
Identity Management (IdM) has quickly become a core concern for businesses today—public and private. IdM affects how companies securely
interact and build relationships with customers, partners, suppliers and employees.
Given today’s business and regulatory environments, organizations are forced to make identity management (IdM) issues a core component
of their computing foundation. Enterprise IdM spans all of a company’s technologies, and social and political boundaries.
Today’s workforce must have access to a number of systems, including general ledger applications, e-mail systems, business process
applications, customer relationship management systems and more. The challenge is that these systems probably do not share a common
set of user credentials and have no common user auditing and provisioning mechanism.
Nevertheless, corporate security professionals continue to urge their managements to fund consolidation of authentication and
authorization platform projects for all systems within the enterprise to better manage Sarbanes-Oxley 404 Compliance.
Meanwhile, the companies’ outside auditing firms put the same pressure on executives and board members to develop a 404 compliance plan
this year.
CPSG has developed a very manageable approach to unifying user credentials across the enterprise, which includes reporting on user
activities.
In this phased approach, CPSG works with security professionals to understand the company’s specific Sarbanes-Oxley 404 risks. CPSG then
works with IT professionals to develop a technical gap analysis for all systems and applications, followed by the development of a
tactical plan for remediation.
Once the tactical plan is approved, CPSG will assist with implementation and provide our own unique experience on managing the plan
moving forward.
Business Benefits
- Enhances business governance – understanding how to manage Sarbanes-Oxley compliance
- Lowers risk and ensures compliance with policies and mandates
- Provides ability to audit – consistent, manageable and comprehensive reports and repeatable processes for user IdM
- Provides ability to leverage departmental resources to activate new employees’ user IDs
- Improves operational efficiencies
- Enhances productivity, business relationships and increases revenue
Technical Benefits
- Non-evasive approach to aggregating users identity
- Ability to provision users across multiple systems in the IdM architecture with one interface
- Higher degree of security for critical information and applications
- Minimal infrastructure costs to adapt current systems and no requirement to rip and replace existing corporate directories and infrastructures
|
|
|