# Callista IAM

> Identity & Access Management (IAM) practice of Callista Holding AG — vendor-neutral advisory and delivery for regulated Swiss organisations: financial services, industry, and the public sector.

Callista IAM is a specialised subdomain (iam.callista.ch) of the Callista Group, a Swiss IT consultancy. The practice covers the full IAM lifecycle — from baseline audit to AI-native operation — built on a proprietary reference model of around 40 IAM topic areas. All services are vendor-neutral: no licence resale, no vendor commissions. Engineers who design the target architecture also implement it.

## Services

- [IAM Audit](https://iam.callista.ch/iam-audit) — Baseline assessment against ~40 IAM topic areas; gap analysis, risk evaluation, prioritised roadmap. Entry point into the IAM practice. Result in a few weeks.
- [IAM Architecture](https://iam.callista.ch/iam-architecture) — Target picture, reference architecture, integration concept, technology/platform decision, migration path. Business-driven, vendor-neutral.
- [Implementation & Delivery](https://iam.callista.ch/development) — Iterative delivery into production: automated HR-driven provisioning, self-service access requests, recertification, operational handover and capability transfer.
- [Role Model & Role Concept](https://iam.callista.ch/roles) — Lean two-tier role model (business roles + technical roles) via role mining; pragmatic cut, governance, continuous maintenance. Replaces role sprawl.
- [AI-Native IAM](https://iam.callista.ch/ai-native-iam) — Context-based access decisions, temporary/transitional access, individual access solutions, anomaly detection, intelligent recertification, natural-language interaction. "Human in the Lead" as architecture principle.

## Key Differentiators

- Reference model with ~40 IAM topic areas — developed from own engagements, not an off-the-shelf framework.
- Vendor-neutral: recommendations follow requirements, not a product catalogue.
- Architecture and delivery from a single source — no break between advisory and realisation.
- "Human in the Lead": AI proposes, justifies, documents; humans approve critical resources. Auditability is built in.
- Knowledge transfer is part of every engagement.

## Target Audience

IT and security decision-makers (CISO, IAM leads, IT directors, IT architects) at Swiss financial services providers, industrial companies, and public sector organisations.

## Regulatory Scope

FINMA circulars, ISO 27001, NIS2, FADP/GDPR (DSG/DSGVO).

## Proof Points

- Leading Swiss financial services provider — IAM replacement: overall project leadership, ServiceNow evaluation, RBAC role model redevelopment, Active Directory cleanup, automated HR provisioning. 500+ person-days over 2023–Q1 2026.
- Switzerland's largest comprehensive university — role mining and authorisation concept as foundation for IGA/self-service portal rollout.

## Languages

- German (default): https://iam.callista.ch/
- English: https://iam.callista.ch/en

## Contact

- Phone: +41 43 540 56 85
- Email: info@callista.ch
- Address: Callista Holding AG, General-Guisan-Strasse 8, 6300 Zug, Switzerland
- Workshop request: https://iam.callista.ch/contact

## Links

- [Callista Group main site](https://callista.ch)
- [Sitemap](https://iam.callista.ch/sitemap.xml)
- [Extended LLM context](https://iam.callista.ch/llms-full.txt)