June 14, 2004 (Computerworld) --
The hotel division of Cendant Corp. is investing in Web-based identity and access management technology that it expects will yield not just security benefits, but business gains as well. The New York-based owner of brands such as Ramada and Days Inn is nearing completion of a Web portal project designed to improve corporate information access for its 6,500 hotel franchises. When complete in the fourth quarter of this year, Cendant's Brand Portal site will replace many of the highly manual processes that franchise operators currently use to send and receive information about room rates and bookings, property descriptions, inventory availability and other matters. "This is leaps and bounds beyond what we have," said Scott Lunsford, senior director of Internet solutions at Cendant's hotel IT group. Unifying the individually operated franchises under a common portal will deliver significant operational efficiencies and give Cendant brands the scale needed to compete better on price, he said. "You could say 49% of this is about security and 51% about business [benefit]," Lunsford said. Model Portal Cendant's portal is "a great model" to show how companies can get a tangible return on investment from Web access-control and identity management technologies, said Pete Lindstrom, an analyst at Spire Security LLC in Malvern, Pa.
Scott Lunsford, senior director of Internet solutions at Cendant's hotel IT group Image Credit: Jaikumar Vijayan
Generally, companies have had a hard time measuring ROI on many security investments. But the cost savings promised by access-control and identity management products are driving growing corporate interest, said Phil Shacter, an analyst at Burton Group in Midvale, Utah. A role-based access-control system using identity management technology from Cupertino, Calif.-based Oblix Inc. is providing the underpinning for the portal, which will be accessed by over 30,000 users. Cendant declined to say how much it's spending on the project. But according to Oblix, typical costs average about $15 per user for large implementations.
Oblix's CoreID technology will allow Cendant to build access policies based on factors such as user roles and property size. The technology will also let Cendant automate much of the business processes and rules related to creating, deleting and modifying identity information and access privileges. The centralized management of user information will allow for better authentication and more secure access to multiple back-end applications, including the rate, inventory management and financial information systems that are needed for Web-based bookings. The new infrastructure will eliminate the need to support multiple access mechanisms and secure identity silos, thereby reducing operational costs, Lunsford said. Because Oblix's technology also lets end users perform tasks themselves such as password resets, support and help desks costs are expected to be lower as well, he said. The franchises will also benefit, said Marcelo Schnettler, manager of Web development at Cendant. The portal will allow franchise operators to update rate and inventory information more efficiently than current fax and mail processes. In addition, operators will no longer need to send separate copies of the information to Global Distribution Systems such as those of Worldspan Technologies Inc. and Pegasus Solutions Inc. that are used by online travel services vendors. The Web site will also improve Cendant's ability to alert franchise operators of specific rate and inventory optimization opportunities, he said. Cendant is hoping that the value delivered by the portal will attract other franchises from competing chains, said Lunsford. Building the portal has had its share of challenges. The biggest has been the process of assigning roles, and consequently the right access levels, to people who access the portal. For instance, a general manager's job at a small hotel is very different from that of a general manager at a large one, Schnettler said. Accommodating those kinds of differences has proved to be the biggest hurdle so far, he said.
Marcelo Schnettler, manager of Web development at Cendant Image Credit: Jaikumar Vijayan
From Laggard to Leader: Transforming the Data Center
From Laggard to Leader: Transforming the Data Center Register for this complimentary live webcast today! Go to the webcast
Computerworld Executive Bulletin: Building a Robust Antivirus Defense
Download this Executive Bulletin (a $49.95 value) for free, compliments of MessageLabs. (Source: MessageLabs) Antivirus software alone isn't enough to prevent today's speedy, sophisticated virus attacks. Security managers should consider multitiered approaches that include behavior scanning, appliances that check e-mail for worms, and restricting user access to dangerous Web sites. Download this Executive Bulletin (a $49.95 value) for free, compliments of MessageLabs, to learn more. Download this executive briefing
Online Security Issues in Regulated Industries
Download this research paper, free for a limited time, compliments of Webroot! (Source: Webroot Software) In June 2008, Computerworld invited IT and business leaders to participate in a survey on online security initiatives at their organizations. The goal of the survey was to better understand Web and e-mail security issues faced today within the regulated education, financial services, government and health care industries. The following report represents top-line results of that survey. Download this white paper
White Papers
Read up on the latest ideas and technologies from companies that sell hardware, software and services.
Security Management Zone
Security management is the process of developing a comprehensive data protection plan. It takes into account all potential threats, the existing network environment, the future needs of the organization, and lays out a multi-tiered blueprint to integrate the security technology needed to combat these threats. CDW can help keep your network and data secure.
Visit the CDW Security Management Zone nowSee All Zones
Fired up about IT?Join Sharkbait and share your true tales of IT. SharkBait is the place for you to sound off about everything IT the good, the bad, and the rest of the weird stuff you deal with every day.
In Security Stripping away the trappings of applications, systems and networks, information is the core asset of most organizations. Our columnist describes how asserting the importance of information governance is crucial to making that asset tangible, addressable and protected.
Click here to read the latest column by Jon Espenschied