Enterprisewide Identity Management: Managing Secure and Controllable Access in the Extended Enterprise Environment

As the number and frequency of business partners, vendors and remote workers accessing your enterprises systems increases, so to does the risk that you are not locking out the correct systems from being accessed. Additionally, there is the risk that these accesses are not being properly revoked in a timely manner once they leave the enterprise or their work is complete. Identity management and user provisioning solutions of today can help improve cost-efficiencies, enable effective processes and promote user satisfaction while providing a high degree of security mitigating some of the risk.

This document provides identity management guidance including:

• Business drivers and technology considerations
• Risk, control and privacy and security considerations when implementing identity management
• A suggested framework for properly controlled and successful implementation
• A self assessment management questionnaire, focused on business needs, culture, infrastructure and resources
• An internal control questionnaire and audit program linked to COBIT process areas
• A detailed list of vendors and descriptions of their solutions