Critical Analysis needed. Please follow the instructions on the paper. Thank you

Purpose

To identify software that can manage privileged identity and identity access management. The software suite must help mitigate least privilege and separation of duties short comings.

Identity Access Management

Gartner defines identity access management as “A security discipline that enables the right of individuals to access the right resources at the right times for the right reasons” (Gartner, n.d.).  IAM is a vital component to network security for any size or scope of network. This ability to diligently monitor possible risks within your purview is pivotal. Identity Access Management allows for users to access what information they need based on their assigned role within the organization. Having an effective system will ensure that employees with the need to know are the only ones with access to the information.

Product Selection

There are several reputable sources in the access and identity management arena. I chose to go with a proven leader Oracle. Oracle offers a multitude of identity access management solutions for the information security professional. These solutions will ensure that risk are mitigated and all information is managed on a need to now basis.

Oracles Access Management

According to Oracles Product Website they offer many great features that will meet requirements as well as meeting standard information security practices. Oracle describes their product as the total package in access management (Identity Access Management, n.d.). With the ever evolving digital world it is imperative to ensure that your access managent tool is evolving as fast as technology evolves

Oracle Access Management Features and Abilities

Integrated Solution

According to Oracles own product data this suite includes end to end security, secure password management, malware protection, risk based authentication and self-service password manager (Identity Access Management,n.d.). Having an integrated solution will limit cost by ensuring all your information assurance needs are met in one easily managed application. An easily manageable application will help mitigate unnecessary risk.

Accessibility

The ability to access your information on a mobile phone, via the cloud or through the local enterprise is essential to a profitable business in the twenty first century.  This tool allows for secured access via multiple means such as “Information  can be accessed with a social identity, some may require a local log in, some more valuable assets may require a step-up authentication using knowledge-based authentication (KBA) or require multi-factor authentication, such as one time password/ pin (OTP), when risk is high” (Identity Access Management ,n.d.). These access methods can be set based on what information the user needs access to. This feature also allows for easier identification of users accessing your most vital information.

Oracle Adaptive Access Manager

“The Oracle Adaptive Access Manager feature utilizes pre-determined policies to access the need for access to an application” (Identity Access Management, n.d.).  Having this feature will allow all levels of your organization to manage and set restrictions on your businesses most important data. This feature offers many levels of layered protection such as behavior analysis, device tracking and behavior profiling.  Having a system with these features is much like having a personal detective. This proactive approach helps prevent breaches vice spending money to clean up after breaches.

Conclusion

According to the info security website “Stealing and exploiting privileged accounts is a critical success factor for attackers in 100% of all advanced attacks, regardless of attack origin” (Privileged Account, 2014). This critical factor along with previously mentioned insider threats is why it is important to have an effective identity access management system. Understanding what information is being accessed by who can prevent costly breaches. By purchasing this Oracle system it can help reduce any future threats to any size network.

 

 

 

  

References

Identity and Access Management (IAM). (n.d.). Retrieved February 4, 2016, from http://www.oracle.com/us/products/middleware/identity-management/access-management/features/index.html

Identity and Access Management (IAM). (n.d.). Retrieved February 6, 2016, from http://www.gartner.com/it-glossary/identity-and-access-management-iam/

Privileged Accounts at Root of Most Data Breaches. (2014, July 17). Retrieved February 6, 2016, from http://www.infosecurity-magazine.com/news/privileged-accounts-at-root-of/

Rouse, M. (n.d.). Privileged identity Management (PIM). Retrieved February 6, 2016.