Identity Access Management: Ensuring the Right People are Accessing your Organization's Resources

http://www.ibm.com/software/tivoli/governance/security/identity-access-mgmt.h...

Jeff Quinlan of Encode discusses the increasing importance to businesses of access management, data security and compliance.

Transcript: So a lot is happening now with organizations that are merging, theyre divesting, there's a lot of layoffs out there. Theres a lot of people that are coming and going inside these organizations with contractors, instead of fulltime employees. So the organizations need to make sure that the right people are accessing resources for the [onscreen text: Controlling access to resources] right reasons, and that theyve got the controls in place to manage that process, and automate that process as well as really address a lot of the audit and compliance concerns that are coming down.

First thing is how do you ensure that your people, how do you ensure that the right people[onscreen text: Authorization] are accessing the right resources for the right reasons.

Secondly, is that an automated process, [onscreen text: Automation] or is that a manual process? And if it is manual, how do you do that today? And then the third thing is really, what is your audit [onscreen text: Compliance] in compliance policies? Are they done internally or are they done by an external firm and how are you addressing how youre meeting compliance guidelines?

So what happened is the organization actually failed an audit. And the organization, being in the financial services industry, had to actually announce the results of the audit findings. And what happened is, there was a lot of customer confidence that was lost because they didnt have the proper controls in place to address the audit requirements. So they approached us and said, look we need a way of ensuring that these goals are actually addressed and we need a way to automate that because headcount is low, [onscreen text: Audit pressures are mounting] but the audit pressures are mounting all the time. So we worked with them very closely to architect and deploy the Tivoli solution in order to do that for them. It automated the process of ensuring that proper users, based on their role, based on their group, based on their job function, were accessing proper resources and that there was a complete audit trail behind it.

So the reason the customer chose Tivoli was because out of the box, Tivoli addresses over 70 different applications that you need to, whats called provision to, or de-provision to. So the deployment with Tivoli is very rapid and very smooth, [onscreen text: Rapid deployment] compared to other applications in the marketplace. The other advantage to Tivoli is that its built upon WebSphere, DB2, and the IBM Directory Server technologies, which are all best of breed, world class, highly scalable technologies. So what that really entails, what that really means is that these, the Tivoli finished product is extremely scalable and robust and can address these issues with them rapidly. The good part about the Tivoli product though is because its built on industry standards [onscreen text: Built on industry standards] is that if organizations have Microsoft technologies, or Oracle technologies, or SAP, or PeopleSoft or other technologies in there, we can very quickly implement into those technologies. And maximize the investments that theyve already made in those technologies with Tivoli.

Category:

Science & Technology

Tags:

• application security
• identity management
• compliance security
• IBM
• Tivoli
• Jeff Quinlan
• Encode