Probably the most convoluted IT practices of all, the Identity Management and Governance is always vulnerable to a security gap. After all, controlling a vast expanse that extends beyond the traditional realm of a datacenter demands careful planning.<\/p>\n
While spiraling cost issues and inadequate resources often undermine the identity governance approach, the inherent shortcomings are too many. And how to overcome those shortcomings invariably will depend on whether an organization clings to the basic principles.<\/p>\n
Broadly, the identity governance practice can be split up in three stages.<\/p>\n
If we move down in descending order, then the stage one is where identity lifecycle management is at the core. Automation and risk-based scores for identities among many other tools enable to on-board, discover, including grant\/revoke access rights to identities. The whole idea here is to uncover the security blind spots<\/span><\/u><\/a>\u00a0through automation.<\/p>\n The second stage is where the manual IT rules and processes complement the automation. Here the Information Security professionals will lay down an unambiguous set of rules as to password policy, authorization among other controls. The objective here is to avoid those mistakes that can prove costly due to the lack of policies and processes<\/u><\/a><\/span>.<\/p>\n The stage three requires doing the basics right. It forms the foundation for robust identity management and governance practice. Here the IT security staff will use the data to the fullest to understand the patterns behind it. Based on the data, an organization can enhance the security by employing the basic tenants in Information Security, especially the identity management and governance.<\/p>\n Segregation of Duties <\/b><\/strong><\/p>\n Every time the end-user logs in and conducts IT tasks, the data is collected and managed in the Identity Governance platform. The metadata collected enables the IT security staff to understand the usage of IT resources including the access patterns. This in turn helps them to draw a clear outline on varied access requirements, including mapping of a workflow matrix. Roles and duties are thus defined.<\/p>\n Entitlements based on \u201cneed-to-know\u201d and \u201cneed-to-do\u201d principle <\/b><\/strong><\/p>\n Once the segregation of duties is defined, the next task to ensure access is granted only on \u201cneed-to-know”, and the \u201cneed-to-do\u201d principle becomes easy. The access entitlements are clearly defined because now the admin knows who ought to access what and how frequently. It mitigates the risk of granting more than required access entitlements.<\/p>\n To keep the identity management house in order, organizations implement several practices that include just-in-time privileges and granular controls. Implementing the basic identity governance practices, complements the other best practices in access management.<\/p>\n","protected":false},"excerpt":{"rendered":" Probably the most convoluted IT practices of all, the Identity Management and Governance is always vulnerable to a security gap. After all, controlling a vast expanse that extends beyond the traditional realm of a datacenter demands careful planning. While spiraling cost issues and inadequate resources often undermine the identity governance approach, the inherent shortcomings are […]<\/p>\n","protected":false},"author":40,"featured_media":47413,"parent":0,"menu_order":0,"template":"","meta":{"_acf_changed":false,"footnotes":""},"risk-categories":[],"class_list":["post-46809","risk-to-watch","type-risk-to-watch","status-publish","has-post-thumbnail","hentry"],"acf":{"blog_inner_page_contents":[{"acf_fc_layout":"hero_section","image":47413,"news_logo":"","publish_date":"","reading_time":"","heading":"","para":"","cta_text":"","cta_url":"","is_featured_post":false},{"acf_fc_layout":"page_contents","social_media_items":null,"sidebar_item_desktop":[{"id":"Overview","item_name":"Overview"},{"id":"The Basics in Identity Management and Governance","item_name":"The Basics in Identity Management and Governance"},{"id":"Entitlements based on \u201cneed-to-know\u201d and \u201cneed-to-do\u201d principle","item_name":"Entitlements based on \u201cneed-to-know\u201d and \u201cneed-to-do\u201d principle"},{"id":"The bottom-line","item_name":"The bottom-line"}],"contents":[{"id":"Overview","title":"Overview","content":"Probably the most convoluted IT practices of all, the Identity Management and Governance is always vulnerable to a security gap. After all, controlling a vast expanse that extends beyond the traditional realm of a datacenter demands careful planning.\r\n\r\nWhile spiraling cost issues and inadequate resources often undermine the identity governance approach, the inherent shortcomings are too many. And how to overcome those shortcomings invariably will depend on whether an organization clings to the basic principles.\r\n\r\nBroadly, the identity governance practice can be split up in three stages.\r\n\r\nIf we move down in descending order, then the stage one is where identity lifecycle management is at the core. Automation and risk-based scores for identities among many other tools enable to on-board, discover, including grant\/revoke access rights to identities. The whole idea here is to uncover the\u00a0security blind spots<\/u><\/a>\u00a0through automation.\r\n\r\nThe second stage is where the manual IT rules and processes complement the automation. Here the Information Security professionals will lay down an unambiguous set of rules as to password policy, authorization among other controls. The objective here is to avoid those mistakes that can prove costly due to the lack of\u00a0policies and processes<\/u><\/a>.\r\n\r\nThe stage three requires doing the basics right. It forms the foundation for robust identity management and governance practice. Here the IT security staff will use the data to the fullest to understand the patterns behind it. Based on the data, an organization can enhance the security by employing the basic tenants in Information Security, especially the identity management and governance."},{"id":"The Basics in Identity Management and Governance","title":"The Basics in Identity Management and Governance","content":"Segregation of Duties<\/b><\/strong>\r\n\r\nEvery time the end-user logs in and conducts IT tasks, the data is collected and managed in the Identity Governance platform. The metadata collected enables the IT security staff to understand the usage of IT resources including the access patterns. This in turn helps them to draw a clear outline on varied access requirements, including mapping of a workflow matrix. Roles and duties are thus defined."},{"id":"Entitlements based on \u201cneed-to-know\u201d and \u201cneed-to-do\u201d principle","title":"Entitlements based on \u201cneed-to-know\u201d and \u201cneed-to-do\u201d principle","content":"Once the segregation of duties is defined, the next task to ensure access is granted only on \u201cneed-to-know\u201d, and the \u201cneed-to-do\u201d principle becomes easy. The access entitlements are clearly defined because now the admin knows who ought to access what and how frequently. It mitigates the risk of granting more than required access entitlements."},{"id":"The bottom-line","title":"The bottom-line","content":"To keep the identity management house in order, organizations implement several practices that include just-in-time privileges and granular controls. Implementing the basic identity governance practices, complements the other best practices in access management."}],"form_shortcode":"","choose_asset_type":"files","links":"","files":"","pardot_redirect_url":"","video_link":""}]},"yoast_head":"\nThe Basics in Identity Management and Governance <\/b><\/strong><\/h2>\n
The bottom-line <\/b><\/strong><\/h2>\n