The Amazing Security Race

Have you been watching OTN for these interesting stuff, recently? Some of the links are here. Rest are for you to search, view and have fun.

http://medianetwork.oracle.com/video/player/507047490001

http://medianetwork.oracle.com/video/player/507044358001

http://medianetwork.oracle.com/video/player/507044355001

http://medianetwork.oracle.com/video/player/507042060001

Certification/Attestation on an iPad

Some innovations are smart. One of Oracle's partner did something really smarter. 

For those who do not understand what Identity Governance or Certifications or Attestations or Access Reviews, it is a process of ensuring that every individual is verified to check if he/she has the right accesses to the systems according to his job role and also to check and remediate unnecessary/toxic ones.

Oracle has a cool product to help Organizations solve this issue/problem of Certification. Its web based. Now a partner brought this to an iPad. I wouldn't like to talk anymore but let you watch the video. It would be very interesting for you if you already know a little bit about Oracle Identity Analytics. 

One does - Remaining follow

If I am not wrong, the concept of Compliance manager was first started by Aveksa. Unfortunately they were a little late to the market and in the mean while Sailpoint already pitched in. Now we have one more big player ... guess who ....... its none other than Sun Microsystems.

They recently launched their Compliance Manager product. I think I will be able to do a comparative study soon and publish to my blog readers.

Sailpoint - Identity IQ

Ever heard of Recertifications? I am talking about Access Recertifications which happen in organizations to periodically check who is allowed to access what? This process in many organizations goes this way ...

1. Collect user database from every Application owner across the organization
2. Consolidate the list with respect to managers
3. Send the lists to manager to verify if each of those users require the access to the application with whatever access level specified
4. Once the manager gives his decision, the users' accesses are either revoked or modified for which again its a lengthy process, as everyone acknowledges

Sailpoint's Identity IQ addresses this issue. The product just like an Identity Manager provides a unified view of the entire organizational users, with all the data pertinent to Recertifications. Once the application is configured for all the necessary applications and the user data is in, scheduled Certification Requests can be fired to every manager in the organization. Also the escalations can be handled. The managers can just login to the application and either recertify or revoke or modify user access to every application.

So most of the process is automated now. Don't think its done yet. It also can make SPML calls to any provisioning engine avaialable (not OOB) in the Identity market and thus automatize the complete Recertification process.

Read more about these at Sailpoint

One last thing, if I am not wrong these features are available in the world's renowed ... :-)