IBM Attacks the Complexity of Security with Identity Intelligence

IBM recently announced a new identity intelligence breakthrough designed in IBM labs to provide corporations with a far more sophisticated approach to managing the information employees can access.

An employee's unauthorized access to client information can leave a firm vulnerable to security breaches and audits. Many companies juggle the administration of identifying, managing and approving employee access, some of whom have roles that require different levels of access to financial, personnel or sales and customer data, and can change during the course of a year.

To meet that challenge, IBM is unveiling advanced analytics software called Security Role and Policy Modeler.  Based on IBM Research innovation, the software analyzes employee data and recommends a finite set of roles to better secure an organization and manage compliance. The analytics can flag abnormal behavior, inconsistencies in role access and expired user access.

For example, a 10,000-employee hospital may allow administrators only to have certified access to financial and human resource systems. Their access must be revoked as their roles change within the organization. The Security Role and Policy Modeler evaluates all 10,000 user identities across the hospital and narrows those down to 100 roles such as 'administrator.'  This reduces costs and complexity to manage security.

"With the rise of cloud and mobile access, it's no surprise that identity management has become such a hot button to clients," said Marc van Zadelhoff, vice president strategy and product management, IBM Security Systems. "If an organization doesn't know who has access to their data, how can meet compliance regulations, let alone be secure?  Today's news shows how IBM is applying its advanced intelligence to solve the most complex security issues."

Bharti Airtel and Cognizant Tap IBM's New Software

Bharti Airtel, the top telecommunications provider in India, and Cognizant, an IT consulting and business process outsourcing in the U.S., are already seeing the benefits of the new software.

"The new IBM offering will provide greater insight to our role modeling and lifecycle management that is so critical to allowing our employees, partners and third parties to securely access data they are authorized to," said Felix Mohan, Global Chief Information Security Officer, Bharti Airtel. "Using the intelligence and automation of the Role and Policy Modeler, we can manage our identity and roles much more efficiently and effectively."

"One of the first steps of a secure enterprise is knowing what your own employees have access to," said Barry Miracle, director of Digital Security, Cognizant. "With IBM's new identity management software, I will have better insight across the company into roles and identities of who is accessing particular applications or databases, making our compliance reporting more efficient."

Security Role and Policy Modeler is now available as part of IBM's software for policy-based identity and access management governance offering. The new software allows companies to efficiently collect, clean up, correlate, certify, and report on identity and access configurations.  Specific new functions include:

  • Scoring metrics and analytics that give business users the ability to produce a more effective role and access structure. Users can be identified by specific role they play in an organization.  For  example, a marketing team manager can only allow employees to access marketshare data but not human resources information.
  • Clearer view into the role structure - such as organizational hierarchy charts, and access exceptions due to business needs - that can be managed throughout the users' lifecycle. For example, if an employee moves from one department or function to another, that employee can be assigned--or restricted from - accessing particular applications or business assets based on their role structure within the organization.
  • Single web-based interface to create, apply and validate roles that have multiple members.  For example, a "physician" can be the group role and "cardiologist" or "radiologist" is the member role. Each role can be assigned different access and can be mined to identify outlying behavior and validated for violations.

Featured

  • Maximizing Your Security Budget This Year

    The Importance of Proactive Security Measures: 4 Stories of Regret

    We all want to believe that crime won’t happen to us. So, some business owners hope for the best and put proactive security measures on the back burner, because other things like growth, attracting new customers, and meeting deadlines all seem more pressing. Read Now

  • 91 Percent of Security Leaders Believe AI Set to Outpace Security Teams

    Bugcrowd recently released its “Inside the Mind of a CISO” report, which surveyed hundreds of security leaders around the globe to uncover their perception on AI threats, their top priorities and evolving roles, and common myths directed towards the CISO. Among the findings, 1 in 3 respondents (33%) believed that at least half of companies are willing to sacrifice their customers’ long-term privacy or security to save money. Read Now

  • Milestone Announces Merger With Arcules

    Global video technology company Milestone Systems is pleased to announce that effective July 1, 2024, it will merge with the cloud-based video surveillance solutions provider, Arcules. Read Now

  • Organizations Struggle with Outdated Security Approaches, While Online Threats Increase

    Cloudflare Inc, recently published its State of Application Security 2024 Report. Findings from this year's report reveal that security teams are struggling to keep pace with the risks posed by organizations’ dependency on modern applications—the technology that underpins all of today’s most used sites. The report underscores that the volume of threats stemming from issues in the software supply chain, increasing number of distributed denial of service (DDoS) attacks and malicious bots, often exceed the resources of dedicated application security teams. Read Now

Featured Cybersecurity

Webinars

New Products

  • Camden CV-7600 High Security Card Readers

    Camden CV-7600 High Security Card Readers

    Camden Door Controls has relaunched its CV-7600 card readers in response to growing market demand for a more secure alternative to standard proximity credentials that can be easily cloned. CV-7600 readers support MIFARE DESFire EV1 & EV2 encryption technology credentials, making them virtually clone-proof and highly secure. 3

  • FEP GameChanger

    FEP GameChanger

    Paige Datacom Solutions Introduces Important and Innovative Cabling Products GameChanger Cable, a proven and patented solution that significantly exceeds the reach of traditional category cable will now have a FEP/FEP construction. 3

  • Camden CM-221 Series Switches

    Camden CM-221 Series Switches

    Camden Door Controls is pleased to announce that, in response to soaring customer demand, it has expanded its range of ValueWave™ no-touch switches to include a narrow (slimline) version with manual override. This override button is designed to provide additional assurance that the request to exit switch will open a door, even if the no-touch sensor fails to operate. This new slimline switch also features a heavy gauge stainless steel faceplate, a red/green illuminated light ring, and is IP65 rated, making it ideal for indoor or outdoor use as part of an automatic door or access control system. ValueWave™ no-touch switches are designed for easy installation and trouble-free service in high traffic applications. In addition to this narrow version, the CM-221 & CM-222 Series switches are available in a range of other models with single and double gang heavy-gauge stainless steel faceplates and include illuminated light rings. 3