CIIM case studies

CIIM · Put your knowledge to work in context.

The Certified Information and Identity Management (CIIM) credential is offered by Identity Management Institute® (IMI), an organization that describes itself as serving professionals in identity governance, access management, and data protection. IMI states that it has issued certifications since 2007 and that its certifications are intended to help members advance their careers and gain the trust of the business communities they serve with their identity and access management skills. The CIIM case studies are 5 cases and about 4,231 words.

Northbridge Mutual: Certification Fatigue After Acquisition

Northbridge Mutual, a 4,200-employee insurer, closed an acquisition that added 1,800 contractor identities and 2,300 new entitlements. Quarterly access certifications now cover 11,000 entitlements and take managers three weeks.

848 words, about 4 min 2

Meridian Community Bank: FIDO2 on Shared Branch Workstations

Meridian Community Bank is rolling FIDO2 security keys to 6,200 employees across 900 branches. Tellers share Windows workstations in open lobbies and use a 3270 mainframe application that cannot speak SAML or OIDC; the mainframe team estimates 18 months for modernization.

848 words, about 4 min 3

Helio Health Cloud: Tenant Keys, PHI Logs, and Residency Drift

Helio Health Cloud hosts 1.2 million patient records for 34 tenant clinics. Data is AES-256 encrypted at rest with one KMS key per region; 40 platform engineers can call decrypt.

871 words, about 4 min 4

Cascade Industrial: Contractor Revocation and Shared Vendor Access

Cascade Industrial operates 14 plants with converged IT/OT networks. Its 25,000 workforce includes 6,000 contractors.

837 words, about 4 min 5

Alder Finance: Synthetic Identities and SIM-Swap Account Takeover

Alder Finance, a digital-only lender, saw synthetic-identity fraud reach 2.3% of new applications and account takeover (ATO) reach 0.4% of existing accounts last quarter. Fraudsters combine real SSNs with fabricated identities, pass knowledge-based checks, then use SMS OTP; the fraud team linked 60 SIM-swap cases.

827 words, about 4 min