Life Sciences Industry Case Study IT Authorization and Allocation

• 平台即服务 (PaaS) - 应用开发平台
• 应用基础设施与中间件 - 数据交换与集成
• 应用基础设施与中间件 - 数据可视化

• 生命科学

• 商业运营
• 质量保证

• 过程控制与优化
• 远程控制
• 监管合规监控

• 系统集成
• 软件设计与工程服务

With over 80,000 employees in 139 countries, the efficiency and accuracy of Roche’s IT authorization and allocation process has been substandard in the past. Authorization requests took several days to be approved which impacted productivity. Human errors cost time and resources, and often resulted in the inadvertent allocation of user rights to inappropriate parties, a potential security risk. Challenges with the old processes include: Inconsistent Data. The IT department received numerous authorization requests every day with inconsistent information. Forms lacking complete information had to be returned to the requester for further completion. This part of the process would take several days to complete before the request could even be processed. Lack of Monitoring and Reporting. The lack of visibility in the authorization process was very frustrating for employees as they could not check the status of their requests or ensure that all of the necessary information had been submitted properly. Conversely, the IT department lacked a means of reporting, monitoring, and controlling the access and authorization rights they had granted. Time Consuming and Wasteful. The authorization process took several days to be approved meaning that employees were not able to complete all of the tasks required of them. Additionally, there was excessive lag time in the rerouting of access when the responsible party was unavailable.

Roche is a leading Life Sciences company with a broad spectrum of innovative medical solutions. For more than 100 years, they have been active in the discovery, development, manufacturing, and marketing of novel healthcare solutions. With over 80,000 employees in 139 countries, Roche is a global leader in the life sciences industry. The company is committed to improving the efficiency and accuracy of its IT authorization and allocation processes to enhance productivity and security. Roche's extensive operations and large workforce necessitate a robust and efficient system to manage IT authorizations effectively.

Using the Ultimus Adaptive BPM Suite, the IT department standardized all IT authorization requests in a system called Authorization System IT (ASYS), which is based on the Ultimus BPM Platform. Now, requests for IT user and access authorizations are standardized and involve organization-wide allocation, change, and removal of IT user and access rights. Additionally, the enhanced monitoring and reporting functionality of the BPM suite allows Roche to ensure that the requested authorizations are allocated efficiently and can be verified at any time. Moreover, information concerning the user authorizations of any employee can be accessed at all times. In terms of security and controls, all approvals are regulated. Due to the process definitions with respect to the assigning of people for approval, inadvertent allocation of user rights is eliminated. With the Ultimus Adaptive BPM Suite, IT authorization supervision is centralized and approvals are regulated, so IT security is guaranteed. Integration with Roche’s database ensures prompt and secure updating of employee data. User access rights are removed or added promptly upon employee departure and hire.

• Consistency in forms and user information has been achieved, ensuring that all authorization requests are complete and accurate before processing.
• Improved monitoring and reporting capabilities allow both employees and the IT department to track the status of authorization requests and ensure proper information submission.
• Reduced cycle and lag times in the authorization process, enabling employees to complete their tasks more efficiently and without unnecessary delays.

• Approximately 15,000 users handling 50,000 authorization requests annually.
• 900,000 process steps managed annually.