Leaseplan

Leaseplan

Control over security and identities in the LeasePlan cloud

How do you ensure that over 12,000 employees in 30 countries have effortless yet secure access to the processes, systems, and data they require for their day-to-day work? SITS | Traxion assisted leasing company LeasePlan in designing its IT environment for secure and monitored access using SailPoint and CyberArk.

Leaseplan

Originally Dutch, LeasePlan was founded in 1963 and over the course of sixty years has grown into a global player in areas such as fleet management, leasing services, and used car sales. Since being acquired by a large French listed leasing company in May 2023, LeasePlan offers complete solutions for managing, financing, and servicing leased cars in over 30 countries. At the time of the acquisition, the company employed over 12,000 people and managed more than one and a half million vehicles.

Focus on datasecurity

Data and its security are at the heart of LeasePlan. The company is in possession of a banking license. It must therefore not only comply with laws and regulations such as NIS2 and the GDPR, but also with the strict requirements imposed by the European Central Bank (ECB) on organizations with a banking license.

In addition, LeasePlan’s strategy of gradually moving towards a subscription-based business model has further contributed to the importance of data and security. As a result of this transition, data on customers and their car usage plays an indispensable role. These days, every leased car is considered a data producer and an entity within LeasePlan’s systems. This has caused a significant increase in the amount of data and places high demands on the security of those data.

“To address all these issues, we wanted to build a data platform in the cloud that was Secure by Design,” explains Roel Bierens, Head of Digital Trust & Security at LeasePlan at the time. “The system had to be ‘loosely coupled’, so that individual components could be easily added or removed. Furthermore, data had to be easily compartmentalized for security and compliance reasons.”

SailPoint IGA and CyberArk

To properly organize access to the new platform and associated systems, LeasePlan opted for SailPoint Identity Now, a powerful cloud solution for Identity Governance and Administration (IGA). With SailPoint Identity Now, organizations are able to effortlessly maintain control over who has access to which systems and data. The platform automates a variety of processes, such as access requests, approvals, and periodic verifications. This makes it much easier to comply with laws and regulations or regulatory requirements such as those of the ECB.

“It quickly turned out to be quite a major project for which we didn’t have the staff ourselves. That’s why we requested SITS|Traxion to assist us with the architecture and roll-out.”

– Roel Bierens –

Bierens: “It quickly turned out to be quite a major project for which we didn’t have the staff ourselves. That’s why we requested SITS|Traxion to assist us with the architecture and roll-out.”

At a later stage, LeasePlan expanded SITS|Traxion’s work package by implementing CyberArk, a leading Privileged Access Management (PAM) solution. This software helps organizations manage their all-important user accounts and keep them secure. For example, it secures developer or system administrator accounts, which would give hackers virtually unlimited room to maneuver within IT environments. With CyberArk, it becomes almost impossible for hackers and other malicious individuals to access systems through these types of accounts.

SITS|Traxion assisted LeasePlan with the rollout of SailPoint Identity Now to offices in 30 countries, representing a total of 12,000 LeasePlan colleagues. All key management accounts were securely housed in CyberArk. A total of 70 applications were integrated with CyberArk and SailPoint.

Building bridges with the business

In addition to the technical roll-out, SITS|Traxion also helped the organization bridge the gap between the demands of the business and the capabilities of the technology. From defining roles and determining who is allowed to access what information based on their role; SITS|Traxion took care of it.

Introducing new technology and associated process changes to 30 different countries can present significant challenges. “Change always creates resistance,” says Bierens. ” Previously, the entities were smaller and everyone knew each other. People then suddenly had to follow a formal process flow or renew their access rights every quarter. Some people had difficulty with this.

A transition can only be considered successful when everyone recognizes the added value. We therefore organized drop-in sessions in which we repeatedly explained the process. These sessions also served as an outlet for frustrations.”

IAM Business Specialist Jelena Busch was involved throughout. “Planning and communication are hugely important. SITS|Traxion helped us identify the different phases, set priorities, take important steps, and communicate clearly to create internal sponsorship and support.”

Part of the team

Jelena Busch and her colleague Roel Bierens look back with great satisfaction on their collaboration with SITS|Traxion. Busch: “The people at SITS|Traxion are very approachable and proactive. As soon as you present them with a challenge, they solve it themselves. You don’t have to constantly remind them to make sure it actually gets done. They cooperate as though they are an integral part of the team.”

Because SITS|Traxion is familiar with these challenges, its consultants are aware of the potential pitfalls. Busch: “Whenever they would identify a potential (future) problem, they would notify us immediately. We were very pleased to have an extra pair of eyes.”

Roel Bierens is happy with SITS|Traxion’s flexibility. “In those cases where we required something outside of the original plan, they were willing to go beyond the agreed scope. For example, we required some help with completing the necessary authorization matrices. Thijs, a SITS|Traxion consultant, subsequently contacted all the application owners to make the necessary changes. Thanks to the great mutual trust, we achieved excellent results together.”

With the introduction of SailPoint Identity Now and CyberArk, LeasePlan has laid a future-proof foundation for identity and access management. The collaboration with SITS|Traxion made all the difference in this regard and ensured a manageable process with tangible results. LeasePlan is now ready to grow securely, develop new mobility services, and offer customers the best, data-driven experiences.

Start your IAM adventure with confidence!

Are you ready to discover the full potential of Identity & Access Management and Privileged Access Management? Our team of experts is ready to answer all your questions and support you every step of the way towards a successful and secure IAM solution.

You can reach us at sales.nl@traxion.com or by calling 0418 – 653 883. We are happy to assist you!

Award-winning project

The successful implementation at LeasePlan did not go unnoticed. In 2023, SITS|Traxion received the Enterprise Partner SE 2022 award from CyberArk. This award is presented by CyberArk to successfully completed projects. Furthermore, Traxion received the 2022 EMEA SaaS Delivery Admiral award from SailPoint.

Ready to Begin Your IAM Journey?

Ready to Begin Your IAM Journey?

Not sure where to begin? Start with our IAM Discovery, a thorough maturity assessment designed to give you a complete picture of your current IAM environment and a roadmap for the future.

Get Started!

Confidental Infomation