| Identity Management

Assess

• We conduct a discovery assessment to understand your unique business and technology needs, use cases, and infrastructure. 
• The assessment focuses on authentication/authorization, SaaS account provisioning, SSO, MFA, password reset, B2C, and any other aspects of access management. 

Plan

Based on our assessment findings, we’ll create a project roadmap that: 

• Defines how the Okta solution addresses your specific business and security needs 
• Establishes project priorities and identifies potential pitfalls 
• Outlines the project timeline 
• Details how the solution will be managed and maintained after implementation 

Build

We use the approved plan to deploy Okta in the environment. 

The Tevora mature project management office will ensure: 

• A robust implementation process 
• Accurate project tracking 
• Regular reporting to stakeholders 

Run

• After implementation, we thoroughly test the Okta instance to confirm it meets our performance and security expectations. 
• Next, we launch in a production environment. 
• Finally, we confirm the right processes and resources are in place to assure long-term success in your complex and changing threat environment. 

Assessment

Tevora’s experts conduct a detailed review of your Identity and Access Management (IAM) environment to identify security risks. 

• The assessment consists of interviews and documentation review. 
• We evaluate all IAM architecture components including Governance, Federation, Access Management, Identity Management, and Credential Management. 
• We document information security risks found in your current IAM environment.

Remediation Roadmap

After the comprehensive assessment of your IAM environment, we prepare a detailed remediation roadmap to guide you in implementing your state-of-the-art IAM program. 

• The roadmap includes detailed recommendations for process and procedure improvements and technical solutions for remediating all identified security risks. 
• This multi-phased remediation roadmap is prioritized by risk and impact, outlining detailed steps for implementing the recommendations.

Assess

• We conduct a discovery assessment to gain an understanding of your unique business and technology needs, use cases, and infrastructure. 
• The assessment focuses on access requests, access certifications, separation of duties, entitlement provisioning, password management, and any other aspects of identity governance. 

Plan

Based on the assessment findings, we create a project roadmap that: 

• Defines how the SailPoint solution addresses your specific business and security needs 
• Establishes project priorities and identifies potential pitfalls 
• Outlines the project timeline 
• Details how the solution will be managed and maintained after implementation 

Build

We use the approved plan to deploy SailPoint in the environment. 

The Tevora mature project management office will ensure: 

• A robust implementation process 
• Accurate project tracking 
• Regular reporting to stakeholders 

Run

• After implementation, we thoroughly test the SailPoint instance to confirm it meets our performance and security expectations. 
• Next, we launch in a production environment. 
• Finally, we confirm the right processes and resources are in place to assure long-term success in your complex and changing threat environment.

Risk-Based Authentication

We implement high-level Risk Based Authentication (RBA) that: 

• Uses behavioral analytics to identify high-risk user sessions 
• Terminates high-risk sessions or asks for frequent re-authentication 

Integrated Authentication

• We ensure all systems are integrated into a centralized authentication and authorization system. 
• Any systems that cannot be integrated into the centralized system should be augmented with tunnel and gateway interfaces to ensure they are properly secured. 

Device Posture Monitoring

• We ensure that any endpoint device or system involved in a transaction is trusted and has been authorized for use by the user initiating the transaction. 
• We set up behavioral analytics to continually evaluate device usage for indicators of compromise and behavioral anomalies. 

Access Control

• We apply automated authorization across all functions within the environment. 
• We base access controls on business requirements and update them frequently to stay current with organizational and business environment changes.