Ipiranga Case

The Vennx Access Radar (VAR) is a solution designed to improve identity and access governance in complex corporate environments. The platform goes beyond simply managing concessions and revocations, offering features such as periodic access review, Segregation of Functions (SoD) risk management, and control according to predefined access maps.
Its modular design allows the organization to implement paper-based access policies (RBAC), monitor risks with intelligence, and maintain continuous compliance with auditing requirements.
Problem Identified
Before the adoption of VAR, clients faced several challenges related to access management:
1. Environments with a high risk of uncontrolled or obsolete access;
2. Significant delay in granting access, impacting productivity;
3. Absence of timely revocation of access by disconnected or retired employees;
4. Exposure to regulatory and operational risks due to improper active access;
5. Lack of visibility about risks associated with access, due to the lack of a SoD matrix or formal analysis.
Objective of the Project
The purpose of the VAR is to centralize, automate, and make access management more secure, reducing operational risks and increasing the agility of access granting, reviewing, and revoking processes. The tool acts on three pillars:
• Efficiency: Agility in access processes with automated workflows;
• Security: Implementation of segregation of duties and risk management based on profiles and permissions;
• Compliance: Generation of evidence, reports, and certifications for internal and external audits.
Achieved results
• Significant improvement in the agility of the processes for granting, blocking, and revoking access;
• Implementation of periodic access review campaigns, with a centralized record of evidence;
• Reduction of the risk of improper access, with continuous analysis of SoD and permission risks;
• Dynamic user monitoring, including alerts for cases of inactivity and profile deviations;
• Direct support for compliance with standards such as SOx and LGPD, promoting safety and traceability.
The adoption of Vennx Access Radar allows companies to consolidate a modern, proactive access management model that complies with the highest governance standards. By integrating security, efficiency, and automation, VAR transforms access management into a strategic asset, with a direct impact on reducing risks, increasing productivity, and meeting auditing and compliance requirements.
