See All Locations
Aveksa was founded by a team of identity and access management pioneers, whose successful track records include Netegrity, Banyan Systems and PowerSoft. They recognized that businesses are struggling to achieve security governance across the enterprise, and are unable to efficiently or effectively manage the risk of inappropriate access to enterprise information resources.
From the time of our founding, we’ve focused on helping security teams and business managers collaborate on these objectives, through the automation of the many critical, yet manual tasks associated with access delivery, change management and compliance across the entire enterprise. We believe that in order to rapidly respond to business and regulatory demands, IT security organizations need an Enterprise Access Governance solution, to manage the complete lifecycle of user access to information resources through an automated, continuous process for access request, approval, fulfillment, review, certification and remediation.
We provide the industry's most comprehensive, enterprise-class, access governance and management solution, helping IT organizations reduce access management complexity and increase operational efficiency, while minimizing risk and ensuring sustainable compliance. Leading Global 2000 organizations in financial services, healthcare, retail, energy/utility, telecommunications, transportation and manufacturing rely on Aveksa to efficiently address access request, fulfillment and regulatory compliance demands.
Since 2006, when we released the first version of our product, we’ve been working hard to make our vision a reality. Our Enterprise Access Governance solutions are distinct in the following ways:
Today’s Information Security organizations are being asked to secure information in this changing landscape. Unfortunately, not only the threat landscape is changing, but today’s organizations are increasingly agile. For Access Governance, the challenge is to secure information in a dynamic environment the Information Security department does not own, manage, or control. Business processes are changing, applications are purchased, Cloud services are ordered, organizational change happens – all out of control of the Information Security department. Nevertheless: Information needs to remain secure.
Obviously, the common check-box compliance approaches, targeting some few systems and typical risks, are not sufficient anymore. They frequently ignore large portions of the IT infrastructure, from individual IT to IT in production environments. They are not made to withstand continuous change. They are not built for covering access risks by external attackers.
Agile, connected businesses in a world of change – both from a business and a threat perspective – need new approaches, beyond traditional check-box Access Governance. Here Access Intelligence comes into play – and here the integration with other areas of Information Security becomes relevant.
In this KuppingerCole Webinar, Dave Kearns of KuppingerCole will talk about the emerging trends in Information Security that affect Access Governance. He will look at the current evolution of Access Governance, the pitfalls and shortcomings of common approaches, and the areas where KuppingerCole expects innovation for Access Governance.
In the second part of the webinar, Jason Garbis of RSA Aveksa will dive deeper into how to combine Access Governance, Access Intelligence, external Threat Intelligence and other security solutions and services with IT GRC approaches to move from a reactive to a preventive Information Security approach. Based on deep intelligence, this approach provides insight into what users should and should not have access to, how organizations are exposed to the risk of excessive privilege, how they are challenged by potential data breaches and regulatory non-compliance. Based on that insight, organizations can really start mitigating their access risk and move to the next level of Access Governance.
As they face more security threats and regulatory challenges than ever, enterprises today are implementing Identity & Access Management (IAM) solutions built around business context. By doing so, companies can empower line of business owners to take ownership of identity and access control, and provide full business context across Identity and Access Management systems. The end result is greater business and IT alignment, reduced risk of security breaches, increased compliance assurance and significantly lower total cost of ownership for IAM initiatives.
Join KuppingerCole Pricipal Analyst Martin Kuppinger, and Deepak Taneja, Chief Technology Officer for Aveksa, as they explore past and future approaches to Identity Management, recommend approaches that have been successful for global organizations, and provide best practices for a business-driven approach to Identity and Access Management.
Access Governance is one of the most important elements of Information Security strategies and implementations. The risk of abuse and loss of valuable information has severe operational impact and might even lead to strategic risks, from losing customers to de-stabilizing the entire business model due to the loss of trust by customers and other factors. Access Governance thus has to be understood as an approach with detective and preventive elements, trying to mitigate the risks and implement strong controls. That has to work across all systems – valuable information is not only in core business applications like SAP and not only in systems managed by Identity Provisioning solutions, but as well in many other systems. Thus, the concepts and processes have to span every relevant system and to cover any relevant information.
In this webcast, Martin Kuppinger of KuppingerCole will outline the big picture of Governance and drill down to Access Governance, focusing on the targets and elements of governance, from strategic alignment to formal policies. All initiatives require well- thought and defined processes, which have to implement policies and have to be in alignment with the strategic goals of the organization. He will talk about the relationship of information classification, policies, the multitude of systems, and the validity of access governance approaches to really mitigate the risks for information and the relating operational and strategic risks.
As organizational demand for user access has risen dramatically, applying the proper access policy controls across a multitude of fragmented information resources is a highly complex challenge for many IT security teams. Progressive organizations are adopting a new process for how access is requested, approved, fulfilled, validated, certified and remediated. Such an approach can overcome the complexity that the IT security team deals with, while simplifying access change management and compliance. Following Martin´s talk, Aveksa´s Founder, President and CTO Deepak Taneja will discuss how these organizations are achieving operational efficiencies in access administration while enabling sustainable compliance with regulatory requirements through an access change management control framework.
This Webinar is supported by Aveksa.
Managing entitlements is an administrative burden. Efficient role concepts can greatly decrease that burden by reducing the number of singular entitlements and using roles instead. Even while many people think that role projects are far too complex and long running, with a high risk of failing, reality proves that with today’s methodologies and tools for role management, lean role management has become reality. The webinar will provide a status of the role management and provide guidelines for successful, lean role management projects.
During this webinar, Principal Analyst Martin Kuppinger will give you an overview on state-of-the-art methodologies for role management, followed then by a discussion with Deepak Taneja (CEO Aveksa), Alberto Ocello (General Manager Engiweb Security) and Darran Rolls (CTO Sailpoint).
This webinar is supported by Aveksa, Engiweb Security and Sailpoint.