Identity Management 17 August Robin Anson

Transcription

1 Identity Management 17 August 2004 Robin Anson

2 Acumen Alliance and IdM! Acumen Alliance has a dedicated Identity Management advisory group! Services offered include: design and advice, business case development and reviews of existing solutions and components! Vendor independent! Not aligned with any solution provider! Focused on the policy and process that support the technology 2

3 ! Digital identity The Basics Collection of attributes that reflect a realworld entity Single entity but multiple digital identities! Identity Management Managing digital identities over a lifecycle Managing relationships between identities! Supports access control 3

4 Identity Management! IdM to secure the enterprise but a lot more!! Regulations - Sarbanes Oxley, Basle II etc! Significant cost savings and improved efficiency! Extracting value from ERP and ebusiness investments! Interest moving to integrated IdM solutions 4

5 What Do the Solutions Look Like?! Everything from simple directory pieces to suites of integrated solution components! Players include IBM, Sun, Novell, Netegrity, BMC, Microsoft etc! NONE has a complete integrated solution! All require supporting pieces! They will not work without the business processes to support them! 5

6 Extracting the Value From Your Investment! What is the short to medium term outlook Compliance and regulatory pressures will drive new strategies, ensuring that firms are under pressure to deliver tight IdM.! Critical to develop: Technical solution and Business process and strategy! This will ensure effectiveness 6

7 Extracting the Value From Your Investment! IdM a fundamental component of business and IT investment.! Drivers include: legislative, regulatory, business efficiency, cost benefits, reporting and audit! Visibility across the enterprise 7

8 Extracting the Value From Your Investment! Few Australian firms have developed a comprehensive approach to IdM! Vulnerable to enterprise risk and security issues! Difficulty of coping with new compliance regimes.! Acumen s view: Very few Australian firms have attempted to implement complete solutions Audit and risk reviews would find their IdM services inefficient and vulnerable 8

9 Appropriate IdM Approach! Becoming central to security and access management! NOT just a simple matter of selecting a software solution and plugging it in.! 85% of the effort is non-it elements: GE Plastics global rollout: 85% on non tech costs Large Australian Telco: $2.5 million on IdM feasibility study stalled though lack of business support for processes change Boeing re-orientated focus of IdM following buy-in from executives across the business groups - Delivered massive benefits and change! To leave the project solely to IT will leave major risks unaddressed 9

10 What Is Driving IdM Internal! Risk! Audit! HR! Finance! Board! Application Owners! IT! Business! Users External! SOA CLERP 9! IT Cost reduction! Reporting! HR Effectiveness! E-Business speed and efficiency! Delegated admin cost benefits 10

11 So Many Players?! All can support the IdM process and strategy but most could also derail a project! Get them engaged early using an external viewpoint! Show what can be achieved: the lost accounts, the cost savings, the delays in getting contractors functioning, the cost of unused mobile phone accounts or credit cards etc! Early engagement - this will drive benefits not create obstacles 11

12 Engaging External Resource! Experience has demonstrated that early involvement means early wins! Show outcomes from external experience such as RSO, password resets, reduced help desk, credit cards etc! Security benefits, compliance, reporting etc! Efficiency and effectiveness 12

13 Who Will Object?! Application owners who perceive they will lose control! Directory owners! Security if they haven t been involved! HR if they are being asked to change processes! Business owners unless they understand the value proposition 13

14 14 The Integrated Implementation Model

15 Get Independent Validation!! Get vendor-independent advice before going to a pilot! Get assistance with strategy, change management and analysis of what will work! If you ve started, include a review : to help before you finish the implementation to assist with change management issues! Communicate and seek input from users and application owners! Independent 3rd party to oversee solution - it must adapt to you not the other way around! 15

16 IdM Can t Be Done in Isolation! To deliver IDM effectively you need: a solid strategy, a holistic approach, and broad support! It s NOT just a security issue! Total involvement of the enterprise! Don t get trapped in a one-solution space 16

17 How do we know this?! Our current and recent clients include: Telstra Victorian Government Project Rosetta Macquarie Bank Alinta Boeing American Express 17

18 Project Rosetta Whole of Victorian Government IdM Infrastructure

19 Drivers for Change 4. Target opportunity in Government s ICT Strategy ( ) 1. Rapid growth in internal + external comms networks by deptagencies & people connected to them WOVG directory Reduce burden of directory and data proliferation Simplify management task Streamline access to information on and between Government Platform for Department initiatives Backbone for egovernment initiatives 2. More egovernment and deptagency initiatives dependent on standard backbone of directories + ID mgt 3. Accelerated, unilateral deployment by dept-agencies 5. Technology + know-how improvements by vendors 19

20 Victorian Government Directory Vision! authoritative, integrated and automated directory service that securely provides accurate information on and to people, resources, assets and services across the Whole of Victorian Government! producing significant gains in security, efficiency and effectiveness of current directory infrastructure! and is platform for other egovernment initiatives 20! over 3-5 years

21 Vision in three streams Infrastructure 2. Frameworks 3. Extending functionality Stream 1 Stream 2 Stream 3 WoVG Directory Infrastructure Identity Management Frameworks Extending Functionality Establish a WoVG Enterprise Directory Establish meta directories into 10 departments Synchronise meta directories to 3-4 key directories in each department Synchronise meta directories to the Enterprise Directory All hardware + communications standards, operational procedures, guidelines & training Optional (depending on costs) Assessment of data cleansing and data store consolidation in departments Extension of deliverables to agencies Some aspects of SSO (a key function) Expanded number of department directories synchronised (beyond 3-4) Simple Sign On Authentication Scoping and recommendations analysis Design and implementation considerations including levels, authorisation regimes, models and privacy External access Review potential to rationalise diverse approaches across departments Review and reform: review of divergent approaches, designing coherent principles, staged reduction of approaches, costing and planning Provisioning Construct generic framework Data cleansing, data store consolidation and process re-engineering to maintain clean data > aligned around ID Management Progressive implementation of key directory functions Can begin before infrastructure build complete SSO framework Authentication External access Provisioning framework Additional strategic functionality identified subsequently Standards, operational procedures, guidelines & training 21

22 Current Project: Rosetta Stream 1 Stream 1 WoVG Directory Infrastructure Stream 1 Infrastructure + people (not assets) focus Core elements technical and functional requirements Focus on integrated solution package ~ hardware, software, integration services, business process and change and know-how Workable + practical: governance, standards, operations and change management Varying dept demand + readiness for rollout Stream 2 Identity Management Frameworks Stream 3 Extending Functionality Stream 2 work ready ~ build consensus Q Flexible + extensible (anticipate other streams) Depts can elect to drive extended functionality Option to expand to 250K+ and users 22

23 Rosetta Stream 1 Snapshot Stream 1 WoVG Directory Infrastructure 10 Government Departments (no agencies) 7 IT environments 60K government employees and contractors + White-Yellow Pages (search) Directory information on internal people and organisational relationships + Data cleansing Governance, policies, service frameworks, processes, standards, functional management and operations Change management Future view WOVG Directory Consistent, reliable data across directories Calibrating benefits realisation 1st stage rollout: beacon for change 23

24 Project Rosetta Conceptual Design - Day 1 External - facing directory Yellow Pages search Whole of Victorian Government WoVG Enterprise Directory Internal - facing directory White-Yellow Pages search Dept 1 Metadirectory Dept 2 Metadirectory Dept n Metadirectory Victorian Government Departments Department Dept Directory 1 Dept Directory 2 (ie. HR Database) (ie. Messaging Directory) Dept Directory 3 (ie. NOS File and Print Directory) Dept Directory 4 (ie. Finance Directory) 24

25 Project Rosetta Conceptual Design - Future External-facing directory Citizen queries Whole of Victorian Government WoVG Enterprise Directory Internal-facing directory Govt Department user queries Victorian Government Departments Department Dept 1 Metadirectory Dept Directory 1 Dept Directory 2 (ie. HR Database) (ie. Messaging Directory) Dept Directory 3 (ie. NOS File and Print Directory) Dept 2 Metadirectory Dept Directory 4 (ie. Finance Directory) Dept Directory n Dept n Metadirectory Extra functionality Access management Authentication & Authorisation Identity Management Password Management Workflow Simplified Sign On 25

26 Meeting Rosetta s Challenges! Data cleansing! Non-homogenous technology! One WoVG, but diverse business models! Outsourced directories and services! Non-homogenous or limited business processes! Departments at different levels of directory and identity management maturity! Multiple Government directories in existence! Encouraging acceptance and uptake by departments! Calibrating and realising the benefits: quick wins and long-term! Governance and operational management! etc. 26

27 Project Rosetta - Current Status! The solution provider has been selected! Initial planning has commenced! Requirements gathering and design phase to start shortly! Implementation through 2005! Planned handover end

28 Any questions? Contact:! Acumen Alliance 42/120 Collins Street, Melbourne ! Greg Johnson ( ) Robin Anson ( ) 28