12.14.2017 - GDPR Compliance – Assessing Data Controls and Risk Management

After reading our blog “Initiating Steps On The Path To GDPR Compliance” and completing your data mapping exercise, you should now have an understanding of what data your company collects, how it is used, where it is stored, who has access, and when and how it is deleted.  What should you do next? For the next step, you need to assess the identified data flows and rate their importance and sensitivity.  You may need to have different rating scales to consider, both from the company perspective and an individual’s viewpoint.  Proprietary information does not mean much to an individual, just like a social security number does not mean much to the company’s overall survival.  So, data’s value is determined by the owner’s perspective. ...

11.9.2017 - Top 10 Reasons for the Virtual Identity Server (VIS)

top 10 reasons for the virtual identity server whitepaper LDAP Virtual Directories, such as Optimal IdM’s Virtual Identity Server (VIS), are not a brand new technology. Instead, they have been around for many years. They have quietly solved business issues without much fanfare or publicity. Only recently, has the topic of LDAP Virtual Directories hit the mainstream. In fact, just a few years ago, it was nearly impossible to find Virtual Directory sessions at industry conferences, while this year’s Directory Experts Conference and Digital ID World conference had several sessions on the topic. This is good news for CIO’s, IT managers and companies in general as the benefits and use cases of Virtual Directories become better known. ...

11.2.2017 - Initiating Steps On The Path To GDPR Compliance

If you are reading this you have heard of the General Data Protection Regulation (GDPR) and are concerned whether it applies to you. Since it applies to all European Union citizens, no matter where they are located in the world, it is very likely that it does. The question of enforceability, especially if you don’t have an EU presence, is a different issue. But most multi-national companies are following the requirements down to their supply chain, so if you are not compliant, you may find business opportunities drying up. The first step to compliance is to understand your data. You need to do an exercise called data mapping. Data mapping for GDPR is not the same as matching up database schemes. It is more like a data inventory and it is a fundamental requirement for your privacy compliance strategy. How can you protect something if you don’t know that you have it? In data mapping, you act as a journalist, analyzing your data flows, and answering the five W’s of reporting; Who, What, Where, When, and Why. Data mapping can benefit your business in other ways too, such as identifying key data sources, eliminating duplicate data stores, and consolidating data to provide for a smarter use. The healthcare industry went through similar efforts fifteen years ago with the advent of HIPAA. ...

10.3.2017 - Protecting Critical Infrastructure from Cyber Threats

As a society, we depend on the internet more than ever. All of the systems that enable us to function today, from electricity and transportation to banking, rely on digital infrastructure to function. It is absolutely crucial that we protect our critical infrastructure from cyber threats. Without adequate security, malicious hackers could cause traffic accidents, hijack phone calls and even interfere with the water supply. While the idea of hackers completely taking over our way of life is a frightening one, the good news is that there are very gifted people on the other side consistently developing ways to thwart these cybercriminals. What are some of the state-of-the-art ways to safeguard our critical infrastructure from these dangers? For risk managers who are in charge of protecting these systems, preparation is key. Networks must have redundancies so that if systems are crashed by hackers, isolated backups can jump into their place. Systems must be resilient enough to spot threats in real-time, alert the system manager and take immediate self-protective action. The best way we know to currently protect infrastructure is to make sure these redundancy and resiliency measures are in place and to test and revise them frequently. Hackers are constantly attempting different and more effective ways of invading these systems. Elements of a comprehensive safety plan include: ...

09.4.2017 - Cybersecurity Threats Your Employees Should Know About

Cybersecurity is a bigger concern than ever before, both for corporations and individuals. Hackers have a wide variety of tools at their disposal to help them access private data that belongs to your company or clients. It’s important to be aware of the major areas of susceptibility in order to safeguard the vital information that exists in your company’s network and it’s important to make sure your employees are aware as well. Here are breach points you and your employees should watch out for: ...

09.1.2017 - Top 5 Road-Blocks Migrating To A Cloud Identity and SSO Solution

In discussions with our customers and prospects, almost all of them share common road-blocks that prevent many organizations from fully embracing a cloud identity management/SSO solution.  Here we will address 5 of the more common road-blocks and how Optimal IdM has helped clients meet and exceed their security, regulatory, and enterprise architecture needs. ...

Tags

  • The database in which all of your organization’s sensitive identity data is stored.
  • A digital ledger in which digital transactions are recorded chronologically and publicly.
  • Securely managing customer identity and profile data, and controlling customer access to applications and services.
  • The means of linking a person's electronic identity and attributes, stored across multiple distinct identity management systems.
  • A legal framework that sets guidelines for the collection and processing of personal information of individuals within the EU.
  • The policy-based centralized orchestration of user identity management and access control.
  • An authentication infrastructure that is built, hosted and managed by a third-party service provider.
  • A security system that requires more than one method of authentication from independent categories of credentials to verify the user's identity for a login or other transaction.
  • A global provider of innovative and affordable identity access management solutions. 
  • Managing and auditing account and data access by privileged users.
  • Tools and technologies for controlling user access to critical information within an organization.
  • An authentication process that allows a user to access multiple applications with one set of login credentials.