overview - tuebora.com · tuebora idat snapshot your iam posture on-demand for free tuebora idat...

Tuebora IDAT Snapshot Your IAM Posture On-Demand for Free Tuebora IDAT Datasheet 01 Overview “There has to be a beer way.” Everyone has had this thought. If you only have anecdotal evidence of a problem and can’t quanfy how bad things are, it’s likely that changes you suggest won’t get the hearing they deserve. This is especially true for Identy and Access Management (IAM) professionals. Building awareness of a problem to support change requires visibility into how bad the problem is. Line-of-business owned applicaons, growing numbers of business partners that require access, and stac rule-based approaches to access provisioning can create a disjointed and inefficient approach to IAM. The IAM team is beset with an increasing number of access provisioning one-offs that slow identy fulfillment and revocaon of access and privileges when employees change roles or leave the company. Meet Tuebora IDAT Tuebora’s free Identy Discovery and Assessment Tool (IDAT) helps you create a snapshot of identy and access for your organizaon. It automates analysis of business applicaon access data, log data and HR data to understand the intersecon of access and assets. It then suggests changes to provisioning rules and the discovery of excess and unused access. Having this visibility allows you to harmonize data across applicaons that use identy and more effecvely track and audit access. Five key metrics are presented: Summary Having visibility into a potenal problem is the most important step to addressing it. Whether the data access data is from cloud applicaons, or on-premises applicaons. Data can be easily analyzed and professional reports created for auditors or upper level management. Tuebora’s Identy Discovery and Assessment Tool is available for free at Tuebora’s website: www.tuebora.com The number and percentages of these five metrics can provide a window into what kinds of changes need to be made to exisng processes and pracces. Data Quality - Data quality is automacally reviewed looking for missing identy data and mismatched entries for the same field or data type. Provisioning Anomalies - Provisioning ‘one-offs’ are discovered and efficient provisioning rules suggested. User Cerficaon Behaviors - Ensure that cerfiers/reviewers don’t treat Access Cerficaon as rubber-stamping. Unused Accounts - Detects unused accounts and recommends deacvaon and removal. Unused Access - Detects overprovisioned and unused access conforming with a “least privileges” philosophy. • • • • • Data Collecon Identy Data (Acve Directory or HR), applicaon access data – minimum requirement. For usage analysis, log data is required. Define an Organizaon User Profile Specify aributes - any combinaon of Title, Department, Locaon, Business Unit etc. Provide the Data to the IDAT Tool Run the tool and get an IAM Posture report in minutes. 1 2 3 Three Steps to IAM Visibility with IDAT

Upload: dangminh

Post on 19-Sep-2018

213 views

Category:

Documents

0 download

Report

Download

Embed Size (px):

TRANSCRIPT

Tuebora IDATSnapshot Your IAM Posture On-Demand for Free

Tuebora IDAT Datasheet 01

Overview“There has to be a better way.” Everyone has had this thought. If you only have anecdotal evidence of a problem and can’t quantify how bad things are, it’s likely that changes you suggest won’t get the hearing they deserve. This is especially true for Identity and Access Management (IAM) professionals. Building awareness of a problem to support change requires visibility into how bad the problem is. Line-of-business owned applications, growing numbers of business partners that require access, and static rule-based approaches to access provisioning can create a disjointed and inefficient approach to IAM. The IAM team is beset with an increasing number of access provisioning one-offs that slow identity fulfillment and revocation of access and privileges when employees change roles or leave the company.

Meet Tuebora IDATTuebora’s free Identity Discovery and Assessment Tool (IDAT) helps you create a snapshot of identity and access for your organization. It automates analysis of business application access data, log data and HR data to understand the intersection of access and assets. It then suggests changes to provisioning rules and the discovery of excess and unused access. Having this visibility allows you to harmonize data across applications that use identity and more effectively track and audit access. Five key metrics are presented:

SummaryHaving visibility into a potential problem is the most important step to addressing it. Whether the data access data is from cloud applications, or on-premises applications. Data can be easily analyzed and professional reports created for auditors or upper level management.

Tuebora’s Identity Discovery and Assessment Tool is available for free at Tuebora’s website: www.tuebora.com

The number and percentages of these five metrics can provide a window into what kinds of changes need to be made to existing processes and practices.

Data Quality - Data quality is automatically reviewed looking for missing identity data and mismatched entries for the same field or data type.Provisioning Anomalies - Provisioning ‘one-offs’ are discovered and efficient provisioning rules suggested.User Certification Behaviors - Ensure that certifiers/reviewers don’t treat Access Certification as rubber-stamping.Unused Accounts - Detects unused accounts and recommends deactivation and removal.Unused Access - Detects overprovisioned and unused access conforming with a “least privileges” philosophy.

•

• •

Data CollectionIdentity Data (Active Directory or HR), application access data – minimum requirement. For usage analysis, log data is required.

Define an Organization User ProfileSpecify attributes - any combination of Title, Department, Location, Business Unit etc.

Provide the Data to the IDAT ToolRun the tool and get an IAM Posture report in minutes.

Three Steps to IAM Visibility with IDAT