Achieving Effective Identity and Access Governance

IT & DATA MANAGEMENT RESEARCH,
INDUSTRY ANALYSIS & CONSULTING
Steve Brasen
Research Director – Endpoint and Identity Management
Enterprise Management Associates
Achieving Effective Identity and
Access Governance

Watch the On-Demand Webinar
Slide 2
• Achieving Effective Identity and Access Governance On-
Demand webinar is available here:
http://info.enterprisemanagement.com/achieving-effective-identity-
and-access-governance-webinar-ws
• Check out upcoming webinars from EMA here:
http://www.enterprisemanagement.com/freeResearch

Featured Speaker
Steve Brasen, Research Director, EMA
Steve's career at EMA follows 20+ years of “in the trenches”
experience in IT systems support, engineering, and management for
high technology, telecommunications, and financial
institutions. Steve's primary focus area at EMA is on endpoint
management topics, including enterprise mobile management, client
lifecycle management, desktop virtualization, and workspace
management.

Logistics
Slide 4 © 2019 Enterprise Management Associates, Inc.
An archived version of the event recording will be available at
www.enterprisemanagement.com
• Log questions in the chat panel located on the lower left-
hand corner of your screen
• Questions will be addressed during the Q&A session of
the event
QUESTIONS
EVENT RECORDING

Sponsored by:

Agenda
• Understanding Identity and Access
Governance
• Research and Methodology
• Business Requirements and
Challenges for Identity and Access
Governance
• Effective Governance Policies,
Processes, and Audits
• Achieving Business Goals for Identity
and Access Governance
• Conclusions

Understanding Identity and Access Governance
The first line of defense in enterprise security
is identity and access management (IAM)
• Identity management positively determines
who is requesting access
• Access management controls the resources
identified that users have access to and the
ways in which they can use them
Identity and access governance processes
orchestrate the policy-based controls that enable
organizations to meet enterprise IT security and
compliance initiatives.
• Defines the policies enforced by IAM controls

Understanding Identity and Access Governance
Key elements of identity and
access governance include:
 Policy Development
 Policy Enforcement
 Policy Review
 Auditing
 User and Group Administration
 Identity Intelligence
 Privileged Access Management

Research and Methodology
EMA conducted primary, survey-based research to identify optimal
approaches to identity and access governance
Survey Demographics
• 206 respondents
• All respondents were from North America
• Respondents were IT and security
managers knowledgeable about their
organization’s identity and access
management requirements and solutions
• Respondents were from a wide range of
industry verticals and horizontals

Business Requirements and Challenges
Identity and access governance
is considered an essential
practice by the majority of
businesses
Percentage of respondents indicating how important identity
and access governance is to their organization

While most organizations deliver IT services directly to their
employees, many also extend access to users outside their business
Percentage of respondents indicating the types of users who access enterprise IT resources

Governance practices are also encumbered by the diversity of
resources accessed by supported users
Percentage of respondents indicating types of hosted IT resources that require
identity and access controls governed by their organization

85% of survey respondents indicated that users in their organization
violated business IAM policies in the preceding 12 months
Percentage of respondents indicating consequences that occurred due to a violation of their
organization’s identity and access management policies

Governance Policies, Processes, and Audits
The practices managed by a governance board can vary greatly
depending on the type of business and required level of security.
Percentage of respondents indicating processes that are actively overseen by a governance body in their organization

There is a direct correlation between the frequency of audits
and an organization’s ability to detect policy violations.
Percentage of users in respondent’s organization who were detected violating identity and access policies in the last year
(segmented by the average frequency of audits)

The effort necessary to perform frequent governance audits is
directly attributable to the number and complexity of audit tasks.
Percentage of respondents indicating the processes included in formal identity and access governance audits

Achieving Business Goals for Governance
Identity and access governance platforms provide a wide range
of features for automating and managing processes across the
breadth of governance requirements.
Percentage of respondents indicating the most important features of an identity and access governance platform

The value achieved from adopting an identity and access
governance platform is quantified by reviewing the level of
difficulty in performing specific tasks
Comparing platform adopters to non-adopters on the LEVEL OF DIFFICULTY in performing identity and access governance tasks

Difficult tasks are not necessarily time-consuming (and vice versa),
but the amount of time spent performing tasks is also affected by the
adoption of a governance platform
Comparing platform adopters to non-adopters on HOW TIME-CONSUMING it is to perform identity and access governance tasks

The financial cost of performing governance tasks was also
determined to be broadly mitigated by the adoption of
governance platforms
Comparing platform adopters to non-adopters on HOW FINANCIALLY COSTLY it is to perform identity and access governance tasks

Conclusions
 Effective identity and access governance
requires the establishment of holistic visibility
across their entire IT ecosystem
 Audit and reporting processes must be
performed at least once every month to close
potential risks and ensure existing policies
accurately reflect business requirements
 An automated identity and access governance
platform is essential to easily and cost-
effectively achieving continuous compliance
and risk mitigation

Questions?
Get the full report at http://bit.ly/2WFvFKc

Achieving Effective Identity and Access Governance

Empfohlen

Empfohlen

Weitere ähnliche Inhalte

Was ist angesagt?

Was ist angesagt? (20)

Ähnlich wie Achieving Effective Identity and Access Governance

Ähnlich wie Achieving Effective Identity and Access Governance (20)

Mehr von Enterprise Management Associates

Mehr von Enterprise Management Associates (20)

Kürzlich hochgeladen

Kürzlich hochgeladen (20)

Achieving Effective Identity and Access Governance