Skip Links

Network World

  • Social Web 
  • Email 
  • Close

Identity management critical for security, government IT shops say

Survey shows respondents willing to dent personal privacy to protect national interests; funding for deployments remain an issue.
By John Fontana , Network World , 03/03/2008

A majority of government IT organizations say identity management is very important to securing their networks and will become even more so over the next five years, but that funding to keep pace is a major impediment to growth.

The respondents also said they think identity management is relevant to national security, critical public infrastructure, and personal security; and given the gravity of those issues, that personal privacy could suffer. (Learn more in our Identity Management Buyer’s Guide.)

The findings were part of a survey of 474 government IT professionals conducted by public-opinion research firm Pursuant, and funded by Quest Software. A majority of the respondents were civilians working for the federal government and not in the U.S. Department of Defense, according to Quest.

Slightly more than 33% of the respondents said increased physical, data and information security was the top reason for building an identity-management system. Compliance with such government mandates as HSPD-12 -- which lays out a policy for a common identification standard for federal employees and contractors -- was the No. 2 reason at 32.1%. Protection of personal information (19%), and simplified internal data systems (2.5%) were the third and fourth reasons.

More than 50% said the three key components in an identity management system are access management (80.8%), directory services (54.9%) and single- or reduced-sign-on (57.8). Nearly 72% said identity management would become more important within their organization in the next five years.

The respondents said identity management was critical because they feared data breaches could have devastating consequences, including loss of personal privacy and data security (92.4%), compromised critical public infrastructure (70.2%), deflated national security (67.2%), and increased financial terrorism (61.5%).

Users are realizing that smart cards held by employees can be used for much more than building access, says Paul Garver, vice president for the public sector at Quest. "It was the realization that the card in the true identity-management scenario represents a lot more," he says. "It represents the ability to get into the building, it represents the ability to sign on to the workstation, to gain access to applications with the rights and privileges you should have. I think that is why people responded that identity management would become increasingly important because of the realization that the card is more than just a card," he adds.

Partner Content

Brilliantly simple security and control solutions for email, web and endpoint

www.sophos.com

Stopping data leakage

Learn how to exploit your current security investment to control the information that flows into, through and out of your network.

Download the white paper.

Why detection rates aren't enough

Evaluating endpoint security products is a time-consuming and daunting task. Learn the six critical questions you need to ask to prospective vendors to get the right endpoint solution.

Download the white paper.

Unauthorized applications: Taking back control

Employees installing and using unauthorized applications like IM, VoIP, games and peer-to-peer file-sharing applications cause many businesses serious concern. How do you control these applications?

Download the white paper.

Comment
Login
Forgot your account info?
Add comment
Anonymous comments subject to moderator approval. Register here for member benefits.
Have a NetworkWorld account? Log in here. Register now for a free account.

Videos

rssRss Feed
Save The Date!
What They Are Saying

If the IT manager is knowledgeable regarding Cisco technology, he would have 2 options. Option 1 - Consult...- Anonymous

Join the Discussion