Archive for December, 2017

Optimal IdM provides a few best practices to keep passwords safe including this quote on multi-factor authentication (MFA). “2FA does a good job of allowing only individual account owners access to their login credentials,” Bohren said. “If hackers do succeed in guessing a password, they must still breach additional authentication steps before they can reach important data.” Continue reading the full story on eSecurity Planet. ...

After reading our blog “Initiating Steps On The Path To GDPR Compliance” and completing your data mapping exercise, you should now have an understanding of what data your company collects, how it is used, where it is stored, who has access, and when and how it is deleted.  What should you do next? For the next step, you need to assess the identified data flows and rate their importance and sensitivity.  You may need to have different rating scales to consider, both from the company perspective and an individual’s viewpoint.  Proprietary information does not mean much to an individual, just like a social security number does not mean much to the company’s overall survival.  So, data’s value is determined by the owner’s perspective. ...

Optimal IdM, a leading provider of Identity and Access Management (IAM) solutions, today announced it will be presenting at InfoSec World 2018 Conference and Expo, March 19-21 at Disney’s Contemporary Resort, Lake Buena Vista, Fla. Jeff Bohren, Chief Software Engineer, Optimal IdM will discuss, “Bridging the Protocol Gap on Cloud Identity Projects” on Mon., March 19 at 3:20 p.m. The breakout session will help attendees learn the origin of protocols and when to use them, best options to use with mobile apps, how to deal with situations outside of specifications and security concerns to consider. “Bridging the divide between newer authorization and federation protocols, such as OAuth2 and OpenID and connecting to older federation protocols like SAML2 and WS-Federation, presents some unique challenges,” said Bohren. “We will discuss those challenges and look at some practical, real-world solutions.” Bohren has over 30 years of software development and architecture experience and over 20 years of knowledge in identity management and federation. He served on several OASIS technical committees including SAML, SPML, and DSMLv2. He was the BMC Software representative to OASIS, Project Liberty, and OpenAuthentication.org. “InfoSec World 2018 brings together practitioners, researchers, and experts at every level to create an interactive forum that helps security professionals learn about the latest advances in cybersecurity and the critical threats facing their organizations,” said Katherine Teitler, Director of Content, MISTI. “We are especially pleased with the content that will be presented at this year’s conference and are proud to have Optimal IdM join our program lineup. The knowledge, experience, and strategies shared will be invaluable to InfoSec World attendees.” InfoSec World 2018 features expert keynote addresses, stimulating panel discussions and interactive roundtables, hands-on tech labs, as well as informative breakout sessions. Additionally, pre- and post-conference workshops and summits on CISO Leadership, Cloud Security, and Privacy and Risk are scheduled. To top it off, this gathering provides a rare opportunity for information security professionals to network in an intimate yet vibrant setting, with more than 1,000 attendees from a range of industries, professional backgrounds, and countries. ...

Continue reading the full article! ...