Streamline Physical Identity and Access Management Quantum Secure s SAFE Software Suite automates key processes and empowers IT teams to implement, streamline and manage physical access
Table of Contents Introduction... 3 Controlling Physical Access: Key Challenges... 4 Bridging IAM and PIAM... 5 The Need to Converge... 6 Quantum Secure SAFE: Next-Generation Security... 7 Conclusion... 9
Introduction As digital devices become critical to everyday business, they have also become an easy target for attack. In response, IT organizations worldwide are ramping up their logical security by implementing state-of-the-art authentication programs, developing stronger access controls and installing robust firewalls across their networks. But what about physical access to resources? Traditionally, physical security measures that is, building badges, employee biometrics and so on have been outside the domain of IT. And yet, according to a recent Spiceworks survey 1, most IT decision makers are now responsible for deploying and managing their organizations physical security systems. Employees, temporary workers, contractors, vendors, partners, service providers and visitors, all need access to assets, facilities and resources. But how much access is too much and possibly unsafe? How can IT pros holistically secure physical and logical access to critical resources? Management of physical security systems has lagged behind other IT modernization efforts resulting in a complex mix of tools and manual, inefficient processes. Yet, to ensure the highest level of security for important assets, organizations need an integrated approach to physical identity management and access control. Quantum Secure s SAFE Software Suite provides a single, fully interoperable and integrated physical security policy platform that can help IT pros manage security identities, compliance, and operations across multiple sites and systems. It simplifies the management of the entire security infrastructure by automating manual processes related to background checks, physical access privilege assignment/ termination, visitor access control, and management of audit and compliance regulations. In a recent Spiceworks survey, 60% of IT pros were responsible for deploying and managing their organizations physical security systems. 1
Controlling Physical Access: Key Challenges For IT professionals charged with deploying their organization s physical security infrastructure, managing access directly within physical access control systems (PACS) can be frustrating. Often, the access controls for disparate PACS are not integrated with logical security systems, making it necessary to manually manage identities and their physical access. What s more, the enforcement of security policies is also manual, making it an inconsistent and error-prone process. In fact, according to the Spiceworks survey, IT pros identified these top 5 challenges with deploying and managing physical security systems: 1 Top 5 Challenges with Managing Physical Security Systems $ Cost Complexity Ease of deployment Reliability Ease of managing access Moreover, in addition to different teams managing physical and logical security, an organization s HR department is also typically responsible for authenticating identities and performing background checks. In the absence of an automated, integrated approach, these teams often duplicate each other s processes, leading to operations that are highly inefficient, while increasing the probability for errors and additional risks and liabilities. 4
Bridging IAM and PIAM By integrating identity access management (IAM) and physical identity access management (PIAM) solutions, organizations can get a 360-degree view of identities. It gives them a way to bridge IAM into the physical world. At a basic level, an IAM system automates lifecycle management of user roles, identities and access rights across the logical domain (IT applications and infrastructure) whereas a PIAM system automates lifecycle management of identities and their access rights across the physical domain (physical security applications and infrastructure). PIAM solutions provide a unified approach, utilizing policy-driven software to seamlessly manage the entire lifecycle of all types of physical identities. While there is a clear line of separation between the capabilities and functions of IAM and PIAM systems, in both cases, the end goal is the same: control access.
Advanced Integration of IAM and PIAM systems IAM PIAM & Self-Service IAM s Connector Create/Update/Terminate Users for Logical Access ODBC/LDAP/XML Synchronize with IAM to Create/Update/Terminate Users for Physical Access PIAM Data Source Agent IAM Resource Center Generate DB View Listing IAM Resources as a Catalog ODBC/JDBC Network Synchronize IAM Catalog as DB View from IAM PIAMDB Agent for Catalog IAM Resource Fulfillment Provide Status Updates to PIAM Fulfillment Requests ODBC/JDBC Create/Update/Approvals Via Self-Service Portals PIAM Data Source Agent 1 2 3 4 USERS: Business Users Use IAM For: On-board/off-board personnel requiring logical and physical access Managing personnel changes Managing catalog of IAM resources Fulfilling requests for IAM resources submitted by PIAM USERS: Physical Security Team Use PIAM to: 1 2 3 4 Setup/manage physical access Manage operational tasks such as urgent terminations and visitors Synchronize with IAM to create/update/terminate users for physical access Create/update/self-service approvals of users and entitlements 6
The Need to Converge For IT professionals managing the organization s security infrastructure, adopting a converged approach means extending the IAM concept to automate physical access, audit reports and align facility badge-in/badge-out with the IT network. Using the converged approach, organizations can automate physical access for employees and vendors to corporate resources based on their business roles as defined in their IAM systems and/or their location as managed by the PIAM system. From an IT perspective, this integrated approach can eliminate labor-intensive, costly and error-prone processes of manually managing personnel information and access privileges across silos of disparate multi-vendor, multi-location PACS. Quantum Secure s PIAM solution, SAFE Software Suite, is a web-based solution that allows organizations to manage the lifecycle of identities and their authorization for physical access. It is a highly scalable platform that automates key processes and simplifies control of all identities employees, contractors, vendors, and visitors across an organization to ensure each identity has the right access, to the right areas, for the right length of time. By adopting a unified approach for physical security management, SAFE seamlessly manages identities, their physical access, and their correlation with physical security events in a multi-stakeholder environment while providing real-time compliance. 7
Quantum Secure SAFE: Next-Generation Security Quantum Secure s SAFE Software Suite represents the next generation of PIAM software. Designed to help IT professionals deploy and manage a more sustainable, secure environment, SAFE centralizes systems into a single policy-based platform that automates and simplifies physical identity and access management. SAFE Software Suite provides a comprehensive range of functions for IT professionals to streamline the entire PIAM process, including: Automated card holder administration and role-/ location-based provisioning Automated assignment of secure area stewardship to business owners The ability to configure access groups/zones to business needs across facilities and physical access control systems Automated metal keys administration and role-/ location-based provisioning Assured compliance with regulatory and environmental security requirements with real-time reporting Quantum Secure s SAFE software automatically adjusts permission levels for each identity through every type of change, including authority level changes, access system updates or new compliance regulations. SAFE makes integration invisible, working with existing security hardware and infrastructure and creating a single web-based database. By connecting physical security operations to IT infrastructure, users can quickly lower operational costs, improve compliance and lower overall risk. Businesses can use Quantum Secure s SAFE software to manage identities enterprise-wide and streamline processes such as issuing ID badges, managing disparate databases, reporting across systems, adding new employees, responding to terminations, and assigning access privileges across multiple PAC systems. 8
Quantum Secure s SAFE software is already powering leading private and public entities across the world, cutting the time, cost and effort of managing physical security, automating key processes and simplifying risk management of employees, vendors and other third-party identities across organizations. By connecting their physical security operations closely to their IT infrastructure through Quantum Secure SAFE software, IT pros are realizing the value of security convergence, lowering their overall risk and benefitting from sustainable cost savings. Some of the key features of the PIAM solution include: Automates PIAM Policies SAFE integrates with logical security systems to ensure synchronized and policy-based on/off-boarding of identities and their physical access across multiple and disparate physical security systems. Its robust integration platform coupled with its unique policy and workflow automation engine manages critical rules across the infrastructure to enforce internal controls, reduce operational costs and corporate risks, and to automate compliance processes. SAFE PIAM also includes pre-defined policies for completely automating the process of on-/off-boarding an identity from the organization s authoritative data source along with its physical access into the PACS. A Single Identity Organization-Wide SAFE Physical Identity & Access Manager reconciles the identity information from various PACS systems and maps them to the centralized authoritative HR identity source such as a logical IAM, simultaneously detecting and removing ghost accounts accounts in a PACS system comprising either blank cards with no assigned history or where the cardholders validity is terminated in the IT/HR systems. Since SAFE Physical Identity & Access Manager links physical systems across the globe in real-time with corporate IT systems, it can instantly establish a single version of an identity across all physical security systems, ensuring that ghost accounts are locked out and compliance requirements are quickly met. SAFE also provides actionable intelligence for risk mitigation and threat prevention through robust reporting and analytics. Better ROI By adopting Quantum Secure s SAFE PIAM solution for managing physical security, organizations achieve a better ROI by maintaining focus on their core competencies. Customers will always have the power to hold Quantum Secure accountable for the progress and the quality of their work. At the same time, they can leverage Quantum Secure s expertise and core competence in the physical security space. SAFE is designed in a way to find the issues in current processes and fix the cracks in the way your system works. 9
Quantum Secure s SAFE: Key Benefits Reduce operating costs by automating identity/access management Centralize physical access control of all identities across disparate PACS Minimize risks around manually enforcing provisioning policies Reduce delays in on-/off-boarding identities and their physical access in PACS Demonstrate compliance with security regulations such as Sarbanes-Oxley Gain useful analytics and reporting with regular updates Conclusion IT professionals seeking to secure their business premises with a PIAM solution frequently grapple with the decision to build or buy the solution. In many cases, a commercial, off-the-shelf solution is better equipped to accommodate ever-changing security requirements. These solutions usually deliver better ROI over the long-term as they provide more robust features, greater reliability and scalability at a lower cost than maintaining an in-house solution. Quantum Secure s SAFE Software Suite is an ideal choice for effective, off-the-shelf PIAM. It enables busy IT pros to connect disparate physical security, IT and operational systems; automate manual security processes; and reduce both costs and risks. Quantum Secure s SAFE is the leading solution for managing physical identities and provisioning access across physical security infrastructure. Organizations of all types, across Fortune 100, financial, government and real estate vertical markets, have turned their investment in SAFE into a strong and sustainable ROI. Learn More Source: 1 Spiceworks Voice of IT research panel of 128 IT decision-makers in the U.S., on behalf of Quantum Secure, October 2016.