Access Lifecycle & Entitlement Activity Monitoring

This panel examines how organizations can move from periodic access reviews to continuous assurance using event-driven lifecycle automation and dynamic entitlement evaluation. As hybrid and multi-cloud environments grow more complex, maintaining least privilege in real time has become essential for reducing risk and improving operational resilience. Experts will discuss key architectural patterns, integration requirements, and practical approaches for automating identity decisions at scale. Attendees will learn how continuous assurance strengthens compliance, streamlines operations, and ensures that access remains aligned with business context and policy.

Identity & Access Management in large banking groups is rarely a pure technology issue! It is an organizational challenge that spans Group functions, IT service providers and the business entities. This session presents how KuppingerCole helped a leading Central and Eastern European banking group move from distributed, IT-centric IAM initiatives to a coherent, group-wide IAM program. Starting from a capability-based view (Identity Fabric and IAM Reference Architecture), the project created a shared language that business, risk, HR, IT and local entities could all use. On this basis, a Group IAM Strategy was defined that clarifies “who does what”: Group sets principles and minimum standards, the internal IT provider operates central IAM services, and entities run their processes within a common framework while business and control functions own access decisions. A matching target architecture with central identity services, a standardized IGA layer and harmonized IAM was then designed to mirror this operating model. Attendees will learn how aligning governance and architecture unlocks real value: better regulatory alignment, clearer accountability, and a non-siloed IAM program that is ready for today's and future requirements.