Skip Links

Network World

  • Social Web 
  • Email 
  • Close

Identity risk management vies for attention in the crowded ID management space

Trends jostle for position in the identity management world
Security: Identity Management Alert By Dave Kearns , Network World , 07/11/2007
Kearns
Sign up for this newsletter now!

Dave Kearns provides the information you need to evaluate, install and maintain your corporate identity management system.

Last issue I was musing about trends and “weddings” observed at the Catalyst conference, and this time I’ll bring up a wedding reception as well as a trendy niche in identity management.

The guys and girls from Waveset were last seen at Catalyst wearing sharks on their heads (see “Memorable moments from Catalyst 2003”) before heading off to relatively stodgy Sun. But now that they’ve re-emerged as Sailpoint Technologies, their rarely suppressed sense of humor has re-emerged. At Catalyst, they threw a wedding reception – complete with a “bride”, a “groom” and a wedding cake! As CEO Mark McClain put it, “We always try to overachieve in the creativity department!”

And overachieve is what the company may have to do to conquer the emerging niche it dubs Identity Risk Management and some others call Compliance Management, but which is being rolled into Governance Risk and Compliance (GRC) management by some. Also part of the grouping is what some vendors are calling Entitlement Management, defined by one such vendor, Securent, as a method that “…enables organizations to administer, enforce, and audit fine-grained access policies across heterogeneous application and IT environments, all with centralized management and visibility. The significant time to market, security, compliance, and cost reduction benefits of [Entitlement Management] have been proven at many Fortune 500 customers.”

I don’t know what we’re eventually going to call this area of identity management. It is an outgrowth of the rush to implement regulatory compliance that we saw over the past couple of years, but now people want to reduce their costs while getting better automatic controls. Since being compliant also requires better security (i.e., risk management) and oversight (i.e., governance), while technologies such as role management and role-based access control can reduce costs while improving automation, I think we’re going to see some fluidity in this space for a while as more and more vendors seek to be part of what promises to be a required group of technologies for just about any business. There isn’t one, but numerous nascent trends here, and only time will tell which will emerge and which will disappear. We’ll keep watching.

Partner Content

Brilliantly simple security and control solutions for email, web and endpoint

www.sophos.com

Stopping data leakage

Learn how to exploit your current security investment to control the information that flows into, through and out of your network.

Download the white paper.

Why detection rates aren't enough

Evaluating endpoint security products is a time-consuming and daunting task. Learn the six critical questions you need to ask to prospective vendors to get the right endpoint solution.

Download the white paper.

Unauthorized applications: Taking back control

Employees installing and using unauthorized applications like IM, VoIP, games and peer-to-peer file-sharing applications cause many businesses serious concern. How do you control these applications?

Download the white paper.

Comment
Login
Forgot your account info?
Add comment
Anonymous comments subject to approval. Register here for member benefits.
Have a NetworkWorld account? Log in here. Register now for a free account.

Videos

rssRss Feed
Get instant email notification when white papers, webcasts, executive guides are added to our library. Stay informed and up-to-date with the latest on IT Technologies with Network World's Resource Alerts.

Whitepapers

Advancing the Economics of Networking

Aging network systems and old habits have dictated how businesses spend their IT budgets. As a...

Implementing HA at the Enterprise Data Center Edge to Connect to a Large Number of Branch Offices

This paper reviews the problem of creating a network where the dynamic availability of services is...

Enterprise Data Center Network Reference Architecture

Using a High Performance Network Backbone to Meet the Requirements of the Modern Enterprise Data...

Webcasts

PoE Plus: Impact on the PoE Market

The standard for Power over Ethernet (PoE), IEEE Std. 802.3af(tm)-2003, advanced networking,...

Harnessing the power of communications to increase workplace performance

Due to the convergence of IT and telecommunications technologies, the business workplace has been...

Stay out of the headlines: Detecting and preventing network intrusions

How do YOU stay out of the headlines? There is no denying that risk exists in our computer-driven...

Special Reports

The Evolution of Network Security

We have so many holes punched in our firewalls today that many industry insiders question the value...

IP address management in 2008 - six things to know

Read this Network World Special Brief to learn how Enterprise IT managers must update their...

The self-managed network

We aren't there yet, but advances in network and systems management tools are making it possible to...