Enterprises enthusiastically embrace SaaS apps, yet organizations are essentially entrusting 3rd parties with business critical data. View this deck for actionable insights for driving a more compliant portfolio of cloud services. -How to implement a secure access strategy no matter where your data lives or how your users access it -How to easily federate directories and facilitate cross domain access -How to enforce access control policies to support compliance with mandates -How to audit application access and usage

1. C O M P L I A N C E I N T H E
E R A O F C L O U D

2. S P E A K E R S
Chip Epps
Senior Director, Product Marketing
@chipepps
Alvaro J Hoyos
Chief Information Security Officer
@wherestherisk
Rob Capozzi
Senior Sales Engineer
@onelogin

3. / / / Introduction
/ / / Develop a Secure Access Strategy
/ / / Implement a Secure Access Strategy with OneLogin
/ / / Questions & Answers
A G E N D A

4. Guidelines & Frameworks Aid in the Process
● ISO 27001
● NIST Cybersecurity Framework
Structured Approach Makes the Process Manageable
P L A N
A C T
D O
C H E C K
ISO 27001
NIST Cybersecurity Framework
D E V E L O P A S E C U R E A C C E S S S T R A T E G Y
P R O T E C T D E T E C TI D E N T I F Y [...]

5. I D E N T I F Y
D E V E L O P A S E C U R E A C C E S S S T R A T E G Y
Ticketing
System
I D E N T I F Y
P R O T E C T
D E T E C T
Function Defined
● Identify assets and asset owners
● Typically done as part of your risk assessment process
● Assets can be people, data, systems
Example Assets
Storage
[Financial
Data]
Storage
[Brand Assets] Office
Productivity
ERP
[AR, AP, G/L]
Email
Social Media
Virtual Data
Center
CRM
Source Code
Web
Conferencing
Contract
Management

6. I D E N T I F Y
D E V E L O P A S E C U R E A C C E S S S T R A T E G Y
I D E N T I F Y
P R O T E C T
D E T E C T
Assets Organized by Department
Social Media
Email
CRM
Storage
[Brand Assets]
M A R K E T I N G
Contract
Management
Email
CRM
Office
Productivity
S A L E S
ERP
[AR, AP, G/L]
Email
Storage
[Financial Data]
Office
Productivity
F I N A N C E
Virtual Data
Center
Email
Source Code
Ticketing
System
D E V O P S

7. P R O T E C T
D E V E L O P A S E C U R E A C C E S S S T R A T E G Y
D E T E C T
P R O T E C T
I D E N T I F Y Function Defined
● Develop and implement safeguards
● Safeguards should be commensurate with risk
Sample Safeguards
● Role based access
● Strong passwords
● Multi-factor authentication
● IP whitelisting

8. P R O T E C T
D E V E L O P A S E C U R E A C C E S S S T R A T E G Y
D E T E C T
P R O T E C T
I D E N T I F Y Deploy Safeguards Based on Risk
LowerRiskHigherRisk
+Role based access
+Strong passwords
+Role based access
+Strong passwords
+MFA
+IP whitelisting
Email
Storage
[Financial Data]
Office
Productivity
F I N A N C E
ERP
[AR, AP, G/L]

9. D E T E C T
D E V E L O P A S E C U R E A C C E S S S T R A T E G Y
I D E N T I F Y Function Defined
● Develop detection mechanisms
● Mechanisms can be active or passive
Example Mechanisms
● Access reviews
● Event log reviews
● Automated alerts
D E T E C T
P R O T E C T

10. D E T E C T
D E V E L O P A S E C U R E A C C E S S S T R A T E G Y
I D E N T I F Y Deploy Mechanisms Based on Risk
D E T E C T
P R O T E C T
Non-Privileged
User Access
Privileged User
Access
A C C E S S L E V E L S
LowerRiskHigherRisk
+Periodic user access
+Periodic user access
+Assumed user review

11. DEMO

12. I M P L E M E N T A S E C U R E A C C E S S S T R A T E G Y
I D E N T I F Y
Map Asset Users to Assets Discovered in Identify Function
● Connecting different OUs
● Creating role containers to enable role based access
Deploy Safeguards from Protect Function
● Role based access
● Strong passwords
● Multi-factor authentication
● IP whitelisting
Deploy Mechanisms from Detect Function
● Access reviews
● Event log reviews
P R O T E C T
D E T E C T

13. Q & A

14. G E T O N E L O G I N F O R F R E E
HTTPS://WWW.ONELOGIN.COM/SIGNUP
Q & A

15. 15
THANK YOU
Alvaro J Hoyos
Chief Information Security Officer
alvaro.hoyos@onelogin.com
Rob Capozzi
Senior Sales Engineer
ron.capozzi@onelogin.com
Chip Epps
Sr. Director, Product Marketing
chip.epps@onelogin.com