ICICI Bank : Logical Access Management

Users of ICICI Bank can access the bank's services through different

channels-call centers, ATMs, Internet and mobile devices. While this has brought

banking to the customer's doorsteps, it has also created security related

issues. Previously, the Bank had paper/mail based approval for identity and

access management, but such an approach involved issues of retaining the record

for audit and compliance. There was no standard methodology for secure

communication of application user-id and password. The centralized repository of

user database across applications was not available. Manual review/attestation

of User Access Rights in various applications was cumbersome and time-consuming.

LAM was developed to address the issues and challenges of Identity & Access

Management. It has helped ICICI in reducing Turn Around Time (TAT) for requests,

strengthen access controls, reducing costs in servicing customers, flexibility

and strengthen security and ensure compliance. Recently LAM has been extended to

all the business partners-merchants, agents and partners of ICICI. In future,

the Bank would seek Integration of LAM with PeopleSoft and Active Directory to

strengthen its ERP backbone.