Published on 31 Aug 2011
"Security of the system is important in keeping our systems up and running. Each hour the systems are down can cost us R$1 million (US$620,000)." - —Rodrigo Salles, Security and Governance Manager, Banco Bonsucesso
Customer:
Banco Bonsucesso
Industry:
Banking, Financial Markets
Deployment country:
Brazil
Solution:
Security: Identity and Access Management
IBM Business Partner:
VANguard
Overview
Founded in 1992, Banco Bonsucesso operates throughout Brazil offering payroll loans and credit solutions. The bank serves more than 100,000 customers and has around 30 offices and 1,500 points of sale throughout Brazil.
Business need:
Banco Bonsucesso needed to strengthen security while simplifying access to information.
Solution:
Working with IBM Business Partner VANguard, Salles’ team deployed an integrated identity management and single sign-on solution from IBM.
Benefits:
Reduces help desk costs by approximately R$32,000 (US$20,000) per year; Decreases time to provision new users from up to five days to just two hours, and to reset passwords from four hours to seconds; Improved system security through fast deprovisioning of users when needed; Enables security team to support new projects without hiring additional staff
Case Study
|
Overview |
| Banco Bonsucesso Belo Horizonte, Brazil www.bancobonsucesso.com.br |
| Solution components: |
· IBM Tivoli Identity Manager |
| IBM Business Partner: |
|
Founded in 1992, Banco Bonsucesso operates throughout Brazil offering payroll loans and credit solutions. The bank serves more than 100,000 customers and has around 30 offices and 1,500 points of sale throughout Brazil.
The need
As Banco Bonsucesso grew, so did its IT infrastructure. It resulted in a diverse set of security standards and sign-on procedures across nearly 15 internal applications and 30 web applications.
According to Rodrigo Salles, Security and Governance manager for the bank, moving to an enterprise single sign-on model was important to strengthen security while simplifying access to information. “We have more than 500 employees and 700 external agents accessing bank information to provide loans,” says Salles. “We needed to guarantee that the right people were given the right access and to demonstrate compliance with Basel II and Brazilian regulatory standards. We also wanted a solution to help us quickly deprovision access when people left the bank. Before, we had to manually revoke a user’s access rights to each application individually. Finally, we found that many of the calls to our help desk were password related. Verifying the user’s identity and resetting a password could take up to four hours, which was costly and impacted user productivity.”
The solution
Working with IBM Business Partner VANguard, Salles’ team deployed an integrated identity management and single sign-on solution from IBM. This solution helped ensure that users had access to the appropriate applications and provided simplified access to IT resources. Now, staff and agents can log in to the bank’s network once and gain immediate access to all the applications they’re authorized to use. Previously users had to separately log in to 15 - 30 different applications to build a loan package for a client. “IBM provided a complete solution, whereas other vendors provided point products,” says Salles.
With the identity management system, new users can be granted access to applications in less than two hours—a process that before could take from two to five days. As employees leave the company or agents change roles, the security team can immediately deprovision access across all systems with a few keystrokes to keep the bank’s data secure. Integrated password self-service capabilities allow users to easily reset their passwords online without the assistance of help desk staff. This has helped not only improve staff productivity, but also reduce the number of help desk calls, saving money and alleviating IT and security staff of the task.
“Before, it could take up to four hours for us to reset a password,” says Salles. “Now it can be completed by the user instantly. As a result, we have reduced help desk costs by approximately R$32,000 (US$20,000) per year.”
These improvements in efficiency have enabled Salles’ team of just four people to continue to strengthen security, without having to hire additional resources. This, he says, is important to the company’s financial success. “Security of the system is important in keeping our systems up and running,” says Salles. “Each hour the systems are down can cost us R$1 million (US$620,000).”
The benefit
• Reduces help desk costs by approximately R$32,000 (US$20,000) per year
• Decreases time to provision new users from up to five days to just two hours, and to reset passwords from four hours to seconds
• Improved system security through fast deprovisioning of users when needed
• Enables security team to support new projects without hiring additional staff
For more information
To learn more about IBM security solutions, please contact your IBM sales representative or IBM Business Partner, or visit the following website: ibm.com/tivoli
For more information about VANguard, visit: www.vanguard-it.com.br
Components
IBM products and services that were used in this case study.
Software:
Tivoli Access Manager for Enterprise Single Sign-On, Tivoli Identity Manager
Legal Information
© Copyright IBM Corporation 2011 IBM Corporation Software Group Route 100 Somers, NY 10589 U.S.A. Produced in the United States of America August 2011 All Rights Reserved IBM, the IBM logo, ibm.com and Tivoli are trademarks of International Business Machines Corporation, registered in many jurisdictions worldwide. A current list of IBM trademarks is available on the web at “Copyright and trademark information” at ibm.com/legal/copytrade.shtml . Other company, product and service names may be trademarks or service marks of others. The information contained in this documentation is provided for informational purposes only. While efforts were made to verify the completeness and accuracy of the information contained in this documentation, it is provided “as is” without warranty of any kind, express or implied. In addition, this information is based on IBM’s current product plans and strategy, which are subject to change by IBM without notice. IBM shall not be responsible for any damages arising out of the use of, or otherwise related to, this documentation or any other documentation. Nothing contained in this documentation is intended to, nor shall have the effect of, creating any warranties or representations from IBM (or its suppliers or licensors), or altering the terms and conditions of the applicable license agreement governing the use of IBM software. TIC14186-USEN-00