Identity Intelligence to Drive Business Objectives

<Insert Picture Here>Identity Intelligence To Drive Business ObjectivesNishant KaushikLead Strategist, Identity & Access Management, Oracle

The following is intended to outline our generalproduct direction. It is intended for informationpurposes only, and may not be incorporated intoany contract. It is not a commitment to deliver anymaterial, code, or functionality, and should notbe relied upon in making purchasing decisions.The development, release, and timing of anyfeatures or functionality described for Oracle’sproducts remains at the sole discretion of Oracle. 2

As the Old Enterprise Security Model Fades AwayImage from Flickr User TheWind at http://www.flickr.com/photos/thewind/417968233/ 3

Identity is the New PerimeterSecure by Policy, not Topology 4

Identity Controls and Policy ProliferationIf the Perimeter is Everywhere, How Do You Manage It? 7

Enterprise IT is at the ControlsImage from the video game Star Ocean 3 © Square Enix 8

The Business is Taking a Leap of Faith 9

Divide between Business and ITCost of GRCM can be Crushing 10

Catering to the Business Business wants Greater Transparency, Visibility and Business ControlsSearch for it on eBay 11

The Solution:Identity Intelligence 12

> Gaining Visibility < 13

Build Your Identity Warehouse Collect, Compile, Correlate, Report Identity Warehouse Applications Users, Roles, Orgs, PoliciesIdentity Management Accounts, Entitlements Controls Identity Data Business glossaries, Attestation Sources Classifications User Activity Data ownership, Sources Entitlement hierarchies Approvals DB User Activity, Metrics/KPI, Environmental Variables Mainframe History, Versioning 14

Construct a 360-Degree View of User AccessGranular View of User Access for Educated Decision-making• Business Glossary• Role vs. Actual• Audit Exceptions• Account Status• Historical Data• Approval Data• Role, Entitlement, Resource, Data Owner Access Certifications 15

> From Data to Insight < High Risk 16

Transform Data Into Information with AnalyticsHolistic Analysis and Monitoring Identity WarehouseApplications Mining MonitoringIdentity Data Sources DB Impact Analysis Mainframe Roles Recommendations Policies Alerts Context 17

Focus in With Risk-Based ManagementEliminate the Noise Identity Warehouse Applications Risk Assignment Identity Data Sources Resources Identities Entitlements Roles Events DB Risk Aggregation Mainframe Low Risk Med Risk High Risk Bulk Certify Cert360 Adaptive Auth Approve Reject 18

> Link Insight to Action < 19

Automate Attestation Detailed, Delegated, Tracked Set Up Automated Action Report Built Reviewer Is Notified1 Periodic Review 2 Goes to Self Service 3 is taken based on Periodic Review 4 And Results Stored in DB Reviewer Selections Email Result What Is Certify to UserReviewed? Automatically Reject Terminate User Who Decline Notify theReviews It? Process Owner Archive Delegate Notify Delegated Attested Data Reviewer Attestation ActionsStart When? Delegation PathsHow Often? Comments 20

Automate SoD Compliance Preventive Simulation with Policy Engine Provisioning Engine Identity Intelligence Engine Resource Approval 1 Workflow SoD Validation Request Conflict SoD Policy Resource Analysis Simulation Provisioning Workflow 2 3 SoD Validation Response Notify of ExceptionsProvision SoD compliant or and Overriding AuthoritySoD exception entitlement assignments 21

Automate RemediationConflict Detection with Closed-Loop Remediation Identity Intelligence Engine Provisioning Engine Attestation Roles, Accounts & Resource Entitlements Exported for Provisioning/ Remediation De-Provisioning De-Provisioning Configuration Workflow Revocation Revocation of Account & Resource Entitlement Resources & Roles Tracking Data Imported (automated and/or manual) (closing the loop) Complete De-Provisioning Audit Trail Comprehensive Audit Trail 22

Prove ComplianceCompliance Command Console• Actionable dashboards – Reliable risk analysis• Reports like Top N- lists• Comprehensive cross-referenced presentable data – Enable complete Identity Governance• Advanced analytics 23

Implement a Feedback LoopCreate a Self-Improving Identity Environment Identity Intelligence Identity Controls Recommendations Simulation Results Detective Analysis Authentication Federation Authorization ID Admin Directory Svs Role Mgmt Pattern Analysis Activity Logs Contextual Decisions Data Mining Audit & Historical Data Inline Analytics What-If Simulations Usage Patterns Self-Service Guidance 24

Build on the PlatformNew Possibilities for Decision Support Applications Identity Intelligence Decision Support Apps Identity Information Application Builder Tools with Context Embeddable Dashboards APIs 25

How Can Help 26

Oracle Identity Analytics 11g Complete Identity & Access Governance Solution Identity Data Compliance Command Console Sources Identity Access Certification Oracle Identity Manager Warehouse ! IT Audit Policy Monitoring Oracle Access Manager Role Governance• Compliance Command Console • Actionable Dashboards, Business Reports & Comprehensive Analytics• Accelerated and Sustainable Compliance Automation • Access Certification, IT Audit Policy Monitoring, Closed-loop Remediation• Intelligent Role Governance • Change Management, Attestation, Consolidation & Audit, Role Mining• Rich Identity Warehouse • Optimized for Analysis, Mining, Correlation, Reporting on Identity, Access and Policy Data 27

Oracle Adaptive Access Manager 11g Fraud Prevention Secure Login Model Analysis and Detect Risk Forensics Anomalies Evaluate Challenge or Block Transactions• Authentication Security • Knowledge-based and one-time-pin challenges based on risk• Real-time Anomaly Detection • Based on historic behavior patterns, environmental information• Proactive Fraud Prevention • Risk based Challenge or Block• Reporting and forensics • Centralized policy administration, dashboards, investigation/forensics tools 28

Achieving Quick Compliance Results Reduce Cost and Time$ Identity Warehouse Build Identity Automate Automate SoD Automate Intelligence Attestation Compliance Compliance Reporting 29

Total Economic ImpactA Comprehensive Study• A financial model based on Forrester’s TEI methodology• Created a composite organization to populate the model – Based on interviews with actual customers – Baseline assumptions founded on 4 implementations – Comprehensive, risk-adjusted cost-benefit analysis 61% $ 1,050,235 ROI NPV Based on a composite firm with 30,000 users (Source: The Total Economic Impact of Oracle Identity Analytics – A commissioned study conducted by Forrester Consulting on behalf of Oracle, 2010) 30

Total Economic ImpactA Real Life Example • A global bank with HQ in Europe, presence in NA, Asia and The Emerging Markets Company • Over 90K employees, > 1000 apps, 500 DBs, 6000 servers, and 1.1 M user accounts Business • SOX Compliance a challenge with over 3.8M actions Drivers • Complex feed from multiple platforms – UNIX, Wintel, DBs The • Implemented Oracle Identity Analytics (formerly Sun Implementation Role Manager) • 3.8M actions reduced to 26K The • Annual cost reduction = Euro 3.7M Results • 90% app SOX certification complete in 1 week, 100% in 2 months. SOX compliant! • 3 month manual process now takes <2 weeks 31

Go Beyond Compliance with Identity IntelligenceBridge the IT and Business Divide• Turn Data into Insight, and Insight into Action• Strengthen Identity & Access Governance• Identify, Measure and Manage Risk• Supports Business Decisions• Enable Transparency• Contain Costs• Build Trust 32

QuestionsLearn More Connect, Discuss oracle.com/identity @NishantK bit.ly/oracleidm11g blog.talkingidentity.com 33

http://blog.talkingidentity.com	355
http://static.slidesharecdn.com	13
http://translate.googleusercontent.com	3
http://feeds.feedburner.com	2
http://paper.li	1
http://a0.twimg.com	1
http://webcache.googleusercontent.com	1

Identity Intelligence to Drive Business Objectives

by Nishant Kaushik on May 02, 2011

Accessibility

Categories

Tags

Upload Details

Usage Rights

7 Embeds 376

Statistics

Identity Intelligence to Drive Business Objectives — Webinar Transcript