AccountCourier, Courion's user provisioning solution, automates the process of creating
and managing user accounts and access rights across a wide range of healthcare systems.
AccountCourier is the component of Courion's Access Assurance portfolio of products
that ensures only the right individuals have access to the right resources.
Automated account provisioning maximizes cost savings, accelerates service delivery,
enforces compliance with security policy and reduces the potential for human error.
AccountCourier delivers rapid business impact through automated user provisioning
more rapidly and with less risk than competing solutions. AccountCourier is based
on a flexible, standards-based platform that leverages existing technology investments
without forcing your organisation to change to accommodate it. A comprehensive connector
library and scalable Connector Framework plug seamlessly into existing NHS infrastructure
and consolidates data from authoritative sources in real time, while point-and-click
developer and administrative interfaces simplify configuration and maintenance, providing
user friendly tools to support Information Asset Owners (IAO’s) in their delegated
access assurance responsibilities.
NHS AUTOMATED USER PROVISIONING AND ACCOUNT MANAGEMENT
SECURITY POLICY AND COMPLIANCE
Today's heterogeneous healthcare technology infrastructure and dynamic business environment
makes it very challenging to enforce security policies and ensure compliance without
automation. AccountCourier enables organizations to achieve their desired level of
security policy automation and compliance enforcement requirements.
Courion uses a point-and-click interface to implement multi-step serial/parallel,
bulk, and policy-driven approval processes, eliminating the complex, expensive programming
required by other solutions.
Business managers and information asset owners can directly provision their staff
and customers – enforcing security policy based on operating knowledge of the business.
Automated de-provisioning eliminates the possibility of a security breach caused
by a disgruntled former employee.
A reusable audit framework automates periodic and ad hoc access verification and
reporting, while email and pager alerts thwart unauthorised provisioning activities.
ACHIEVE RAPID BUSINESS RESULTS
AccountCourier quickly connects to your existing heterogeneous healthcare infrastructure,
accessing specific data from your authoritative sources in real-time, thereby always
remaining up to date without requiring any additional data-cleansing, synchronisation,
replication or meta-directory initiatives. The connection technologies, which are
common across the Courion Access Assurance Suite, include:
IdentityLink™ - a system of pointers that connect in real-time to existing databases
and directories, enabling you to quickly build workflows and rules using the identity
and user data that already exists within your enterprise.
ServiceLink™ - links in real-time to existing service desk systems, enabling you
to leverage your current tools to track the details of every user provisioning action.
AssetLink™ - extends provisioning beyond IT applications to include managing access
to tangible assets – such as mobile phones, laptops, vehicles, and security badges
– by providing a bi-directional, real-time connection to a variety of widely used
asset management systems.
AuditLink™ - monitors all provisioning activity, records detailed transaction data
and automatically creates, updates and closes tickets in your help desk application.
PolicyLink™ - works in conjunction with Dynamic Communities technology to virtualise
your policy stores and to build communities out of your infrastructure, thereby modelling
your business rules and processes.
INTEGRATED ROLE MANAGEMENT
Organizations define user roles to align the organisational hierarchy with IT accounts
and entitlements. Role definition accelerates and simplifies the provisioning process
and ensures consistent, appropriate access rights. AccountCourier works with the
RoleCourier® role management solution to streamline the process of provisioning and
managing user access rights. For organisations that are not yet ready to define a
role infrastructure, Courion's flexible "start-anywhere" approach allows provisioning
to be deployed without roles.
NHS Information Asset Owners and line of business managers can approve and enforce
access rights using operational knowledge
Business user friendly policy-driven workflow with escalations, alerts, approvals
No prerequisites or dependencies on proprietary systems
Dynamic Community™ technology consolidates the most current, authoritative data in
Secure platform with audit database, email and pager alerts to identify suspicious
Integrated information governance / data protection management reporting
Flexible, modular software design and streamlined deployment approach delivers rapid
Seamlessly integrates user provisioning with existing business workflows for hiring,
modifying, or staff termination
Automated "lights-out" process responds dynamically to business changes
Self-service automation maximize cost savings, improve service, and reduce the potential
for human error
AccountCourier automates the process of creating and managing user accounts and access rights across the enterprise, as part of an Access Provisioning Strategy.
Seamlessly integrate with business workflows for hiring, changing or removing personnel.
Enforce compliance with corporate security policy, Data Protection and NHS Information Governance Toolkit requirement 305.
Secure cost savings and efficiency gains across ICT service administration by automating user account management to facilitate the release of valuable technical resources to address requirements.
Improve the quality, quantity and consistency of user identity information across your systems and directory services, greatly improving opportunities for better collaboration and communication.
Reduce the cost and inefficiency of current information asset management and audit activities.
Better support for Information Asset Owners in the undertaking of access assurance of assets.