Identity Intelligence and Enterprise Access Management

As Identity and Access Management technologies evolve, the boundaries with other security technologies like GRC (Governance, Risk and Compliance), SIEM (Security Event and Incident Management) and DLP (Data Loss Prevention) start to blur. Identity Intelligence incorporates the analytics, forensics and detailed reporting related to risk, compliance and policy issues.

Traditional IAM technologies are restricted to IT applications. The real world of security incidents across the enterprise involves a lot more. As business processes and industrial process rely on IT constructs, it is equally important that access management extend across the enterprise to include people, process and technology. Enterprise Access Management includes managing access to IT systems, facilities and critical assets as well as control systems, when applied to asset-intensive industries. Integration across all these systems is laborious, time consuming and fraught with risk. AlertEnterprise delivers a unifying software layer that allows business managers to make risk-led decisions and take decisive actions that are aligned with the business.

Role Lifecycle Management
Organizations can end up with excessive role proliferation. Streamlining roles in the enterprise can be a long, time-consuming process that involves gathering data from many sources. Changes in the organization during the analysis process can be extremely frustrating for analysts following the spreadsheet approach. Late discovery of additional systems or applications can throw off all the previous work done. Bottom line is that the manual process just cannot scale.

AlertEnterprise delivers powerful discovery and analysis capabilities to conduct a top-down and bottoms-up approach to analyzing roles and then creating a roles repository to work from. Entitlement, role and user management tasks are simplified with enterprise and job roles for quick role assignment. AlertRoles helps organizations manage roles and entitlements including their definition, modeling, and lifecycle management for various resources including ERP applications, legacy systems, physical badge access systems and control systems. AlertRoles seamlessly integrates with SAP, Oracle and other enterprise applications based on a core understanding of each intrinsic security model.

• Manage roles across ERP applications, legacy systems, badge access systems and control systems
• Roles for different applications and systems to be defined in a single roles repository
• Recommend (new) roles based on configurable roles models

Identity Intelligence
Identity Intelligence capabilities enable a Business Layer that hides the complexity of integrating across multiple enterprise applications and delivers enhanced Business and IT alignment. Onboarding / Offboarding processes are simplified when access requests for multiple systems as well as IT and non‐IT assets can be compared in single view. Identity Federation capability allows organizations to adapt to the existing environment, integrating and mapping to systems such as ERP/IT applications, Physical Access as well as control systems. Risk Analysis is performed before provisioning to ensure that the infrastructure safely and properly distributes access.

• Actionable visual analytics
• Periodic user access certification
• Risk and compliance reporting

Intelligent Provisioning
AlertEnterprise helps organization maximize existing investment in technology and identity management solutions by offering a cross-platform solution that spans across the enterprise. The platform fully integrates with Physical Access Control Systems (PACS), building controls systems and IT applications to help intelligently provision users. AlertEnterprise bridges across various applications and systems to deliver a single provisioning interface for all systems.

• Support for multi-vendor enterprise and legacy applications
• Extend provisioning beyond IT to include Physical Access Control Systems (PACS)
• Active Policy Enforcement via real-time de-provisioning