Access Governance: Implement Processes, Reduce Business Risks

Access Governance is one of the most important elements of Information Security strategies and implementations. The risk of abuse and loss of valuable information has severe operational impact and might even lead to strategic risks, from losing customers to de-stabilizing the entire business model due to the loss of trust by customers and other factors. Access Governance thus has to be understood as an approach with detective and preventive elements, trying to mitigate the risks and implement strong controls. That has to work across all systems – valuable information is not only in core business applications like SAP and not only in systems managed by Identity Provisioning solutions, but as well in many other systems. Thus, the concepts and processes have to span every relevant system and to cover any relevant information.

In this webcast, Martin Kuppinger of KuppingerCole will outline the big picture of Governance and drill down to Access Governance, focusing on the targets and elements of governance, from strategic alignment to formal policies. All initiatives require well- thought and defined processes, which have to implement policies and have to be in alignment with the strategic goals of the organization. He will talk about the relationship of information classification, policies, the multitude of systems, and the validity of access governance approaches to really mitigate the risks for information and the relating operational and strategic risks.

As organizational demand for user access has risen dramatically, applying the proper access policy controls across a multitude of fragmented information resources is a highly complex challenge for many IT security teams. Progressive organizations are adopting a new process for how access is requested, approved, fulfilled, validated, certified and remediated. Such an approach can overcome the complexity that the IT security team deals with, while simplifying access change management and compliance. Following Martin´s talk, Aveksa´s Founder, President and CTO Deepak Taneja will discuss how these organizations are achieving operational efficiencies in access administration while enabling sustainable compliance with regulatory requirements through an access change management control framework.

This Webinar is supported by Aveksa.