IDM requirements analysis for Höegh Autoliners
Höegh Autoliners wanted to improve cooperation with its external partners, and engaged Cloudworks to find out how IT could contribute. Now the company has a concrete digitization strategy that will increase security and simplify management.
Cloudworks’ insight into security, access control and automation has been crucial in identifying areas of improvement and capabilities in our administrative processes.
Vegar Bøthun, CIO
Höegh Autoliners is a leading global provider of transport and logistics services within the “Roll-on Roll-off” (RoRo) segment. The organization has 400 employees from 30 nationalities working out of 20 offices around the world, with headquarters in Oslo.
Automation = Efficiency
The analysis project was based on the hypothesis that automation of user provisioning, such as external agents, would save working hours, lead to standardization and reduce waiting time.
A prerequisite for automation planning was an analysis of the organisation’s structure and the most important processes for mapping user profiles, role/responsibilities, and segregation of duties.
No two organisations are the same, and it is important to arrive at the right number of roles. Too few roles could include too much access, but too many would be difficult to manage – a balance is needed.
Who has access to what, and who approves the access?
Höegh asked for suggestions for a security concept that would give their business the necessary tools to be able to answer these questions. One suggestion was to delegate approval workflow for authorisation and access requests to department managers and subcontractors, helping raise awareness and increasing security.
The analysis project recommended processes and technologies that would be able to realize this objective.
As soon as the need for automation was clear, it was necessary to assess the practicalities for potential solutions. This involved the technical analysis of the most important applications. How would the integration be performed, and how much effort would be required? Which applications should be in scope for the automation project?
This part of the analysis was critical to define realistic objectives for a future implementation. The final report provided answers to these questions and created a good basis for the subsequent procurement process.