(GRC Forum) - Entitlement Management
Moderator:
Entitlement management is, without doubts, one of the terms in the IT market which isn’t as clearly defined as it should be. Entitlements are in fact the definitions of authorizations, e.g. who is allowed to do what. There are two problems in this area: Managing entitlements with a consistent approach across multiple systems and not only on a per-system level. And auditing entitlements, e.g. keeping track of the entitlement history and other facts. There are several different approaches to entitlement management, starting from the provisioning systems to enterprise entitlement concepts in the context of business role management or GRC solutions and specific auditing solutions which help to keep track of the historical data. The track will provide information on status and trends in this market as well as vendors and implementations.
An Interview with Edge Zarrella
24.04.2008 10:30-11:30
An Interview with Edge Zarrella
Martin Kuppinger, Kuppinger Cole + Partner • Egidio (Edge) Zarrella, KPMG
Entitlement Management Status & Trends
Martin Kuppinger, Kuppinger Cole + Partner
The management of entitlements or authorizations is one of the most complex topics in Identity Management. Martin Kuppinger will talk about the problems we face today with most approaches, the relationship of entitlement management and attestation and the approaches we can use today and may be in the future for entitlement management, up to the role XACML might play and the question about the best layer to manage entitlements – for systems as well as services.
Executing Identity and Access Management in an International Bank- and Insurance Company
24.04.2008 11:30-12:30
Executing Identity and Access Management in an International Bank- and Insurance Company
Dionysius Antonius Kotteman, ING Group
The presentation will cover ING's major project to define and roll - out identity management. It will list some experiences, good and bad, inluding Role Based Access. Added are the latest developments in ING with regard to building a Security Operations Centre; an opportunity to make a step in reducing risks in access security.
|
