01.12.2018 - IAM Addresses Help Desk Issues

In today’s enterprise, employees need to access many different areas of your computer network, even areas that don’t necessarily fall within their given departments. This creates an access problem, since you don’t want your network left open for anyone to access. Even when companies do take steps to protect their networks, hackers can and will break in, either for the purposes of corporate sabotage or out of a general attempt to do malice. The problem is how to make sure everyone who needs access can get access, while hackers cannot. In the past, companies could give employees a password for their own part of the system, but if any cross-department work was required, they would have to contact the help desk in order to get additional access, slowing down operations and reducing efficiency. ...

01.3.2018 - Internal Hiring vs. Hiring a MSSP: Which Is Better?

There’s no question that in today’s day and age, you need a dedicated cybersecurity team to protect your company’s data. The question is, do you dedicate some of your existing IT staff to cybersecurity or do you use a managed security service providers (MSSP) services? Naturally, there are pros and cons to each approach. ...

12.14.2017 - GDPR Compliance – Assessing Data Controls and Risk Management

After reading our blog “Initiating Steps On The Path To GDPR Compliance” and completing your data mapping exercise, you should now have an understanding of what data your company collects, how it is used, where it is stored, who has access, and when and how it is deleted.  What should you do next? For the next step, you need to assess the identified data flows and rate their importance and sensitivity.  You may need to have different rating scales to consider, both from the company perspective and an individual’s viewpoint.  Proprietary information does not mean much to an individual, just like a social security number does not mean much to the company’s overall survival.  So, data’s value is determined by the owner’s perspective. ...

11.9.2017 - Top 10 Reasons for the Virtual Identity Server (VIS)

top 10 reasons for the virtual identity server whitepaper LDAP Virtual Directories, such as Optimal IdM’s Virtual Identity Server (VIS), are not a brand new technology. Instead, they have been around for many years. They have quietly solved business issues without much fanfare or publicity. Only recently, has the topic of LDAP Virtual Directories hit the mainstream. In fact, just a few years ago, it was nearly impossible to find Virtual Directory sessions at industry conferences, while this year’s Directory Experts Conference and Digital ID World conference had several sessions on the topic. This is good news for CIO’s, IT managers and companies in general as the benefits and use cases of Virtual Directories become better known. ...

11.2.2017 - Initiating Steps On The Path To GDPR Compliance

If you are reading this you have heard of the General Data Protection Regulation (GDPR) and are concerned whether it applies to you. Since it applies to all European Union citizens, no matter where they are located in the world, it is very likely that it does. The question of enforceability, especially if you don’t have an EU presence, is a different issue. But most multi-national companies are following the requirements down to their supply chain, so if you are not compliant, you may find business opportunities drying up. The first step to compliance is to understand your data. You need to do an exercise called data mapping. Data mapping for GDPR is not the same as matching up database schemes. It is more like a data inventory and it is a fundamental requirement for your privacy compliance strategy. How can you protect something if you don’t know that you have it? In data mapping, you act as a journalist, analyzing your data flows, and answering the five W’s of reporting; Who, What, Where, When, and Why. Data mapping can benefit your business in other ways too, such as identifying key data sources, eliminating duplicate data stores, and consolidating data to provide for a smarter use. The healthcare industry went through similar efforts fifteen years ago with the advent of HIPAA. ...

10.9.2017 - Four Simple Steps to Online Safety

Cybercrime is a serious issue in today’s society — so much so that the Department of Homeland Security has made October National Cyber Security Awareness Month. The recent Equifax hack shows that no business, no matter how large, is immune to cyberattacks. You can never be certain your information is totally safe. However, there are some simple steps you can take to protect yourself online and to recover in the event a cyber incident occurs. ...

10.3.2017 - Protecting Critical Infrastructure from Cyber Threats

As a society, we depend on the internet more than ever. All of the systems that enable us to function today, from electricity and transportation to banking, rely on digital infrastructure to function. It is absolutely crucial that we protect our critical infrastructure from cyber threats. Without adequate security, malicious hackers could cause traffic accidents, hijack phone calls and even interfere with the water supply. While the idea of hackers completely taking over our way of life is a frightening one, the good news is that there are very gifted people on the other side consistently developing ways to thwart these cybercriminals. What are some of the state-of-the-art ways to safeguard our critical infrastructure from these dangers? For risk managers who are in charge of protecting these systems, preparation is key. Networks must have redundancies so that if systems are crashed by hackers, isolated backups can jump into their place. Systems must be resilient enough to spot threats in real-time, alert the system manager and take immediate self-protective action. The best way we know to currently protect infrastructure is to make sure these redundancy and resiliency measures are in place and to test and revise them frequently. Hackers are constantly attempting different and more effective ways of invading these systems. Elements of a comprehensive safety plan include: ...

09.11.2017 - Buyer’s Guide to Multi-Factor Authentication (MFA)

MFA is the norm in business today due to the desire for better access control and the need to comply with regulatory requirements. And while every company and every vertical have different requirements for their MFA solutions, they all should start by analyzing the same three elements: scope, usability, and means of delivery. With these elements in mind, this paper takes a tactical approach to guide you through various MFA options. Please fill out the contact form to the left to download the Buyer’s Guide to MFA. ...

Tags

  • The database in which all of your organization’s sensitive identity data is stored.
  • A digital ledger in which digital transactions are recorded chronologically and publicly.
  • Securely managing customer identity and profile data, and controlling customer access to applications and services.
  • The means of linking a person's electronic identity and attributes, stored across multiple distinct identity management systems.
  • A legal framework that sets guidelines for the collection and processing of personal information of individuals within the EU.
  • The policy-based centralized orchestration of user identity management and access control.
  • An authentication infrastructure that is built, hosted and managed by a third-party service provider.
  • A security system that requires more than one method of authentication from independent categories of credentials to verify the user's identity for a login or other transaction.
  • A global provider of innovative and affordable identity access management solutions. 
  • Managing and auditing account and data access by privileged users.
  • Tools and technologies for controlling user access to critical information within an organization.
  • An authentication process that allows a user to access multiple applications with one set of login credentials.