CON-22-082 Identity and Administration Governance

Effective management of user identities is assuming increasing importance for all organisations as they attempt to manage cyber and information risk. Management of user identities, both privileged and otherwise, has been identified as a component of security control frameworks and security strategies within the FCA. Identity Governance and Administration (IGA) is one of the strategic security projects within the larger IDAM (Identity and Access Management) sub-programme currently underway at the FCA. The purpose of the IGA project is to deliver a common, centralised IGA platform and to consolidate the IDAM processes by replacing the existing governance and administration capabilities. The FCA is looking to procure an IGA system that will automate and streamline the joiners, movers and leavers (JML) processes, while integrating with the current authoritative systems (Workday and Active Directory - AD) and will enable the onboarding of critical applications and improve the management of timely recertification of access for these applications. The FCA is interested in significantly improving efficiencies within its existing IGA capability. The main opportunity that has been identified is to reduce risk through improved identity governance, improved access review, consistent processing of joiners, movers and leavers (JML) and assured compliance with rules for segregation of duties and other policies. In addition, there are opportunities to increase efficiency through reduction of manual work and duplication of effort and to increase effectiveness through real-time working and consistent, repeatable processes. The FCA intends to evaluate its Identity Management policies and procedures on a continuous basis, aiming to ensure that these policies are distributed and enforced in real time. The implementation of an IGA tool aims to support this ability through an overarching IDAM platform which will enable the management of user profiles through one single platform.   The FCA is seeking an IGA solution that can be delivered through standard functionality and/or configuration only with no customisation required.