Implementing Identity Management? What to ask…

This is a nice primer for those who don’t know where to start when contemplating an identity management solution. As with most things in technology security, knowing the right questions at the beginning and formulating the right policies is 90% of the process.

From GCN:

“Here are 12 questions to ask before implementing an identity management and access control system.

1. What non-information technology departments and systems need to work with the identity management system? For example, human resources, physical security, finance? Do they already have information or systems in place that will help the initiative?
2. What business processes need to be put in place to support identity management? Who will create, implement and manage the processes?
3. Is a suite or best-of-breed approach best for your organization? Does the suite have everything you need, or will you still need additional components from other vendors? Can you purchase just one part of the suite and add other components later?
4. What existing systems will need to integrate with the identity management system? Identity management software typically works well with Web-based or commercial applications but not with custom applications. Who will do the integration?
5. What expertise do you have in-house for implementing the system? What outside help is required?
6. Which features of identity management will you implement first — single sign-on, provisioning, identity life cycle management, role-based access control?
7. How will users be de-provisioned so there are no orphan accounts?
8. Who is responsible for defining roles and access rights and assigning those to users?
9. Besides agency employees, who else needs access — general public, vendors, contractors, state and local agencies? How will you manage and control them?
10. What types of physical components need to be integrated — Homeland Security Presidential Directive 12 smart cards, fingerprint readers, door locks, radio frequency identification chips and sensors?
11. What cultural barriers will you have to overcome? How?
12. How will you balance security needs with usability? You don't want users using Post-it Notes to keep track of passwords that are too difficult to remember or have excessive help-desk calls for password resets.”

Michael Mongold

Technorati Tags: Identity Management,Michael Mongold

Comments

[Account Deleted]

TechBlue Software is a recognized leader in the Software Development field, having helped a range of organizations in their mission to cut down their costs while retaining or increasing the level of quality of their software. Active Directory Password Reset Solution will save your company time and money by relieving your Help Desk and Network Administrators of fielding password calls and allowing your users to reset their own passwords without having to sit on hold with your Help Desk line. ADPR provides a secure way for password reset; password change and account unlock capabilities.

Active Directory Password Reset Program Large number of IT helps desk calls involve password-related issues. TechBlue Software reset is the best tool to better manage such situations. Active Directory Password Reset Program (ADPR) is Techbluesoftware flagship product for active directory user management and user account management for help desk management and a very effective active directory password manager and password management solution. The latest development includes secure and cost effective Active Directory Password Reset solution, providing a secure way for password reset; password change and account unlock capabilities.

Techblue Software provides the utility to reset password and enrollment.
· Software Development Services in various Technologies
· Product & Application Development Services in various Business Domains.
· Self Service Operation: Users reset passwords and recover accounts on their own.
· Password Reset Anywhere: Reset passwords from any login dialog. ADPR adds a "Reset Password" option.

For More details:
You can refer http://www.techbluesoftware.com