Skip Links

Network World

  • Social Web 
  • Email 
  • Close

Identity management and its relationship to information management

Identity management for Canada’s Treasury Board Secretariat
Security: Identity Management Alert By Dave Kearns , Network World , 11/13/2006
Kearns
Sign up for this newsletter now!

Dave Kearns provides the information you need to evaluate, install and maintain your corporate identity management system.

I’ll be the first to admit that there are things you should read besides my own deathless prose. Not instead of, mind you, but in addition to! Today I’d like to recommend a couple of items.

Tim Bouma, who is acting director, identity management for Canada’s Treasury Board Secretariat, recently pointed me to a slide deck he used for a presentation on “Identity Management and its Relationship to Information Management” in the context of the government of Canada (GC).

His premise: “Most people have a high-level understanding of identity management, and its benefits to individual users and their organizations. However, the extent of knowledge of identity management varies widely throughout the many business contexts in government in which identity is used and managed. Given the horizontal nature of identity management, and the broad recognition that identity is a key enabler to program and service integrity, TBS is developing a GC-wide framework for identity management. A key aspect of this framework acknowledges that managing identity is an information-intensive process and therefore, requires the application of sound information management practices. This presentation presents the key concepts of identity management, and explores the relationship between identity management and information management.”

While it would be better to have his commentary along with the slides, the text and graphics alone are worth spending some time on as they do show a path towards convergence of identity management and information management technologies. It’s available in PowerPoint or Acrobat.

Another interesting Acrobat file discusses the results of the recent “Privileged Password” survey conducted by Cyber-Ark. A privileged password is defined by the company as the passwords for non-personal accounts “…that exist in virtually every device or software application in an enterprise, such as root on a UNIX server, Administrator on a Windows workstation, and Cisco Enable on a Cisco device.”

Among the more surprising statistics of this survey of 140-plus IT professionals, the results revealed that privileged passwords are far more common in enterprises than previously thought: approximately one-half of all enterprises contain more privileged passwords than individual ones! Also, although these privileged passwords provide super-user system access, the survey shows that up to 42% are never updated; a daunting prospect in today's environment of increased audits and hacker attacks.

Dave Kearns is a consultant and editor of IdM, the Journal of Identity Management.

Partner Content

Brilliantly simple security and control solutions for email, web and endpoint

www.sophos.com

Stopping data leakage

Learn how to exploit your current security investment to control the information that flows into, through and out of your network.

Download the white paper.

Why detection rates aren't enough

Evaluating endpoint security products is a time-consuming and daunting task. Learn the six critical questions you need to ask prospective vendors to get the right endpoint solution.

Download the white paper.

Applications: taking back control

Employees installing unauthorized applications is a growing threat to business security and productivity. Cost-effectively reduce this threat by integrating control into your malware protection.

Learn more today.

Comment
Login
Forgot your account info?
Add comment
Anonymous comments subject to approval. Register here for member benefits.
Have a NetworkWorld account? Log in here. Register now for a free account.

Videos

rssRss Feed

Whitepapers

Magic Quadrant for Application Delivery Controllers

Gartner summarizes its view on Application Delivery Controllers, evaluates strengths and weaknesses...

Vulnerability Management For Dummies

Download this concise book "Vulnerability Management for Dummies," to learn about the simple steps...

The ROI and TCO Benefits of Data Deduplication for Data Protection in the Enterprise

This paper examines and quantifies the costs and benefits of backup with deduplication storage as...

Webcasts

Transforming the Enterprise WAN Edge: Video from Cisco

Life on the edge of your WAN has changed dramatically. With the need to deliver advanced services,...

PoE Plus: Impact on the PoE Market

The standard for Power over Ethernet (PoE), IEEE Std. 802.3af(tm)-2003, advanced networking,...

Harnessing the power of communications to increase workplace performance

Due to the convergence of IT and telecommunications technologies, the business workplace has been...

Special Reports

The Evolution of Network Security

We have so many holes punched in our firewalls today that many industry insiders question the value...

The self-managed network

We aren't there yet, but advances in network and systems management tools are making it possible to...

Get instant email notification when white papers, webcasts, executive guides are added to our library. Stay informed and up-to-date with the latest on IT Technologies with Network World's Resource Alerts.