 
  See your link here
|
For more info on a specific newsletter, click the title. Details will be displayed in a new window.
Subscribe to
Computerworld 40 years of the most authoritative source of news and information for IT leaders.
Seven habits of highly effective identity management
or
Other Security Stories
|
|
|
|
August 12, 2004 (Computerworld) --
The emergence of Web-based technologies has forced organizations to change the way they conduct business. They must find new ways and new tools to securely control access to corporate resources and manage the security risks associated with the escalating volume of user administration.
To be successful, companies must integrate their information systems and combine disparate technologies, particularly as a result of business mergers and acquisitions. To accommodate these changes, the IT department must administer a large number of heterogeneous systems and applications, manage a huge influx of new users and adjust their privileges accordingly. To add to this complexity, many organizations have implemented point security solutions, which are often time-consuming and costly for the IT department to integrate and customize.
Integrated identity management systems help IT managers reduce risks, manage user administration demands and adapt to new regulations. Identity management systems with the right requirements can help companies realize benefits across the business, from employees and partners to customers.
The following are seven "must-haves" to look for when selecting the best identity management system for your organization.
1. Role-based user provisioning
User provisioning is the process for managing user identities enterprisewide and beyond. User provisioning encompasses the following:
- Types of users an organization will manage
- Systems, applications and other business resources users need access to
- Levels of access to those resources
- Creation, update and deletion of user accounts
- Measurement of administrative overhead associated with user management
- Metrics for success
User provisioning provides the proper resources to users at minimal cost. It manages a user's work cycle, including things such creating accounts on different systems, extending access to external services and temporarily suspending access or permanently revoking accounts. Effective user provisioning reduces security risks, including weak passwords, and minimizes obstacles to user productivity. User provisioning also provides centralized management capabilities and automation via role-based account creation and workflow access rights to business resources.
2. Managing user identity
Organizations can identify different types of users according to their business functions: employees, customers, suppliers, partners and more. Each user within these groups owns a separate online "identity" that can be managed efficiently to reduce risks and lower business costs.
It's far easier to manage a single user identity than multiple identities for one user. Identities can be managed according to users' needs, enabling the organization to deliver quality and increased customer satisfaction.
Internally, user provisioning tools are implemented by the IT department and integrated with the human resources application. Particular user roles should have predefined access rights. When an employee joins a specific role, his access permissions to business resources are dynamically updated according to the permissions preset by the IT department. This approach ultimately reduces costs and effectively
|
Print this Story |
|
Send Us Feedback |
|
E-mail this Story |
|
Digg this Story |
|
Slashdot this Story |
|
|
|
|
|
 |
| All Zones Application Performance Zone Business Continuity Zone The File Data Management Zone Security Management Zone The SAS Zone Business Intelligence and Analytics Zone Windows Protection Zone The Enterprise Search Zone Software as a Service Zone The Security Zone |
|
See your link here
|
 |
||||||||
| ||||||||
| ||||||||
| ||||||||
|
Moving to Windows Vista: The Promise, The Reality
Download this Executive Bulletin (a $49.95 value) for free, compliments of MessageLabs. 
Download this white paper today!
Read up on the latest ideas and technologies from companies that sell hardware, software and services.
- 'Experimental' security fix is malware, Microsoft says
- Microsoft readies first attack forecast
- Top security suites fail exploit tests
- More top stories
 The Security Zone
Securing your network begins at the gateway, also called the perimeter, to keep unauthorized users, viruses and malicious code from entering your systems. Deploying multilayer technologies is your first line of defense. With the mobility of employees and the ease with which external devices can be brought in and out of a network, continuing to build your security plan for network servers and clients is a must. Fortunately, there is much that organizations can do to protect themselves from attacks - internal and external. One of the key facets of a successful security strategy is protecting the servers that run critical applications and house so much of your essential data. Having the right policies, procedures and server configurations is critical. Learn more in The Security Zone See All Zones
|
 Fired up about IT? Join Sharkbait and share your true tales of IT. SharkBait is the place for you to sound off about everything IT – the good, the bad, and the rest of the weird stuff you deal with every day.New baits 
|
|
|
Seth Weintraub:
Apple Macbook Event Liveblog
I'll be liveblogging here when the event begins. That's scheduled for 1 p.m. EDT. ... [more]
|
