What Do Movie Production and a Good IAM Project Have in Common?

Hello and good morning. So what Moving products and an IM project got in common, I know that the initial answer is quite easy. They can both be total flops end up in the catastrophe in many various ways, but if you add word good in the title that things change a bit. I think there is many kind of similarities in the facing of I Am project compared to the movie production. So my name is Tuka and I'm the architect in, and let's have some words about the company I work for. So in short, we make huge engines to ships vessels and for everything that you need, power, electricity and so on.

Here's some numbers about our company. I should have added one number still to the slide that today we are 100 and 90-year-old company and we started from the saw mill, we had C yards and now we are global leader in the energy markets by making engines that can be run with the renewable fuels such as synthetic methanol and so on. And also lastly, we take cybersecurity very seriously. Let's start with some analysis before jumping into the Axo topic. So you all know your domain, you know your jls, you know your sods, you know MFAs and so on.

But I think it's important to speak in a language that wider audience thinks understands better. So let's start with some examples. There could be many, many of them, but let's start with the one that you might know quite well. So it's like a multitenant cloud platform that is quite often referred to a apartment building when there where there is a a walls roofing and everything that protects the tenants, but they have secure space but they are sharing, okay, something happened with the mic.

I, okay, can I get the number four back? Okay, I will continue until that.

So, so the tenants are sharing the same infrastructure, a hay vac and like wiring, plumbing and so on. If we continue with this analogy, we can think your IDM solution.

Okay, thanks. So we can continue the analogy by thinking that your old IDM solution moved to the cloud can be compared as a washing machine in your apartment. And well as IDMs washing machines are built for single purpose only. You put your white colors, blue colors in and start the process.

But some, although they look alike there, there's differences too. Some are not so reliable anymore, some are not so efficient and so on. But guess what, we didn't even have that washing machine in the first place. What we did have was a bunch of in-house scripting and integrations to have some kind of, of in-house IDM solution. But what we did have was a ServiceNow platform that was used for our ITSM processes. So as I mentioned, the IAM project could be considered as a movie production.

When I started in Varisia three years ago, I learned quickly that there has been not just one but two failed IAM project in the past. So starting a new IAM project was considered a big elephant in the room. I mean huge like our engines are.

So we, what we needed to start was a good pre-production phase to analyze the current situation. What was those reasons for the failed pro projects in the past? They were over scoped.

They were, there was lack, lack of commitment and improper testing. For instance, we wanted to have a roadmap for the target architecture and I didn't want to introduce yet another portal for our workforce. So instead I wanted to leverage the full go well established ServiceNow platform for for identity and access management as well. So we started getting the executive producers begging us for the project. We started to have scripting, so meaning building up the user stories and facing how to implement those.

We started staffing our production team starting by getting a good director, if I may, who knows the IAM inside ours. And we also needed to identify any of, of, of like issues beforehand and needed to analyze the attack surface and minimize things have a least privileged type of guidelines in use and so on. Lastly but not least, we also needed to have a good partner that we can trust on.

So what I wanted to have as have was the pilot first because of those failed projects and as in TV production for instance, you have a pilot before you actually start the production to see, see that the story flies and, and there's some interest about things and people trust it. And also in maritime pilot is certain expert SME who enters the ship and can take you to the safely to the harbor. So together with our selected vendor Clear Sky, we defined our pilot approach in the following way. So we picked up 26 success criteria and also 50 user stories throughout the whole roadmap.

And we defined that if 80% of those success criteria were passed, we would consider the pilot to be successful. We did some preparations before initiating the actual pilot phase in two weeks as planned. So preparing our ServiceNow test instances and HR test environments so that we could start the actual pilot that was taking six weeks. And during those six weeks we had three different demo sessions and well you can see the results there already. So we did pass all of those 26 success criteria and we got green light to continue to the Axo production phase, the Axo product.

So after successful pilot we didn't want to rush in the full scale project mode right away because this was a new technology, this was a new team, there was a new collaborative team included and so on. So instead we started the TV production. So we plan to have agile project. So after every three weeks print we release a new episode out and little by little we gain, we gained trust, we got buy-in, we got new viewers to our things that we were producing. So there was a pretty good cadence and quick results based on this mode.

But then the movie happened so we know, knew already that this would be a full feature film that would take many sprints to develop and we started that. So we started carefully crafting and improving the user stories related and it wasn't just how to onboard our internal employees and and contractors. We also had some, some supporting actor cases so to say like rehires, we had international transfers in the, in the scenes and we needed to get those in scope. But I knew that our team was capable of producing a full length feature film as well based on the good results in the past.

So we did have a business analysts and we interviewed different different participants, managers and so on to get everything right. And yeah, after we have implemented everything, we moved to a post-production phase, so to say, just like in the movie production you have a post-production phase where you make sure that you have everything right in the right order and it starts by editing the C scenes in the right order. As an example, as we were using ServiceNow flow, which is a low-code, no-code type of of engine that you can put things in right order, we could very easily spot that.

For instance, the sending out the welcoming email was sent only after the mailbox was created for the new employee. We started to test screenings. So like in the Hollywood production we had extensive test screenings and I mean by UAT user acceptance testing here. So we had over 100 and 100 test cases we needed to run through and that was quite quite extensive case. We started also like a comms activities. We had a promoting tour to various of groups, you know, group level but also for the business units and things like that.

What's ahead with this release, what we didn't want to come up with the Axo release date yet because we wanted to make sure and focus on quality. So it's always better to come up with like a teespring type of teaser poster instead of of coming out with the exact release estate. Once everything was done and these quality checks were passed, we started to plan the axle premier of our go live of this release. So we needed to plan carefully all the pre-deployment tasks and actual go live tasks and double check everything and, and make sure that everyone knows their part in this release.

In this deployment we also had unplanned three weeks hypercare kind of things. So as we knew that there would be something ahead still and as we have had already implemented the feedback solution of our ServiceNow net promoter score, we could also monitor the actual events of, Of, of this identity requests. So we got some feedbacks from those events and also from the various of comms channels that we were using. And today our net promoter score is 9.5 out of 10.

So I think that's very good number that I am and we are extremely happy about and this is from the system directly from the service now. So as you may have noticed, we had a a successful go live and happy, happy ending so to say. We had some issues during the hypercare but those were fixed during the first two weeks. And here's some claims about our test identities. There was in total 100 of of test identities we created during the UAT testing.

Not to mention all the thousands we created through the load testing phase, As in the movies you need to give credits to the people that have contributed. So our team was like seven persons but we had like 15 to 30 persons on and off in the project who make this happen. So with those, without those people, we could not make this successful and we had like a proper after party gala dinners and everything to, to really thank you the persons who make this happen. So. Well that concludes my presentation.

How, and I hope that you see some similarities in the movie products and compared to the good I Am project. Hey, thank you.

Really, really interesting analogy there. I haven't seen that before.

It was, it was great fun. Thanks very much. We do have one question though, or we have a couple of questions. How big was your team to produce your movie?

Yeah, As I said, it was like seven persons in the core. I am team, so quite small team actually. And then there was 15 to 30 people from the other teams. So we had a virtual team together and yeah, there was teams from hr, tech team, our workplace services, comms side and so on. And we have another question. How important was ServiceNow? Was your internal communication and promotion more important than the tool? Well the ServiceNow is very important to us, so we have been using ServiceNow platform already 10 years.

So everything is built there and we are continuing to use that and it was no brainer to go with that for the IAM as well. And just really quickly, is the provisioning in the target applications automatized automated in all cases? Yes. There they are. So we have automation of course if we have offline case, offline systems, we can have like a manual provisioning in in those cases. But now the whole, let's say joiner uber lever cases are automated. Thank you very much, KUKA Island.

Hey, Thank you.