Breakout Session by Cyril Gollain, CEO of Brainwave, at the 2014 IRM Summit in Phoenix, Arizona.

1. IRM Summit 2014
Next-gen enterprise
identity services with
Brainwave Identity GRC
Cyril Gollain, Brainwave

2. 2IRM Summit 2014
Agenda
■ The Trends:
– Consumerization of Enterprise Identities
– WWW Governance: Who, What, When
– Identity beyond IT
■ The Cure:
– Brainwave Identity GRC demo

3. 3IRM Summit 2014
The Trends
Changes in the world of Enterprise Identities

4. 4IRM Summit 2014
Consumerization
■ Over the last 10 years, the number of apps /
accounts / access rights has exploded
■ New ways to access or share IT resources: Cloud,
Mobile…
■ This drives for the need for more flexible ways to
manage permissions in the extended enterprise
– RBAC, Hierarchies, Fixed approval frameworks…

5. 5IRM Summit 2014
Consumerization
■ Old New strategies are coming up:
– Open Bar
– Copy/Paste
– Dynamic suggestions (à la Amazon)
■ Business Enabler: having the right level of
safeguards (eg: on-the-fly) and controls (a
posteriori)

6. 6IRM Summit 2014
WWW Governance
■ In order to efficiently govern your identities you
need to answer the three W:
■ Who: need to build a business-oriented system of
records for Identities
■ What: need to encompass both the breadth of IT
resources and the depth of granular access rights
■ When: need to correlate entitlement and activity
(access logs) in order to assess the risks

7. 7IRM Summit 2014
Identity beyond IT
■ Identity Analytics and Governance features enable
new business Use Cases
– Cost Optimizations: software licenses, mobile subcriptions, office
floor…
– Merger&Acquisition: skills mapping based on entitlements;
identify key people…
– Identity Context: risk-based authorizations, identity-aware
SIEM…

8. 8IRM Summit 2014
The Cure
Brainwave Identity GRC

9. 9IRM Summit 2014
Provide answers to
9
Who can access:
NASsecretverysecretdocument.xls?
Are there users who can remotely issue bank
transfers?
Who left the accounting department over the last 6
months and is still accessing the Finance Back
Office?

10. 10IRM Summit 2014
Bottom-Up Approach
■ Holistic Mapping of organizations, resources, people
and their access rights
■ Advanced navigation and search capabilities,
including time navigation (entitlement history)
■ Advanced audit and analysis automated capabilities
■ Multi-format Reporting, versatile notification
■ Actionable & scalable processes
– Review / Recertification / Remediation / Access Requests…
10

11. 11IRM Summit 2014
Comprehensive Feature Set
Data model with full history trail
Collect engine
Data discovery
Rules engine
Controls
Reporting
Web portal
Exports to pdf, xls,…BPMN2 Workflow
engine
Integrated
ticketing
system
Push mail
IAM and ticketing
systems connectors
Accounts
reconciliation engine
Web Services

12. 12IRM Summit 2014
OpenIDM Identity GRC
Identity GRC OpenIDM
Identity
Lifecycle
OpenIdm Integration
Access Request &
Approvals
Access FulfillmentCompliance controls
& Access Recertification
Closed-loop
remediation

13. 13IRM Summit 2014
Seamless integration
Brainwave Unified Access Portal
Brainwave Core Services
Brainwave Ledger
Open IDM
OpenICF Connectors
Open DJ Business Apps
Reports Analytics Controls Notifications Workflows
JDBC
AjaxREST

14. 14IRM Summit 2014
Benefits
■ Quick to deploy
■ Modular
■ Open
■ Complexity-proof
■ Business oriented
■ ForgeRock ready!

15. 15IRM Summit 2014
Demo time…

16. 16IRM Summit 2014
Questions?
Thank You!
cyril.gollain@brainwave.fr