Identity lifecycle
Joiner, mover and leaver steps driven from HR data, so access follows a person's role.
Industry context
Identity, access and privileged access in financial services
Hosn Al Tomoh modernises identity for financial services. The scope covers customer and workforce lifecycles, privileged access, and fraud-resistant patterns that map to zero trust and regulator expectations.
High-assurance customer journeys need step-up authentication and device intelligence without trapping genuine users in loops. We pilot with the fraud and customer experience teams together, so thresholds rest on data.
Workforce access ties to segregation-of-duties rules and emergency access with full audit export for sample testing.
Vendor and API identities in open finance programmes get the same rigour as human users, including credential rotation and regular scope reviews.
How the work is organised
From design to stable operation, with the evidence risk committees, internal audit and regulators ask for.
Access and authentication
Single sign-on, multi-factor authentication and conditional access applied according to risk.
Privileged access
Vaulted credentials, session recording and approval steps for administrator and service accounts.
Regulatory landscape
We map delivery evidence to the expectations of the regulator you answer to: the Central Bank of the UAE or, for capital market firms, the Securities and Commodities Authority; in Saudi Arabia, the Saudi Central Bank (SAMA), including its Cyber Security Framework, or the Capital Market Authority.
Access reviews
Regular reviews of who has access to what, with removals tracked to completion.
Directory clean-up
Duplicate, ownerless and dormant accounts found and resolved before automation starts.
Checks before you start
Identity work is ready to start when HR data can be trusted and the applications to connect first have owners.
- The classification of customer and transaction data has been agreed.
- HR data has been checked and is reliable enough to drive joiner and leaver events.
- The privileged accounts in scope have been listed with their owners.
Plan identity, access and privileged access in financial services
Share your current systems, compliance themes and timeline. We will return a phased plan, a staffing model and a risk register for your stakeholders to review.