The Problem: For decades, organizations have relied on provisioning platforms — access request workflows and static role assignments — to manage who gets access to what. The intent is sound: apply...
To provide business agility an organization’s Identity Governance program should constantly manage user access change requests, while ensuring compliance and manage access risks. In order to manage access risk, it...
Organizations must perform Access Certification to effectively meet audit and compliance requirements, and improve its overall risk posture. However with large number of applications and use access reviews, organization go...
An application access is generally expressed as a business function/permission on a set of resources/assets/datasets. Each application has its own access control model (ACLs, RBAC, Discretionary/Mandatory access control etc.). To...
Dormant access is a user access (account/entitlement assignment) that has not been used recently for certain period of time. Time period after which an access is termed as "dormant" may...
One of the most common source of insider threat is user/system acquiring unauthorized access to an application bypassing in-place Identity Governance processes (Ex. modifying application's security configurations/policy by application administrator)....
Business need: A holistic view of information security management in an organization with the purpose of: Measuring effectiveness of a security control or policy. How realistic were my ROI forecasts...
Identity Governance and Administration (IGA) has evolved into a business driven compliance and risk-based program with capabilities focused on entitlement management and access certifications. Entitlements management involves maintaining entitlements, and...
This famous quote has been attributed to W. Edwards Deming, and for data analysts it captures their underlying “data-driven decisions” belief. Data is key for organization to improve efficiency, performance...
