Vetrexa Partners

NEXIS Silver Partner

As a NEXIS Silver Partner, Vetrexa supports the introduction, rollout and optimisation of the NEXIS Platform – with IVIP at its core for Identity Visualisation & Intelligence. We bring Identity Governance, IAM and GRC together into a resilient, audit-ready access-governance landscape – for banking, insurance and industry.

Overview

What is the NEXIS Platform?

The NEXIS Platform is a leading Identity Governance, IAM and GRC platform. At its heart is IVIP – Identity Visualisation & Intelligence – which lets you analyse, model and govern entitlements, roles and risks across systems. Business owners, internal audit and external auditors gain a shared view of complex access landscapes – transparent, traceable and audit-proof.

Vetrexa supports clients across the full lifecycle: from connecting heterogeneous target systems (SAP, Active Directory, ServiceNow, IGA suites), through RBAC/SoD modelling and recertification, to audit-ready GRC reporting. As a NEXIS Silver Partner we combine certified platform know-how with years of experience in regulated industries and complex IAM programmes.

Our services

What we deliver with the NEXIS Platform

IVIP enablement for business owners & auditors

We enable IVIP for business owners, internal audit and external auditors – as a shared, understandable view of entitlements and risks.

  • Views and dashboards per audience
  • Onboarding of business owners and role owners
  • Training and enablement concepts
  • Governance reviews with IVIP visualisation
  • Auditor-grade evidence trails

Role & entitlement modelling (RBAC)

We build granular, maintainable role models based on the least-privilege principle – consolidated, documented and future-proof.

  • Analysis of grown entitlement structures
  • Role mining and business role design
  • Role ownership and lifecycle processes
  • Modelling within the NEXIS Platform / IVIP
  • Role catalogues for business and IAM operations

SoD analysis & conflict remediation

Identify, prioritise and sustainably remediate Segregation of Duties conflicts across systems – based on a clean rule set.

  • SoD rule sets for SAP, AD, ServiceNow
  • Cross-system conflict analysis
  • Remediation plan with risk scoring
  • Compensating controls and mitigations
  • Continuous SoD monitoring

Recertification campaigns & access reviews

We set up automated, audit-ready recertifications – with clear ownership concepts and complete evidence trails.

  • Campaign design aligned with MaRisk and DORA
  • Owner reviews with escalation logic
  • Delta- and event-based reviews
  • Audit evidence and historisation
  • KPI steering through dashboards

Integration of heterogeneous target systems

We integrate the NEXIS Platform into your existing IT landscape – from core systems to specialised IGA suites.

  • SAP integration (HR, ERP, S/4HANA)
  • Active Directory and Entra ID
  • ServiceNow integration and fulfilment
  • SailPoint IIQ and further IGA suites
  • Microsoft MIM/FIM and legacy systems

Audit-ready GRC reporting

We deliver GRC reporting aligned with MaRisk, DORA and ISO 27001 – consistent, traceable and robust for audit and supervision.

  • Compliance dashboards (Power BI)
  • KPI models for access governance
  • Findings management and tracking
  • Control documentation and evidence
  • Reporting automation

Methodology

Our 4-phase approach

  1. Assess

    Capture of the current landscape, role model, target systems and governance requirements. Outcome: baseline and prioritised fields of action for the NEXIS rollout.

  2. Design

    Business and technical target picture: NEXIS configuration, IVIP views, RBAC/SoD model, recertification processes, integrations and GRC reporting.

  3. Rollout

    Setting up the platform, connecting target systems, migrating role and entitlement data, testing and delivering a controlled wave-by-wave rollout per business unit.

  4. Enable / operate

    Enablement for business owners and auditors, KPI steering, recertification cycles and continuous optimisation of the platform in ongoing operations.

References

NEXIS Platform project experience

Selected project references by industry – without naming clients.

Banking

IAM Governance & Audit-Readiness – NEXIS-based

Build-up of a NEXIS-based access governance with audit-ready recertification processes, SoD controls and Power BI dashboards for KPI steering towards auditors and supervisors.

  • Toolset: NEXIS Platform, IVIP, SailPoint IIQ, Power BI
  • Methodology: COBIT, MaRisk, requirements engineering, Scrum

Insurance

Recertification with IVIP & NEXIS

Design and delivery of audit-proof recertifications with IVIP visualisation, owner reviews and escalation logic – implemented on the NEXIS Platform with SAP and Active Directory integration.

  • Toolset: NEXIS Platform, IVIP, SAP, Active Directory
  • Methodology: Requirements engineering, UAT, governance design

Industry

Cross-system analytics with the NEXIS Platform

Cross-system entitlement and risk analysis with IVIP across SAP, Active Directory and ServiceNow – as the basis for role consolidation and a new RBAC target picture.

  • Toolset: NEXIS Platform, IVIP, SAP, ServiceNow
  • Methodology: Role mining, fit/gap, requirements engineering

Tools & Integrations

Toolset & Integrations

Related

IAM & Security

IAM strategy, SailPoint IIQ, PAM, RBAC and recertification – on the basis of the NEXIS Platform and other leading tools.

Authorization Management

Structured role and access models, RBAC/SoD, recertification and clean-up of grown entitlement landscapes.

Partner overview

All Vetrexa partnerships at a glance – NEXIS, Quadient and ServiceNow as the foundation of our consulting practice.

FAQ

FAQ

What's the difference between NEXIS 4 and the NEXIS Platform?

NEXIS 4 was the classic analysis and role modelling suite. The NEXIS Platform is its evolution into an end-to-end Identity Governance, IAM and GRC platform with IVIP at its core – including cross-system analytics, recertification, GRC reporting and integration with existing IGA suites such as SailPoint IIQ.

What is IVIP?

IVIP stands for Identity Visualisation & Intelligence and is the core of the NEXIS Platform. IVIP visualises entitlements, roles and risks across systems and makes them understandable for business owners and auditors – from role modelling through SoD analysis to recertification.

Which systems can be integrated?

The NEXIS Platform integrates heterogeneous target systems – including SAP (HR, ERP, S/4HANA), Active Directory and Entra ID, ServiceNow as well as IGA suites such as SailPoint IdentityIQ and Microsoft MIM/FIM. Insights feed into Power BI and existing GRC reporting landscapes.

How does NEXIS support MaRisk and DORA?

NEXIS delivers audit-ready evidence for access governance aligned with MaRisk AT 7.2, BAIT and DORA: recertification campaigns with full history, SoD controls, entitlement analyses and GRC dashboards that stand up to internal audit, external auditors and BaFin.

Ready for Identity Governance with NEXIS?

Let's talk about your NEXIS rollout, role model and recertification processes – informal and at eye level.

Request NEXIS consulting