The Importance of
Compliant Identity &
Access Management
in Insurance
Tuncay Küçüktaş - Aksigorta
Assistant General Manager, CIO
What is Compliant Identity & Access Management ?
..is about the end-toend life cycle
management of digital
identities
Tuncay Küçüktaş / 2
The Importance of Compliant IAM in Insurance
Tuncay Küçüktaş / 3
Why important ?
Tuncay Küçüktaş / 4
Why important ?
Tuncay Küçüktaş / 5
Why important ?
Tuncay Küçüktaş / 6
Why important ?
Tuncay Küçüktaş / 7
How IAM Supports Compliancy
Identity and access management (IAM)
technology and methods provide direct
support for the compliancy requirements for;




fraud reduction
policy enforcement
risk assessment
compliance & auditing
Tuncay Küçüktaş / 8
Typical IAM Framework - Today
IAM and GRC Complements Each Other
Typical User Challenges
Source : SAP
Tuncay Küçüktaş / 11
Compliant, Business-Driven Identity Management
Process Flow
Source : SAP
Tuncay Küçüktaş / 12
Common IAM areas (business value & risk reduction)
Tuncay Küçüktaş / 13
How to Implement Compliant IAM ?
Develop a strategy
Don’t think of Compliant IAM as an IT-only initiative
Be prepared for objections and concerns
Avoid the “Big Bang” approach
Don’t rush
Create your inventories
Start with enterprise-level roles first
Tuncay Küçüktaş / 14
Potential Impacts of NonCompliancy

costs and higher
 Lower
Severe
penalties
in
cases
of
productivity
noncompliance
 Flexibility
Business
 Compliance
High financial costs to comply
with
 Improved life cycle of
Benefits
regulatory
requirements
employees, partners, and
 customers
Diversion of executive attention as
 Moving
management
effort the
is focused
on compliance activities
responsibility from IT to
rather
than
business
priorities
business process owners
Tuncay Küçüktaş / 15
Challenges
!
 Incorrect Strategy
 Staff resistance
 Cultural and political
realities
 Lack of skills
 Bureaucracy
 Scope creep
 Inappropriate
automation
Tuncay Küçüktaş / 16
By year-end 2020, 80% of
user access will be
shaped by new mobile
and non-PC architectures
that service all identity
types regardless of origin
Tuncay Küçüktaş / 17
By 2020, 60% of all digital
identities interacting with
enterprises
will come from external
identity providers through
a competitive marketplace
Tuncay Küçüktaş / 18
By 2020, the Internet of
Things will redefine the
concept of identity
management
to include what people
own, share and use
Tuncay Küçüktaş / 19
 Cloud and Mobility
 The Internet of Things
 Growing more digitalized
marketplace
 Identity Analytics
Predicts
For
Future
THANK YOU