburg, Gauteng, South Africa Duane is an Associate Director in the PwC cybersecurity and privacy practice, providing comprehensive cybersecurity solutions to assist businesses with assessing, building and managing their cybersecurity capabilities, and enabling effective management to a myriad of potential threats from strategy to execution. Duane’s working experience spans over 15 years working with listed entities across various industry sectors, in numerous countries, and within multiple roles. He is engaged in the understanding of technology and trends, and being able to articulate and make comprehensive, pragmatic decisions for businesses and consumers. Through Duane’s career, he has worked on security programs / ISMS development, vendor & client management, assessments, governance, risk & compliance, formalizing innovative business operating models, improving processes and optimizing controls, while achieving strategy and objectives.
www.pw c. com
11
PWC
12
“ O UR VALUE IS DEFINED BY THE RELATIONSHIP WITH THE CLIENT” — Duane Carstens, Director, Cybersecurity & Privacy, PwC
in terms of digital identity is that management should have a complete vision for their identity and access management program. Coupled with that vision should be capability in managing and governing identity, as well as controlling and monitoring access,” Carstens says. “Capabilities have to run across different groups, including human and non-human users, who
13
will be in contact with your organisation
fulfill a lot of those use cases,” adds
and the assets that you’re trying to
Van Bennekom. “Cloud solutions, for
protect, from applications in the cloud,
instance, simplify a lot of the technical
to on-premise solutions, databases and
digital identity complexity while also
operating systems and the data that
reducing the cost of operating such
resides on these assets.”
a system.” The effective utilisation of
“The vendors that we typically work
appropriate technologies will allow
with are on a journey together with
organisations to spend more time on
us to actually decrease the technol-
what really matters: managing business
ogy debt that you need in order to
risks related to digitalisation. www.pw c. com
PWC
PwC BriqBank helps with digital identity CLICK TO WATCH
|
0:41
14 An accomplished cybersecurity
already in the fourth wave of digital
strategy is a vital complement to digital
transformation. Agility is becoming
transformation. “Digital transformation
more important and, with that, the
can result in a company becoming a
required agility of cyber defence is
target for attackers because they know
also increasing. We’re also bringing
that there’s a lot of volatility within
in consultants from other PwC com-
the organisation,” says Van Bennekom.
petencies to understand business
“We understand how to integrate
processes and take the right approach
cybersecurity into those types of
to help organisations become smarter
transformations, because technology
in terms of cybersecurity defense,”
continues to be the driver and it’s evident says Van Bennekom. that security is an enabler of those digital journeys.” PwC consequently ensures its cyber
While as a consulting and advisory house PwC remains technology and vendor agnostic, SailPoint, OKTA and
defence offering keeps up with the
CyberArk are some of the solutions
pace and evolving trends. “We are
it employs to help clients achieve
“ W E ARE ALREADY IN THE FOURTH WAVE OF DIGITAL TRANSFORMATION” — Ivo Van Bennekom, Director, Digital Identity, PwC
will continue to add the desired value to our client engagements.” Going forward, the two are clear that PwC stands in good stead to assist not only its clients but society at large with transformation in access management, decreasing complexity and improving the utility of digital envi-
their goals. “The technology vendors
ronments. “We’re focused on building
that we work with are a big part of
trust in society and solving important
helping clients to decrease their IT
problems while making sure that
complexity so that there’s more room
we are looking at this from a broader
to create business value,” says Van
perspective rather than just creating
Bennekom. “Typically, the vendors
locks,” says Van Bennekom. “You need
that we work with are capable of cover-
to understand what an organisation
ing a whole ecosystem of use cases
wants to achieve from a business
and different types of identities, all
perspective to understand how
from the cloud.”
cybersecurity can support that most
The companies with whom PwC
effectively. We’ll continue integrating
works with are therefore carefully
all those different competencies to
selected through a consultative
decrease the complexity and the risks
approach, based on product value
of our clients’ ecosystems.”
and market need. “Digital identity for us as a business is one of our growth priorities over the next few years,” says Carstens. “Together with the right partnerships, matching a solution to a client problem, and our robust methodologies supported by our global network of subject matter experts, we www.pw c. com
15
PWC 4 LISBON LANE WATERFALL CITY JUKSKEI VIEW 2090 SOUTH AFRICA
P0WERED BY
T +27 (11) 797 5478
www.pwc.com