Can transforming your digital identity system fuel your bottom line?

By Yogen Appalraju

EY Canada Cybersecurity Leader

Committed to helping clients minimize the impact of cyber threats. Proud husband and father.

4 minute read 21 Jul. 2020
Related topics Consulting Cybersecurity Tax

Automating your digital identity processes now can help unlock 90% in cost savings – all while strengthening security, driving compliance and freeing up time.

Workforce changes abound right now, and organizations are struggling to keep up with the tsunami of system updates that they can bring. However, technology – like Robotic Process Automation (RPA) – can unlock more than 90% in savings across the digital identity mix, and deliver a range of other benefits, including:

  • Strengthening cybersecurity defences. Today, 80% of cyber breaches tie to digital identity and access violations. But, organizations only spend 5% to 8% of their security budget on digital identity. Automating digital identity controls can help close that gap.
  • Meeting compliance requirements. Automating helps you process more digital identity updates faster, with less room for human error, so you stay on top of regulatory requirements while increasing predictability of outcome.
  • Freeing up time. Fewer manual updates liberate your people to focus at best and highest use, on more strategic tasks. 
Based on an EY client case study

Based on an EY client case study

How can you get started?

Client case studies tell us that investing in front-end conversations to bring internal stakeholders on board is an important piece of the puzzle. Fleshing out a strategic plan of attack before you dive in also helps. Like all change, monitoring how things are going and tweaking in real time, will play a big part in your success.

Keep these 10 leading practices in mind as you set the wheels of digital identity automation in motion:

1. Build the business case first.

Driving change effectively always begins by clearly illustrating the objectives and the anticipated results. Look at which parts of the digital identity process are holding your team back and establish a comprehensive business case showing where the real value of process automation lies for you.

2. Bring leadership on board.

Tone from the top counts. Securing leadership’s buy-in and sponsorship support now can help manage the change internally later on. Leadership should be singing off the same song sheet and encouraging teams to embrace new processes.

3. Draw a roadmap.

Developing a roadmap is important. The core team should agree on the vision, end goals, objectives and expectations. Having a crystal-clear roadmap can help guide your success at the execution phase.

4. Create internal champions.

Identifying process champions to serve as subject matter experts and true change agents in the organization can help you enable the transformation. Allies of the cause who can educate and inspire others will play a critical part in any kind of process automation, including for digital identity.

5. Prioritize the pilot.

Taking the time to conduct a pilot workshop as you prioritize automation opportunities can go a long way towards your ultimate success. Doing this now will help you hit the ground running later.

6. Pick your tools wisely.

If you don’t already have an RPA tool in place, do your research and identify the option that works best for you. Build out the implementation strategy so you have a step-by-step plan in place to marshal the change forward.

7. Consider the big picture.

Good news: whatever tech and tools you’re using now can be adapted to welcome RPA into the fold. So factor your organization’s broader technology landscape in as you develop your process automation architecture. Taking a holistic view at the planning stage can help you design architecture that’s fit for purpose in your day-to-day digital identity world.

8. Partner wisely.

Identifying the right implementation partner is important. At this stage of the game, you should also be defining service level agreements (SLAs) and key performance indicators (KPIs). Go into the automation process knowing what you hope to get out of it, and be prepared to measure accordingly.

9. Bring in the bots.

With the buy-in, plans and big picture all mapped out, it’s time to train and deploy the bots and let the automating begin. It’s important to track operation requests as they arise and measure the outcome. Automation and tracking go hand in hand.

10. Stay engaged.

Change is implemented, effective change is managed. Keeping your stakeholders engaged over the long term, updating them on progress, hearing feedback and making tweaks are all fundamental to good change management.

If you can make digital identity more efficient now, why wait?

From furloughed employees to new hires and mass layoffs: every workforce change triggers an update to your digital identity system. Business, regulatory and economic changes are going to keep on coming. Considering new solutions that can help ease your operational burden in this new normal can help.

To learn more about implementing RPA for digital identity with minimal disruption to your business, reach out to a member of our cybersecurity team.

Co-authored by:

Atul OjhaEY Canada, National Digital Identity Leader



For most business right now, costs, compliance and security are top priorities. Your digital identity operations could be ripe with opportunities to tackle all three. These leading best practices can help you automate the right parts of the process while unlocking savings, meeting regulatory requirements and maxing out your security investments at the very same time.

About this article

By Yogen Appalraju

EY Canada Cybersecurity Leader

Committed to helping clients minimize the impact of cyber threats. Proud husband and father.

Related topics Consulting Cybersecurity Tax