One of the major challenges was a solution that could manage four times as many external users as internal, which meant that NCC was looking for a federated solution incorporating identity governance.
The Council wanted to become a federated identity provider and service provider within the public sector. Its partners include the Norfolk Fire and Rescue Service and Great Yarmouth Council–a local town council. Future data partnerships will include the National Health Service, and local and national law enforcement.
The scheme is designed to eliminate geographical boundaries and provide data on demand to multiple public sector organizations in the county of Norfolk.
The service will provide huge efficiency benefits to health-care services, child services, and law enforcement as previously isolated data becomes readily available through a federated service.
The costs savings were important too. Like most local government organizations in the U.K., NCC continuously needs to reduce its expenses. The efficiencies in HPE’s IAM solution will help NCC meet its budgetary targets.
HPE has helped NCC reduce costs drastically by replacing time-consuming manual processes with automated functionality. For example, by automating on-boarding process requests, change requests, password resets, and administrative processes are no longer performed manually; it’s estimated that NCC will save about £3.2m (£2m) annually.
NCC was pleased with the solution. “It’s been a huge success for us, it just worked. We’re very excited about the future with this IAM solution.” said a Council spokesperson.
The thinking behind the project
We asked the key people behind the project why it proved to be successful.
Why do you think HPE has been shortlisted?
Many Identity and Access Management (IAM) projects are very technology focused with little interaction with a client’s actual business. The HPE team became part of the internal project and helped emphasize the business benefits. It provided the perfect combination of security, technical solution, business process improvement, and controlled change.
What stands out about the HPE entry?
AM projects are complex integrations into a client’s business – They automate identity governance, joiners, leavers, and general identity processes. The NCC project successfully delivered this complex business change using advanced IAM. Techniques that directly addressed the business need.
How are identity management solutions evolving and changing with today’s security challenges?
As HPE Security Services has observed, in a typical business, more than 50% of employees use personal devices to access business-critical applications. This moves the focus from the perimeter to the management of identity. User-account management is the center of enterprise security and is a targeted vulnerability. Effective identity governance and privileged user management, mitigate many of the risks of unmanaged identities.
Why do you think the HPE solution could be viewed differently from other identity management solutions?
Comprehensive Identity Management has always been notoriously difficult to deliver. The IAM project at NCC focused on integrating with the business from day one of the design. We worked closely with the entire business to deliver the changes and a solution that met business needs. Ultimately, this solution management solution will enable NCC business to significantly reduce the costs of the services it delivers to the public, as well as provide data support to other county stakeholders.