The Cross-Examination of Identity Governance and Intelligence

Identity governance and intelligence has renewed focus on the world of IT security and identity and access management (IAM). Like many new approaches in the past, there are questions that need to be answered — and lots of them:

Why have identity governance projects failed to connect with the business, and why should I continue to care?
Can we continue to use spreadsheets instead of buying enterprise software?
Are roles the best way to govern user identities and manage risk?
Isn’t identity governance just an audit or compliance solution?

Answering Identity Governance Questions

On April 8, 2016, IBM Identity Governance Specialist David Tyrrell will try to answer those questions and more as he is cross-examined by yours truly. This will include an interactive discussion on business activities, where they come from and why IBM thinks they are the most effective solution to govern the user identity. The session will also cover how identity governance and intelligence can secure your organization, protect it against insider threats and help it remain compliant.

Roles have long been the tool of choice for enterprise security solutions to govern user identities, but are they really the best way? Roles change, overlap, are added and removed, and this makes it hard to use them to manage identity governance.

Due to this difficulty, many organizations are forced to manage fine-grained entitlements as a means to identity governance. These highly technical entitlements are effective at managing users down to the most granular level. However, it can lead to a communication barrier between IT, the business and the audit teams.

Using business activities is a new approach to managing identity governance. It helps to optimize the entire process. Business activities remove the need to use roles in identity governance and, most importantly, are easily understood by business users. This simplicity facilitates communication and empowers end users to make the right decisions when it comes to proper access.

Learn More

IBM Security Identity Governance was just named a leader in the 2016 Gartner Magic Quadrant for Identity Governance and Administration. Join our April 8 webinar to learn why the solution is so effective and to have your identity governance questions answered.

Watch the on-demand webinar: The Cross-Examination of Identity Governance and Intelligence

Nick Oropall

WW Market Segment Manager, IBM Security Identity Governance and Administration

“Authorized” to break in: Adversaries use valid credentials to compromise cloud environments

4 min read - Overprivileged plaintext credentials left on display in 33% of X-Force adversary simulations Adversaries are constantly seeking to improve their productivity margins, but new data from IBM X-Force suggests they aren’t exclusively leaning on sophistication to do so. Simple yet reliable tactics that offer ease of use and often direct access to privileged environments are still heavily relied upon. Today X-Force released the 2023 Cloud Threat Landscape Report, detailing common trends and top threats observed against cloud environments over the past…

Artificial intelligence threats in identity management

4 min read - The 2023 Identity Security Threat Landscape Report from CyberArk identified some valuable insights. 2,300 security professionals surveyed responded with some sobering figures: 68% are concerned about insider threats from employee layoffs and churn 99% expect some type of identity compromise driven by financial cutbacks, geopolitical factors, cloud applications and hybrid work environments 74% are concerned about confidential data loss through employees, ex-employees and third-party vendors. Additionally, many feel digital identity proliferation is on the rise and the attack surface is…

X-Force certified containment: Responding to AD CS attacks

6 min read - This post was made possible through the contributions of Joseph Spero and Thanassis Diogos. In June 2023, IBM Security X-Force responded to an incident where a client had received alerts from their security tooling regarding potential malicious activity originating from a system within their network targeting a domain controller. X-Force analysis revealed that an attacker gained access to the client network through a VPN connection using a third-party IT management account. The IT management account had multi-factor authentication (MFA) disabled…

CISA, NSA issue new IAM best practice guidelines

4 min read - The Cybersecurity and Infrastructure Security Agency (CISA) and the National Security Agency (NSA) recently released a new 31-page document outlining best practices for identity and access management (IAM) administrators. As the industry increasingly moves towards cloud and hybrid computing environments, managing the complexities of digital identities can be challenging. Nonetheless, the importance of IAM cannot be overstated in today's world, where data security is more critical than ever. Meanwhile, IAM itself can be a source of vulnerability if not implemented…

Security Intelligence

{{title}}

{{title}}

{{title}}

{{title}}

Topics

Answering Identity Governance Questions

Learn More

More from Identity & Access

“Authorized” to break in: Adversaries use valid credentials to compromise cloud environments

Artificial intelligence threats in identity management

X-Force certified containment: Responding to AD CS attacks

CISA, NSA issue new IAM best practice guidelines