Centralized Secrets Management Transformation
A major Swedish bank was managing application secrets across several separate platforms. NCG led the move to one centralised solution, defined the secrets management governance framework and lifecycle processes, and automated self-service provisioning and decommissioning.
Client Overview
Challenges Faced By Client
Passwords, keys and certificates used by applications were stored in multiple platforms with different rules, making it hard to know who could access what.
- Several secrets platforms with different controls
- No common governance for how secrets are created, rotated and retired
- Manual requests slowing development teams
- Secrets left behind when applications were decommissioned
How NCG Helped
Consolidate, govern, then automate.
Platform consolidation
Consolidated multiple secrets platforms into one centralised solution.
Governance framework
Defined the secrets management governance framework: ownership, standards and controls.
Lifecycle processes
Established business processes for the full secrets lifecycle, from creation to decommissioning.
Self-service automation
Implemented automation so teams can provision and decommission secrets themselves, within policy.
Solutions Implemented By NCG
One governed, automated home for application secrets.
- Centralised secrets management platform
- Secrets management governance framework
- Lifecycle business processes
- Self-service provisioning automation
- Automated decommissioning
