Traditionally, the heart of Identity Governance and Administration (IGA) is Role Based Access Control. We define granular access rights to different roles, care about their inheritance and conflict of interest when assigning them to different identities. However, there is one question what IGA doesn’t answer. To whom does the identity belong. And when we say to whom, we don’t mean the usual characteristics an identity in an enterprise context has, like manager, department, location, etc. We mean the physical person behind it – what is his background and are there any red flags about him?
To bridge this dangerous security gap, RabbIT Solutions has partnered with identity management experts IDVKM.
Together, we have integrated RabbIT’s advanced screening technology directly into one of the IGA solutions in their portfolio – One Identity Manager, a market and a product leader according to analysts like KuppingerCole. This creates a new Identity Profiling functionality designed to enhance internal security and reduce the risk of having rogue internal and external employees.
Why this matters right now
New European regulatory frameworks like NIS2 and DORA demand a higher state of supply chain security. Companies are now legally responsible for the third-party contractors and vendors who have access to their assets. If you cannot verify the reliability of your contractors, their corresponding access limited by time, function and reliability, you are exposed to massive compliance risks and internal threats.
How Identity Profiling works
When your company onboards a new contractor the system builds an instant AML/CFT Client Risk Profile according to the contractor`s personal data.
- PEP and Sanction Screening: Checking political exposure and global sanction lists
- Criminal Screening: Checking international most-wanted and terrorist watchlists.
- Adverse Media Screening: Scanning for negative public information.
Once the person is confirmed to be trustworthy, their digital identity is authorized and it can get role and rights assignment as needed in terms of function and time
Key benefits for businesses
- Background Checks in Minutes: The module screens relevant lists instantly without waiting for answers from state institutions.
- Periodic Monitoring: The system can automatically re-check contractors at scheduled intervals to ensure they remain compliant throughout the contract term.
- Tailored Risk Criteria: You can customize the screening depth and risk criteria based on the specific role and access level of the contractor.
By knowing exactly who your contractors are, you protect your assets from malicious internal actors, ensuring NIS2 and DORA compliance in terms of supply chain security
