Transforming security standards
How Stellarmann implemented ServiceNow to help a retail bank improve their security posture
Client:
A retail challenger bank
Project:
Improving the security posture of the bank while ensuring seamless operations and adhering to the agreed security requirements.
Project capabilities we delivered:
- Business analysis
- Business system process design
- SecOps
- Supplier, stakeholder and 3rd party management
- Knowledge transfer/in-role coaching
Keywords:
- ServiceNow
- Networx
- Access Security
- System analysis services
- Joiners, Movers and Leavers
- Privileged Access Management
- Security Incident Response
- Security Operations Center
Introduction
Our client, a retail challenger bank, was facing challenges in aligning their current and future states with the agreed security requirements. They needed a thorough business analysis and business system process design to address this issue.
The client also needed expertise in SecOps, Security Infrastructure, and Access Security to undertake requirement analysis, business process analysis, and system analysis services for the projects and workstreams within the scope of the programme.
Our client's challenge
The goal was to improve the security posture of the bank while ensuring seamless operations and adhering to the agreed security requirements. The challenge lay in identifying the most effective strategies and processes to achieve this goal.
Our response
ServiceNow was implemented for three distinct workstreams. We mobilised and implemented the ‘to-be’ state for the workstreams, ensuring alignment with process diagrams, and enabling efficient monitoring and checks.
- Joiners, Movers and Leavers (JML)
We maintained the consistency and accuracy in the processes involving joiners, movers and leavers by continually updating the Standard Operating Procedures (SOPs) to ensure alignment with process diagrams. This included the integration of Networx with ServiceNow to allow efficient email alert monitoring and daily service
desk checks. - Privileged Access Management (PAM)
The PAM workstream focused on the remediation of domain admin accounts. - Security Incident Response (SIR)
We facilitated the adoption of ServiceNow by the Security Operations Center (SOC) team in order to improve security incident response capabilities.
“The implementation of ServiceNow across multiple workstreams significantly improved process efficiency and effectiveness. These advancements not only strengthened the organisation's security posture but also boosted stakeholder satisfaction and contributed to the overall success of the project portfolio.”
Partnering with Stellarmann has helped our retail bank client achieve the following project outcomes:
- Improved efficiency and effectiveness of business operations: Using business analysis and system process design, we defined the current and future states of the business processes.
- Enhanced security measures and protocols: Through a strong understanding of SecOps/Security Infrastructure/Access Security, we were able to provide valuable insights and recommendations for the in-scope projects.
- Elicitation and documentation of project scope requirements: The use of facilitation and workshop resources allowed for effective communication and collaboration with the customer and third-party resources. This resulted in a well-defined project scope and requirements, ensuring that all stakeholders had a clear understanding of the project objectives and deliverables.
- Effective communication and collaboration: By facilitating workshops with stakeholders and third parties, we delivered a well-defined project scope and a collective understanding of the objectives and deliverables.
- High quality deliverables: Support through the defect triage and change request production ensured that any issues were promptly resolved.
- Knowledge transfer: In-role coaching helped build the capabilities of the permanent team, enhancing their skills and knowledge.
