This document discusses intelligent identity and access governance. It notes that over 80% of breaches involve compromised accounts, and the average time accounts are compromised before detection is over 200 days. This leaves a need for access intelligence and analytics to more quickly detect and remediate access risks. The document introduces Access Insight, a tool from Courion that uses access analytics to identify issues like unused accounts, separation of duties violations, and accounts of terminated employees within hours of analyzing an organization's identity data. This helps reduce attack surfaces and detect and disrupt threats before losses occur.

1. 1
Intelligent Identity and Access Governance
Deter, Detect, and Remediate Breaches Before Business Loss
Tuesday, December 8, 2015Venkat Rajaji, VP Product Management
Chris Sullivan, GM Intelligence/Analytics

2. 2
What you do is important!
1982 2008 2013

3. 3
10x Market
All Use Cases – Highest CS – Delivering on intelligent IGA

4. 4
Deter, Detect &
Remediate Access Risk
with Speed, Efficiency
& Efficacy

5. 5
What are we talking about??????
 IGA – Identity and access governance
 IAM – Identity and access management
 IDM – Identity management
 I-* – Intelligent *
 Identity
 Access
 Governance
 Intelligence

6. 6
So what’s the problem?

7. 7
of breaches used compromised accounts

8. 8
Days that accounts were found to be
compromised in breach investigations

9. 9
of budgets are spent on the perimeter

10. 10
This leaves a burning need for

11. 11
Root Cause
Problem Area
 Real Risk
 Regulatory Risk
Treatment
 IPS
 SEIM
 Firewalls
 AV
Access Control
 Information
 Processes

12. 12
Access is Complicated…
 Identity
 Accounts
 Entitlements
 Roles
 Applications

13. 13
Separation of Duties

14. 14
Privileged Access

15. 15
The Complexity Challenge
POLICIES
RESOURCES
ACTIVITIES
RIGHTS
IDENTITIES
PROVISIONING
GOVERNANCE
Identities Resources Rights Policy Activity Total

16. 16
High
Months
or Never
The OODA (Speed) Chasm
PROVISIONING
GOVERNANCE
Low
Days
Observe Orient
Act Decide
Observe Orient
Act Decide

17. 17
The Management Gap

18. 18
“By year-end 2020, identity analytics and
intelligence (IAI) tools will deliver direct
business value in 60% of enterprises, up
from <5% today.”
Intelligent IAM

19. 19
• Access (Cyber) Intelligence/Analytics
ACSC

20. 20
A Short but Important Tangent
IMPACT LIKELIHOODRISK

21. 21

22. 22
Access Insight™ = Value in Hours
 Reduces Attack Surface
• Large US bank
 3,435 active accounts have never been used
 640 SoD violations
 53 administrative accounts for
terminated staff
• Similar findings:
 Insurance
 Retail
 Healthcare
 Detects and Disrupts Before Loss

23. 23
The New OODA Chasm
PROVISIONING
GOVERNANCE
Low
Days
Observe Orient
Act Decide
Low
Minutes
High
Fidelity
Observe Orient
Act Decide
Continuous Process Improvement

24. 24
Chris Sullivan
GM, Intelligence/Analytics
csullivan@Courion.com
Venkat Rajaji
VP, Product Management/Marketing
vrajaji@Courion.com