Holland Casino’s identification journey began in 2010, when an identity controller was tasked with developing a process to track access to employees and systems. Initially, he used a spreadsheet cross-referenced with files from HR to map employment status to job roles and give them the necessary access accordingly. Based on these changes to the spreadsheet, the administrator manually made all the necessary changes. While it was impressive to finally have a process in place to manage user access, this was incredibly time consuming, error-prone, and frankly unsustainable in the long run.
The identity coordinator and his team started the process of building an automated solution. At first, they chose a legacy tool designed to automate provisioning, but it was quickly too cumbersome and not put into production. Shortly thereafter, Holland Casino chose SailPoint’s governance-based approach and began working on a long-term identity strategy.
With SailPoint, Holland Casino took a step-by-step approach to its identity program. They first focused on role model authentication and user access for five high-risk applications. Role models were created for all positions and permission audits were executed. More than 1,300 instances of inaccurate access were revealed that needed to be addressed by this process alone. Holland Casino then focused on process provisioning to ensure that people who left the company could no longer access it.
SailPoint’s identity platform has been widely adopted internally, and the identity coordinator and his team continue to build identity programs. Recently, Holland Casino decided to extend its identity governance strategy to unstructured data while leveraging its security IQ to manage key file structures that accommodate sensitive data.
Holland Casino’s security team was most affected by the ever-evolving automated identity program along with the organization. By introducing SailPoint, IT managers are estimated to have cut 2-3 hours off their working hours. “Staff boarding is a much faster process and was a huge win for the organization,” they shared.
For advice on separation, the team recommends starting an identity program by taking small steps and focusing on delivering an immediate “win” at each step. They also recommend working with a trusted partner to help develop a long-term identity strategy along the way.