UNIQA Strengthens Identity Governance and Compliance with NEXIS
This case study shows how UNIQA strengthened identity governance and compliance with NEXIS – one of Europe’s leading insurance groups improving access transparency, audit readiness, and governance efficiency.
About UNIQA
UNIQA Group is one of the leading insurance groups in Central and Eastern Europe, serving millions of customers across health, life, and property insurance segments. The organization operates across multiple markets and maintains a complex IT ecosystem supporting digital services, partner networks, and regulatory reporting.
Ensuring transparent governance of identities and access rights across this landscape is critical for operational security and regulatory compliance.
- Headquarters: Vienna
- Employees: 21.000+
- Customers: 15+ million
- Operations: Europe-wide
The Challenge
As UNIQA expanded its digital services and application landscape, identity governance became increasingly complex.Access rights across multiple business applications needed to be governed consistently, while regulatory requirements demanded transparent documentation and continuous monitoring of authorization risks.Existing governance processes relied heavily on manual documentation and fragmented data sources.
The goal was to:
- Gain a holistic view of users and authorizations
- Build a consistent business role model
- Increase automation in access governanc
- Reduce manual workload for IAM teams
- Ensure full auditability across human and non-human users
The Solution
The implementation of NEXIS enabled UNIQA to significantly strengthen its governance capabilities while reducing operational complexity.
The platform not only enabled the automation of previously manual processes, but also significant scaling, better data quality and noticeably improved compliance. Role models, system access and recertifications are now structured, audit-proof and efficient.
- Time savings:Reduction in recertification time from five months to eight weeks.
- More transparency and traceability:90% of permissions covered by a rolebased model
- User-friendly handling:Enabling independent access management for all employees
- Audit-ready:Ensuring compliance through automated and traceable processes
- User Lifecycle Management:NEXIS impressed as a lifecycle management tool, which will enable joiner, mover and leaver processes to be mapped more effectively in future.
“This saves time and resources. This allows us to focus even more on the needs of our business areas, act as a business enabler while meeting increasing regulatory requirements and compliance standards and continuously developing our IT security strategy.”
“In this project, we had to cope with a wide range of requirements. One of the biggest challenges was the great time pressure that exists when a legacy system or conventional methods can no longer be used. The transformation that took place at the customer as a result of this project was also exciting.”
Read more Success Stories
Finanz Informatik Technologie Service GmbH Raises Recertification Quality With NEXIS
FI-TS raised recertification quality by replacing Excel-based recertifications with a scalable, web-based solution designed to improve auditability, increase role-level transparency,...
Structured IAM Governance at CSS Insurance
CSS achieved structured IAM governance and recertification by standardizing heterogeneous access environments, automating recertifications, and introducing scalable, audit-ready role management...