|
Wednesday, 05/09/2007, 16:30-17:30
Track VI: Roles & Provisioning
Top-down or Bottom-up?
Moderator:
Role-based Privileges Management - Using Analytics to Quickly Deliver Meaningful Results
Based on the experience of the past few years, Role-based Access Control (RBAC) has emerged as best practice in the management of enterprise privileges, with the major drivers being Identity Management projects and regulatory compliance requirements. Eurekify presents an RBAC implementation approach that is based on pattern-recognition analytics, and has been shown to enable much faster implementation and significant immediate and ongoing benefits to the organization. We will discuss this approach compared to manual and process-oriented approaches.
Top-down or Bottom-up Roles Modeling: Which Approach fits best?
It is commonly accepted that enterprises are urged to take a more rigorous approach to modeling the relationship of individual to the organization, aka role modeling.
Less agreement can be found on the question which path to take best to achieve this goal. Should we choose a stepwise or a big bang approach, model system wise, business process by business process oder enterprise wide and finally should we model top down form business processes to elementary business functions to actors an their interactions with resources?. Or better take the bottom-up path of constructing roles from existing privileges, aggregating and refining them step by step to be sure to match with the enterprises real existing requirements?
The expert panel will discuss these questions and will come up with suggestions and recommendations.
|
English