Usually with privileged access and the joiner and leaver process, because they reduce the most risk soonest. Customer identity follows its own plan.
Zurich Solutions
Best Identity, access and privileged access company in Zurich
Sign-on, joiner and leaver automation, and privileged access that auditors can follow. Hosn Al Tomoh works with organisations in Zurich on identity and access, agreeing scope, responsibilities and proof of completion for each phase from the start.
Identity and access management decides who can reach which system, with what rights and for how long. The work covers workforce sign-on, customer identity, joiner, mover and leaver automation, and privileged access to the systems that matter most.
We work with clients across the Middle East and beyond. For organisations in Zurich, that usually means a programme with a Gulf footprint: we plan for your home-market data protection rules and for the GCC laws, such as the UAE and Saudi personal data protection laws, that apply where systems and data will sit.
Your teams keep oversight throughout, and before we step back we hand over the runbooks and train the people who will run the work.
The scope can run from a short diagnostic to a phased rollout, and each phase is fixed before it starts.
What the work covers
We measure success in working systems and agreed metrics, not in recommendations.
- Joiner, mover and leaver changes driven from the HR system, not from tickets.
- Privileged accounts kept in a vault, approved per task and recorded.
- Access reviews that owners can finish in minutes, with the evidence kept for audit.
What we check first
The hard part is rarely the product. It is the role model and the clean-up of old accounts, so we map roles and orphaned access first and the new platform does not inherit years of excess rights.
At the end of each phase we provide the proof your risk and audit teams need to file: test results, access reviews and signed handover documents.
Before you start
Practical questions from IT and procurement teams.
Each phase is scoped and priced separately, with the team, the deliverables and the acceptance criteria written down, and you receive an itemised quote before work starts.
Your team, unless you choose managed services. We name who is responsible for each component before launch, hand over the runbooks and train your people.
How the work runs
Four stages, each with clear criteria for moving to the next.
Discover
We document the current set-up, the people involved and the constraints, and agree what success looks like.
Design and plan
We set the target design, phases, test approach and acceptance criteria, and review them with your architects and risk team.
Build and test in stages
We deliver in increments, testing and demonstrating each one before the next begins.
Hand over
We hand over runbooks, train your team and support the launch, then formally transfer responsibility to the people you nominate.
Ready to mature your operations?
Book a technical consultation with our principal engineers to map out your architecture and transition plan.