The challenge
What the client was up against.
Legacy VPNs and shared service accounts left the bank exposed to lateral movement under adversarial scenarios.
The BNS response
What we built, and how.
BNS designed and rolled out an identity-first zero-trust posture across applications, workloads and endpoints — integrated with DORA operational resilience.
Delivery timeline
How the program ran.
- Phase 01
Reference
Zero-trust reference architecture and board-level endorsement.
- Phase 02
Identity
Consolidated identity fabric, joiner-mover-leaver automation.
- Phase 03
Workloads
Workload identity, policy-as-code and CSPM remediation.
