Major Belgian bank: enterprise RBAC and IAM governance

Context

One of Belgium's largest banks: multiple Active Directory domains, thousands of users and hundreds of applications. Roles had multiplied, direct privileges bypassed RBAC and segregation of duties (SoD) could not be enforced at scale. FuturWork deployed 4 experts for 2 years.

Challenge

• Hundreds of overlapping roles with no business meaning
• Shadow access outside RBAC and no certification workflows
• No SoD methodology and manual conflict detection

What we did

• Redesigned the enterprise role model, mapped to AD and CyberArk
• Deployed access certification workflows and an SoD matrix
• Built an asset security model and automated compliance reporting

Results

• 60% fewer roles
• 45% fewer direct privileges
• 90%+ of SoD conflicts detected automatically

From scattered access to business-aligned RBAC with automated control.