Book an initial call
Book an initial call

3,200 privileged accounts secured in 6 months

Privileged access management for a German financial services group, with 100% PAM coverage of all privileged accounts.

View case study

Identity Governance

38 use cases designed for a central IAM in public administration, on two coupled platforms.

IAM Migration

Legacy customer IAM replaced by Keycloak after more than 20 years. 65,000 customer accounts, no production outage.

Application Onboarding

Around 2,500 applications onboarded to SailPoint IdentityIQ, with a fixed process and a security test before every release.

Privileged Access Management

Privileged access secured, documented in a traceable way and governed in line with compliance requirements.

The challenge

Starting point and challenges

01

Unmanaged privileged accounts

More than 3,200 unmanaged privileged accounts across hybrid infrastructure

02

Shared credentials

Shared credentials without individual accountability

03

No activity monitoring

No session recording or real-time monitoring of privileged activity

04

Standing admin rights

Permanently granted admin rights that were never reviewed or revoked

05

Audit

An upcoming BaFin audit without PAM controls

06

Outdated infrastructure

An outdated password vault without integration into identity governance

Our solution

Our approach

Discovery and risk assessment

We ran a complete discovery of privileged accounts across on-premises, cloud (Azure, AWS) and OT environments. Within three weeks, more than 3,200 accounts were identified, owners assigned and risk levels classified.

CyberArk PAM implementation

SailPoint IdentityIQ integration

Zero Trust and just-in-time access

The results

The results

BaFin audit results

100%

Complete coverage

across all privileged accounts in on-premises, cloud and OT environments

3,200+

Privileged accounts

onboarded and securely vaulted

0

Findings

in the BaFin audit

100%

MFA enforcement

for privileged sessions

87%

Fewer standing

entitlements

6 months

M1
M2
M3
M4
M5
M6

Full delivery timeline

from assessment to go-live in six months

Client feedback

“WertFels did not just introduce a tool. They changed the way we think about privileged access. For the first time we have full transparency and control over all admin access in our environment. The BaFin audit was the smoothest we have ever had.”

Chief Information Security Officer, German financial services group supervised by BaFin

More success stories

More case studies

Privileged Access Management

3,200 privileged accounts secured in 6 months

Privileged access management for a German financial services group, with 100% PAM coverage of all privileged accounts.
View case study

Identity Governance

38 use cases designed for a central IAM in public administration

Two integrated platforms, Garancy for identities and DirX for accounts and roles, plus 38 use cases and a six-stage release plan.
View case study

IAM Migration

Legacy customer IAM replaced by Keycloak after more than 20 years

65,000 customer accounts and more than 60 applications moved from an in-house system to Keycloak, without a production outage.
View case study

Application Onboarding

2,500 applications onboarded to SailPoint IdentityIQ

For a German financial services group: a standardized process, classification by effort and a mandatory security test before every release.
View case study

Ready for the next step

Your next project

Tell us briefly about your project. We will get back to you and discuss where your IAM stands today.

    Thank you for your inquiry

    Your message has been sent.
 Our team will get back to you as soon as possible.