The Importance of Compliant Identity & Access Management in Insurance Tuncay Küçüktaş - Aksigorta Assistant General Manager, CIO

What is Compliant Identity & Access Management ? Tuncay Küçüktaş / 2.. should be designed to initiate, modify, track, record, and terminate the specific identifiers associated with each account, whether human or nonhuman, by making use of the organization’s IT resources..is the key enabler and fundamental to Security and compliance.. is the security discipline that enables the right individuals to access the right resources at the right times for the right reasons..is about the end-to- end life cycle management of digital identities.. is the set of business processes information and technology for managing and using digital identities

The Importance of Compliant IAM in Insurance Tuncay Küçüktaş / 3

Why important ? Tuncay Küçüktaş / 4

Why important ? Tuncay Küçüktaş / 5

Why important ? Tuncay Küçüktaş / 6

Why important ? Tuncay Küçüktaş / 7

How IAM Supports Compliancy Identity and access management (IAM) technology and methods provide direct support for the compliancy requirements for;  fraud reduction  policy enforcement  risk assessment  compliance & auditing Tuncay Küçüktaş / 8

Typical IAM Framework - Today

IAM and GRC Complements Each Other

Typical User Challenges Source : SAPTuncay Küçüktaş / 11

Source : SAPTuncay Küçüktaş / 12 Compliant, Business-Driven Identity Management Process Flow

Common IAM areas (business value & risk reduction) Tuncay Küçüktaş / 13

How to Implement Compliant IAM ? Tuncay Küçüktaş / 14 Develop a strategy Don’t think of Compliant IAM as an IT-only initiative Be prepared for objections and concerns Avoid the “Big Bang” approach Don’t rush Create your inventories Start with enterprise-level roles first

Potential Impacts of NonCompliancy  Severe penalties in cases of noncompliance  High financial costs to comply with regulatory requirements  Diversion of executive attention as effort is focused on compliance activities rather than business priorities  Lower costs and higher productivity  Flexibility  Compliance  Improved life cycle of employees, partners, and customers  Moving the management responsibility from IT to business process owners Tuncay Küçüktaş / 15

Challenges  Incorrect Strategy  Staff resistance  Cultural and political realities  Lack of skills  Bureaucracy  Scope creep  Inappropriate automation Tuncay Küçüktaş / 16

Tuncay Küçüktaş / 17 By year-end 2020, 80% of user access will be shaped by new mobile and non-PC architectures that service all identity types regardless of origin

Tuncay Küçüktaş / 18 By 2020, 60% of all digital identities interacting with enterprises will come from external identity providers through a competitive marketplace

Tuncay Küçüktaş / 19 By 2020, the Internet of Things will redefine the concept of identity management to include what people own, share and use

 Cloud and Mobility  The Internet of Things  Growing more digitalized marketplace  Identity Analytics

THANK YOU