An Entitlement-Centric Approach to Security

<Insert Picture Here>An Entitlement-Centric Approach to SecurityNishant KaushikLead Strategist, Oracle Identity & Access Management

Enterprise Security TodaySilos, Fragmentation create Complexity Multiple Components to address Multiple Threats

Enterprise Security TodayIntegration Burden hurts Transparency & Business Agility

Ability to Manage Risk is Compromised Threats Faced Business Impact ! $ • Security • Data Gaps breaches • Orphaned • Fraud Accounts • Remediation • Phishing, Ke Costs ylogging, MI TM • Brand Damage • Insider Threats • Customer Loyalty

Compliance Overload • Regulations on rise with Interpretation & Jurisdictional Issues • Costly and Unsustainable Manual Processes 40% Share of IT budgets spent on addressing compliance mandatesSource: The Value of Corporate Secrets by Forrester Consulting (March 2010)

Refactoring the Security Equation

Enterprise Security ReduxLayered, Consistent Approach built on Identity Entitlements

An Entitlements Based View of Identity High Risk• Provides Complete Visibility• Secures by Policy, not Topology• Rationalizes, Integrates and Externalizes Authorization• Analyzes Context

Entitlements Centric Approach is the Answer Consistent Granular Access Business Security Privileges Agility• Centralized policy • Fine-grained access • Lowers application administration controls ensure data retooling costs, reduces framework leads to security and help time to market, and consistent policy prevent fraud accelerates compliance enforcement across the enterprise

A Closed Loop Solution AssignDesign Controls Enforce Controls Administration Entitlements Centric IAM Access Intelligence Monitor Controls Analytics Certify Controls Automate Reporting

Oracle Identity Management’s Unique ApproachComplete, Open, Integrated Suite Wide Integration & Standardization Service-Oriented Security Hot Pluggable

Entitlements Centric Identity in Oracle IAM 11g• Enforces URL based • Risk-aware • Simplifies Provisioning • Streamlines Governance Entitlements Entitlements of Entitlements of User Entitlements• Streamlines Access • Ensures Contextual • Delegated Policy • Ensures Rapid Control Access Control Administration Compliance Adaptive Access Identity Identity Access Manager Manager Analytics Manager Platform Information Directory Entitlements Security Rights Services Server Services Management• Optimizes Application • Identity stores & Policy • Externalizes entitlements • Document Protection Security Lifecycle Information Points • Centralizes enforcement • Secures Data in motion• Eliminates code changes • Accelerates Application of entitlement policies Deployment

An Entitlements Centric ExamplePortals Securing SharePoint SharePoint Deployments SharePoint Security Challenges • Site Proliferation • Complexity of Managing Authorization Customers Employees • Protecting Sensitive Content SQL Server Active Directory Oracle Entitlements Server Benefits • Centralizes control of Partners Contractors SharePoint environments • Enforces Granular Access Control for SharePoint content Oracle Entitlements Server

An Entitlements Centric Case Study Bank Addressing SOX Compliance • A global bank with HQ in Europe, presence in NA, Asia and Emerging MarketsThe Company • Over 90K employees, > 1000 apps, 500 DBs, 6000 servers, and 1.1 M user accounts • SOX Compliance a challenge with over 3.8M actionsBusiness Drivers • Complex feed from multiple platforms – UNIX, Wintel, DBsThe Implementation • Implemented Oracle Identity Analytics (formerly Sun Role Manager) • 3.8M actions reduced to 26K • Annual cost reduction = Euro 3.7MThe Results • 90% app SOX certification complete in 1 week, 100% in 2 months. SOX compliant! • 3 month manual process now takes <2 weeks

The Modern Enterprise is Entitlement Centric • Consistently Enforce Security Across Enterprise • Strengthen Identity & Access Governance • Identify, Measure and Manage Risk • Enable Transparency • Contain Costs and Build Trust

http://blog.talkingidentity.com	231
http://static.slidesharecdn.com	6
http://www.netvibes.com	1
http://web1.conversationminer.com	1

An Entitlement-Centric Approach to Security

by Nishant Kaushik on Apr 05, 2011

Accessibility

Categories

Tags

Upload Details

Usage Rights

4 Embeds 239

Statistics

An Entitlement-Centric Approach to Security — Webinar Transcript