Effectively Managing Identities within the Enterprise and Cloud

Transcription

1 Effectively Managing Identities within the Enterprise and Cloud Ben Goodman Strategist, Identity and Security November 18, 2010

2 Where Is Identity and Access Management Heading? Enterprise to Cloud 2

3 Where Is Identity and Access Management Heading? Enterprise to Cloud 3 Cloud to Enterprise

4 Where Is Identity and Access Management Heading? Enterprise to Cloud 4 Cloud to Enterprise

5 21st Century Computing The risks and challenges of computing across multiple environments must be controlled. Users should have unimpeded access to the full computing services they need to do their jobs right. Computing should be secure, compliant and portable. 5

6 Risk to the Enterprise is Rising 6

7 Identity Is Always the Foundation Mobile Devices Personal Computers Identity Foundation 7

8 Identity Is Always the Foundation Mobile Devices World Wide Web Personal Computers Closed Networks Identity Foundation 8

9 Identity Is Always the Foundation Mobile Devices World Wide Web Virtualized Workloads Personal Computers Closed Networks Traditional Workloads on Dedicated Servers Identity Foundation 9

10 New Technologies Mean New Flexibility Virtualization Anything as a Service 10 Cloud Mobile devices

11 It's All about Balance Control Flexibility 11

12 Regulations Require More Control Operational 12 Risk

13 Moving to the Cloud Makes It Harder To Balance Flexibility/Control while Staying Compliant Percent of enterprise workloads that will run in physical, virtual and cloud environments by 2015 Novell estimates based on IDC and Gartner data 13

14 Security The Primary Concern for Cloud Computing Question: Rate the challenges/issues of the cloud/on-demand model (1=not significant, 5=very significant) Percent Responding 3, 4 or 5 Security Performance Availability Hard to integrate with in-house IT Not enough ability to customize Worried cloud will cost more Bringing back in-house may be difficult Not enough major suppliers yet Source: Frank Gens and IDC Enterprise Panel,

15 The Identity-Infused Enterprise Core to Enterprise Security and Compliance User Provisioning Secure Access Compliance Assurance Identity Management Security Monitoring and Remediation 15 Log Management Compliance Integration

16 Identity Serves As the Building Block Comply Secure Identify 16

17 Identity Serves As the Building Block Novell Identity Manager and Access Manager products have a lower five year total cost of ownership (TCO) than competitive products because they are easier to configure, integrate, and administer. Identify 24% more than Novell Novell 2,500+ Person Firm Competitive Set Average (Oracle, CA, IBM, Courion) Use identity as the basic building block for people and resources Improve efficiency while lowering the total cost of ownership Novell 7,500+ Person Firm 25% more than Novell Competitive Set Average (Oracle, CA, IBM, Courion) Novell 40,000+ Person Firm 23% more than Novell Competitive Set Average (Oracle, CA, IBM, Courion) 0% 20% 40% 60% Competitive Set 17 80% Novell 100% 120% 140% All Figures Based on 5 Year Present Value

18 Integration with Security Protects the Network Secure Answer the basic questions: What happened? Who did it? Should I care? Feel confident in moving to cloud based services 18 User Activity Monitoring Manage user access risk Monitor identity fraud Enterprise view

19 Leverage Compliance Investments to Get Agile Comply Increase agility controls can provide insight beyond just assuring compliance Continuous Compliance Management, monitoring and enforcement of IT controls so you can mitigate risks before they impact business objectives. Control 19 Flexibility

20 With an Identity-Infused Enterprise Flexible Architecture That Supports the Cloud Without Identity Foundation Less than 20 percent of enterprises know who has access to appropriate resources With Identity Foundation Rich information on user access, privileges and provisioning activity to answer any GRC questions Enhanced security for cloud By 2012, 79 percent of CIO's will leverage the cloud but are unsure of computing model through extension of enterprise policies to the cloud data access and security applications 70 percent of enterprises want a single view across all systems to identity threats and violations Centralized point of control for unified policy-based management across different systems both on premise and in the cloud An identity-infused enterprise moves at the speed of business 20 Novell customer survey with infosurv around identity and security challenges

21 SUNY Orange County Community College Novell and Consensus helped us to maximize the value of our existing Banner system and ensure secure access to cloud applications like Google Apps, said Dutcher. We now have a more agile, responsive infrastructure. That s key to retaining our status as a leading edge campus, an important factor for attaining additional state funding. Jim Dutcher CIO, SUNY Orange County Community College 21 21

22 Next Steps Attending the next Novell webcasts on 12/16 and 1/27 Useful Resources: Novell Identity Management: ROI study on Novell Identity Manager: Novell Identity Manager Flyer:

23

24 Unpublished Work of Novell, Inc. All Rights Reserved. This work is an unpublished work and contains confidential, proprietary, and trade secret information of Novell, Inc. Access to this work is restricted to Novell employees who have a need to know to perform tasks within the scope of their assignments. No part of this work may be practiced, performed, copied, distributed, revised, modified, translated, abridged, condensed, expanded, collected, or adapted without the prior written consent of Novell, Inc. Any use or exploitation of this work without authorization could subject the perpetrator to criminal and civil liability. General Disclaimer This document is not to be construed as a promise by any participating company to develop, deliver, or market a product. It is not a commitment to deliver any material, code, or functionality, and should not be relied upon in making purchasing decisions. Novell, Inc. makes no representations or warranties with respect to the contents of this document, and specifically disclaims any express or implied warranties of merchantability or fitness for any particular purpose. The development, release, and timing of features or functionality described for Novell products remains at the sole discretion of Novell. Further, Novell, Inc. reserves the right to revise this document and to make changes to its content, at any time, without obligation to notify any person or entity of such revisions or changes. All Novell marks referenced in this presentation are trademarks or registered trademarks of Novell, Inc. in the United States and other countries. All third-party trademarks are the property of their respective owners.