Monday | 6 July, 2009
CSO
CSOs need to keep evolving, CA security exec says
CA executive urges CSOs at RSA Conference to strategize and make themselves heard

Consider the burdens on today's CIO and CSO:

The need for continuous compliance can be labor-intensive. Without automation, the need to meet compliance requirements becomes a recurring nightmare -- "Groundhog Day" for the CSO.

Help desk overload is a huge problem for many organizations -- and a large percentage of the requests involve forgotten passwords.

As the demands on IT grow, administrative costs mount.

Large organizations with hundreds or thousands of employees face the challenge of managing identities. When people exit the company, their accounts need to be immediately terminated. Otherwise, ghost accounts live on in the system, creating vulnerabilities.

A similar problem arises when an employee stays with the company for an extended period and moves through a number of different jobs in different departments. If the employee's identity is not properly managed, he can acquire a variety of privileges -- including access to data -- that could threaten the separation of duties required under governance regulations.

Managing employees in the system has always been an issue. But today's organizations interact with a wide variety of constituents, including customers, vendors and partners. As IT extends beyond the enterprise, the number and variety of identities to be managed increases exponentially.

Internal and external auditors demand that an organization be able to control its IT systems and access to private data -- and auditors are indifferent to the costs associated with these requirements.

Finally, a security breach can spell disaster for an organization. Every day we read about another company facing a storm of negative publicity as a result of its inability to protect confidential data. Just a few weeks ago it was reported that more than 4 million credit card and debit card numbers were stolen by hackers from two US grocery store chains.

No CEO wants to read about his company in stories like that. And, no consumer will want to go to a place where buying a quart of milk will end in an identity theft.

By implementing Identity and Access Management, the CSO can address all these issues and:

  • Reduce costs.

  • Improve productivity by automating processes.

  • Enhance security by creating centralized enforced policies regarding access.

  • Ensure compliance by implementing strong internal controls while enabling auditing and monitoring.

  • Enable business.

    Comments

    Post new comment

    Login or register to link comments to your user profile, or you may also post a comment without being logged in.
    The content of this field is kept private and will not be shown publicly.
    Enter the fully qualified URL, eg. http://www.example.com/
    • Web page addresses and e-mail addresses turn into links automatically.
    • Allowed HTML tags: <a> <em> <strong> <cite> <code> <ul> <ol> <li> <dl> <dt> <dd>
    • Lines and paragraphs break automatically.

    More information about formatting options

  • Additional Resources
    Newsletter Subscription
    Sign up for our CSO Online newsletters!
    RSS Feeds
    Syndicate content
     
    Whitepaper

    IDC Report: Managed Communications - Delivering on a Holistic ICT Vision

    IDC believes that advances in technology combined with convergence, consolidation, centralisation and consumerisation drivers are set to change communications business models and the ICT landscape. Read on and enable your business to do more with less.

    Sponsored Links