We have developed a plan to improve identity management and access for all UCL services and have put together a business case for future consideration.
Project progress and next steps
During the first part of 2020, the project worked with our implementation partners to carry out a discovery phase. During this time we explored a number of commercial options that could help us improve access management, investigated the potential benefits of the project, and produced a final report detailing our key findings and requirements.
After completing the discovery phase in March, we used our findings to develop a business case for the implementation stage of the project. Following the outbreak of the coronavirus, the decision was made to pause the project after considering the time and investment required to complete it.
With the increase in staff working remotely, our dependence on IT systems and resources is greater than ever. Our IT services need to be simple to use and easy to access and available from any location, on any device, at any time. Improving our identity and access management could deliver a range of benefits for the whole UCL community including:
- Improved management information and planning capabilities.
- Ability to report on how many identities are currently allowed to access resources (space, people, licensing and other resource planning).
- GDPR and ISO27001 compliance.
- Access policies to enforce user access security and regulatory compliance.
- The capability to report on access on a: per service, per group and per individual basis.
While the project has now been put on hold, our learnings from the discovery phase have informed a detailed business case that is ready for consideration should the project be revisited in the future.