Kirish va identifikatsiyani boshqarish

Access and identity management systems allow the bank to centrally manage access of employees, contractors and automated services to IT resources.  They ensure compliance with the principle of least privilege, auditing of actions, lifecycle management of accounts and protection against access compromise.

Key functions:

• Multi-factor authentication (MFA) and one-time tokens (OTP);
• Biometric identification (Face ID, fingerprints, voice authentication);
• Centralized access rights management (RBAC, ABAC, policy-based control);
• Account lifecycle: issuance, modification, blocking, deletion (Joiner-Mover-Leaver);
• Single Sign-On (SSO) and integration with Active Directory, LDAP, Azure AD, Keycloak, etc.;
• PAM (Privileged Access Management) support — elevated access protection;
• Logging, auditing, and reporting on all access events.

Who works with the system within the bank:

• Information security service
• IT infrastructure and system administrators
• HR department (in terms of HR-initiated access)
• Internal control and compliance service
• DevOps and development (access to environments and code base)

System owners:

• Chief Information Security Officer (CISO) — strategic access management
• CIO/CTO — for infrastructure implementation and SLA
• HR Director / Personnel Service - in terms of business processes for accounting changes