IDEAS for Identity and Access Governance. Capabilities summary and screenshot selection

Transcription

1 IDEAS for Identity and Access Governance Capabilities summary and screenshot selection

2 IDEAS Capabilities Agenda About CrossIdeas About the IDEAS Solution Main capabilities Screenshot selection 2

3 CrossIdeas is a leading player of Identity Governance Solutions, enabling organizations to achieve their Compliance, Audit and Access Risk Management objectives Founded in 2011, product originates in 2005 HQ in Italy (Rome) Rated as visionaire in the Gartner IAG MQ 2011/2012 and IGA 2013 Fortune 500 companies run CrossIdeas Strong verticals are Energy/Utilities, Insurance, Trading 3

4 Why CrossIdeas The Innovation leader in the IGA market Full set of Identity Governance capabilities Unusually clean Identity Data Model (ref. Gartner) Business-approach to SoD/Risk modeling Easy UI for business users, shopping cart paradigm The only IGA player with SAP specific controls Fine-grain SoD controls One product to manage SAP and non SAP apps Interoperate with other IGA platform Embrace & Extend approach Native integration with IBM SIM and NetIQ IDM 4

5 Why CrossIdeas for IBM Partners Provides bidirectional synchronization between ISIM and IDEAS IBM Ready for Security Intelligence partner since Jan 2014 Offers a solid and unique proposition against Sailpoint, Aveksa, Oracle and others ISIM customers can rapidly introduce Access Governance capabilities with no changes in their existing ISIM environment Strong GRC/SoD capabilities, SAP specific controls, innovative Risk Scoring

6 CrossIdeas core capabilities Advanced segregation of duty Management Both Enterprise and SAP Specific SoD Rules pre-canned templates Role discovery and cleansing Visual maps and cost driven analysis Risk Scoring Model, monitor and measure different types of Access risk Business friendly certification campaign User access perspective User SoD violations perspective Business friendly access request management Shopping cart model Manages fine-grained authorization model

7 IDEAS Solu3on Modules Access Request Access Governance Access Intelligence Access Request Workflow Iden3ty Self Service Segrega3on of Du3es Compliance Control for SAP Access Review Role Mining Risk Analysis Authorization Manager Entitlement Server IDEAS Warehouse Users, Permissions, Organiza2ons, Policies IDEAS Core Rule Engine Event Processing Enterprise Connectors (AD, LDAP, JDBC, MSQ, SAP, etc.) 7 7

8 Screen Shots Front End GUI

9 IDEAS GUI Purely web based Two distinct entry points End User Desk Admin Console

10 Common IGA Questions IT Security How do I model SoD policies, then detect and manage viola7ons? Business Manager What does an a:esta7on campaign or an access request look like? How can I build meaningful roles? Application Managers How do I measure access risk and monitor progresses? CFO / CRO Office

11 Common IGA Questions IT Security How do I model SoD policies, then detect and manage viola7ons? Business Manager What does an a:esta7on campaign or an access request look like? How can I build meaningful roles? Application Managers How do I measure access risk and monitor progresses? CFO / CRO Office

12 End User entry point (avg. manager view) 12

13 Access Request - Beneficiary selection Multiple user selection support 13

14 Current access changes 1 removal 1 validity amendment 14

15 New access Application permissions 15

16 Shopping cart view - Check out 1 new Business Role 1 new Application Role with multiple parameters 1 validity date amendment 1 application role removal 16

17 End User entry point (avg. manager view) 17

18 Reviewer perspective Campaign status 18

19 Reviewer perspective User level view Sample campaign configured with all options activated switched on Bulk operations = allowed Redirection = allowed Escalation to supervisor = allowed 19

20 Reviewer perspective User access level view 20

21 Supervisor perspective Monitoring reviewers progresses Progress Dashboard Review details 21

22 Common IGA Questions How do I model SoD policies, then detect and manage viola7ons? IT Security Business Manager What does an a:esta7on campaign or an access request look like? Application Managers How can I build meaningful roles? CFO / CRO Office How do I measure access risk and monitor progresses?

23 Administrative entry point 23

24 Activities Tree and related Risks 24

25 Technical Transformation 25

26 User violation details drilldown 26

27 Role violation details drilldown 27

28 Common IGA Questions How do I model SoD policies, then detect and manage viola7ons? IT Security Business Manager What does an a:esta7on campaign or an access request look like? Application Managers How can I build meaningful roles? CFO / CRO Office How do I measure access risk and monitor progresses?

29 Administrative entry point 29

30 Role Mining Defining the request Sample extraction criteria: Ignore candidated featuring 30 Less then 2 permission Less then 3 users Prioritization crieria The bigger the better Users belonging to OU close one another Permissions from the same Applications

31 Role Mining Visualizing the roles Provides context to simplify selection and naming Which candidate roles should I really use? How do I name them? 31

32 Role model health checks Role Comparison Visual overlap Redundancy analysis 32

33 Common IGA Questions How do I model SoD policies, then detect and manage viola7ons? IT Security Business Manager What does an a:esta7on campaign or an access request look like? How can I build meaningful roles? Application Managers CFO / CRO Office How do I measure access risk and monitor progresses?

34 Administrative entry point 34

35 Defining Access Risk criteria Blend of User, Entitlement and Assignment contribution

36 Identifying highest Access Risk place Risk distribution over different applications or divisions

37 Analyzing Access Risk Nature Risk criteria contribution comparison

38 Analysis outcome - Risk Trend Access Risk trend

39 Unpublished Work of CrossIdeas, All Rights Reserved. This work is an unpublished work and contains confidential, proprietary, and trade secret information of CrossIdeas. Access to this work is restricted to CrossIdeas employees who have a need to know to perform tasks within the scope of their assignments. No part of this work may be practiced, performed, copied, distributed, revised, modified, translated, abridged, condensed, expanded, collected, or adapted without the prior written consent of CrossIdeas. Any use or exploitation of this work without authorization could subject the perpetrator to criminal and civil liability. General Disclaimer This document is not to be construed as a promise by any participating company to develop, deliver, or market a product. It is not a commitment to deliver any material, code, or functionality, and should not be relied upon in making purchasing decisions. CrossIdeas makes no representations or warranties with respect to the contents of this document, and specifically disclaims any express or implied warranties of merchantability or fitness for any particular purpose. The development, release, and timing of features or functionality described for CrossIdeas products remains at the sole discretion of CrossIdeas. Further, CrossIdeas, reserves the right to revise this document and to make changes to its content, at any time, without obligation to notify any person or entity of such revisions or changes. All CrossIdeas marks referenced in this presentation are trademarks or registered trademarks of CrossIdeas. in the Italy and other countries. All third-party trademarks are the property of their respective owners.