sponsored
Your immediate IT ecosystem is just one part of the broader IT ecosystem and therefore just one source of information that can be used to authenticate identities and grant access to systems. From your threat detection system to your organizations physical security systems, there are a variety of sources of data that can provide insights into identity assurance. When building out your identity assurance strategy, its worthwhile to look at the system management and security tools in the broader ecosystem and ask yourself: What information from these sources do I wish our identity system knew?
Here are a few examples of how you can apply data from a variety of sources for authentication and access purposes.
1. Threat Detection Including SIEM and CASB
We all know that identity assurance systems can feed log information to threat detection systems -- like Security Information and Event Management (SIEM) and Cloud Access Security Brokers (CASB) systems -- to help identify threats. In hand, SIEM and CASB systems can send threat alerts to identity assurance systems to step up authentication requirements. For example, when an alert is raised for a specific user, the identity system can adjust in response by requiring multi-factor authentication or, if the threat is significant, blocking access for the user until the threat is cleared. Similarly, if an alert is raised on a resource, anyone attempting access to that resource should be required to provide a higher level of assurance to get it. Again, in extreme cases, all access to a resource may need to be blocked.
The value of threat alerts from threat detection systems, whether raised on users or resources, lies in triggering the appropriate additional access security in real time. In addition to real-time threat information, many threat detection tools also offer additional risk analysis. This data should work with the risk analytics of the identity assurance system to raise or lower confidence in the users identity.
2. Enterprise Mobility Management (EMM)
Mobile devices that are managed through a corporate EMM have a wealth of device data available for strengthening identity assurance. This device information can provide additional context for static rules, such as policies that foster easier access for users of corporate managed devices. It can also provide additional analytics insights to the identity risk engine.
3. Physical Security Systems
Information about how people physically access buildings may not appear to have much of an impact on how they access digital information, but in reality, building access data can instill confidence that a user is who he or she claims to be. Integrating data from physical access systems into the identity risk engine extends identity insights. For example, if a user badges into an office in San Francisco and then, within a few minutes, attempts a login from London, thats a clear signal to reassess the identity risk. Conversely, if the user enters the building he or she normally does and, following day-to-day patterns, accesses Office 365, that behavior is also worth considering in determining whether additional authentication is required.
Threat detection, EMM and physical security systems are by no means the only systems from which additional data about users can help feed behavioral recognition and static policy rules. By looking throughout your organization for systems that contain data to increase identity assurance, you can improve access security and, at the same time, reduce end-user friction. The important thing for your identity assurance strategy is not only having systems that contain these types of data, but also having real-time response capabilities in your identity system.
The message is simple and clear: Dont overlook data from the broader IT ecosystem to help with ensuring secure, convenient access to resources. You can learn more about how RSA SecurID Access is enabling access to the modern enterprise in this on-demand webinar.
Sponsored Links
Excerpt from:
Authentication and IT Ecosystem: Leveraging Data from Multiple Sources - CSO Online
- Green with Envy | How to Spot an Eco-Snob | Part III - November 8th, 2009 [November 8th, 2009]
- EcoLogo - November 8th, 2009 [November 8th, 2009]
- 5 Ways to Green Your Exercise Routine - November 8th, 2009 [November 8th, 2009]
- Seed Bombs - November 8th, 2009 [November 8th, 2009]
- Guerrilla gardening - November 8th, 2009 [November 8th, 2009]
- Green Your Morning Routine - November 8th, 2009 [November 8th, 2009]
- Environmental Benefits of Telecommuting - November 8th, 2009 [November 8th, 2009]
- Safeway Sponsors Portland Community Cleanup - November 8th, 2009 [November 8th, 2009]
- Electric Vehicle Race - November 8th, 2009 [November 8th, 2009]
- Portland Bridge Pedal 2009 - November 8th, 2009 [November 8th, 2009]
- E-waste in Oregon - November 8th, 2009 [November 8th, 2009]
- Bike Sharing in Portland - November 8th, 2009 [November 8th, 2009]
- Bucks for the Bay Challenge - November 8th, 2009 [November 8th, 2009]
- Drive to Make a Difference with MyMPG - November 8th, 2009 [November 8th, 2009]
- Bathroom Sprayers - Green your Toilet Routine - November 8th, 2009 [November 8th, 2009]
- Ubuntu OS can Save Energy - November 8th, 2009 [November 8th, 2009]
- Green Metropolis, David Owen - November 8th, 2009 [November 8th, 2009]
- Sustainable Pens: GLO Pens - November 8th, 2009 [November 8th, 2009]
- International Day of Climate Action - November 8th, 2009 [November 8th, 2009]
- Donate to Oregon Toxics Alliance - November 8th, 2009 [November 8th, 2009]
- Biomass Energy Generation Myths - November 8th, 2009 [November 8th, 2009]
- Crude The Real Price of Oil | Playing in Portland - November 8th, 2009 [November 8th, 2009]
- Pictures From 350 Climate Day in Portland - November 8th, 2009 [November 8th, 2009]
- Arcimoto Electric Vehicles in Oregon - November 8th, 2009 [November 8th, 2009]
- Urban Rooftop Wind Turbines - November 8th, 2009 [November 8th, 2009]
- Chromium 6 Emissions from ESCO in Portland - December 13th, 2009 [December 13th, 2009]
- Food Inc. Review - December 19th, 2009 [December 19th, 2009]
- Making Maps with Google Earth and Google Maps by Shane Bradt of the University of New Hampshire Cooperative Extension - March 23rd, 2010 [March 23rd, 2010]
- Demonstration of Miradi 3.1 by Nick Salafsky of Foundations of Success - March 23rd, 2010 [March 23rd, 2010]
- Advanced Mashups – KML and the Mapping API by Cary Chadwick of the University of Connecticut Center for Land Use Education and Research - March 23rd, 2010 [March 23rd, 2010]
- Demonstration of InVEST by Heather Tallis of the Natural Capital Project - March 23rd, 2010 [March 23rd, 2010]
- GIS Maps Online by Emily Wilson of the University of Connecticut Center for Land Use Education and Research - March 23rd, 2010 [March 23rd, 2010]
- From ArcGIS to Web Maps: Simple Techniques for Publishing GIS Maps Online by Emily Wilson of the University of Connecticut Center for Land Use Education and Research - March 25th, 2010 [March 25th, 2010]
- Demonstration of Marine InVEST by Anne Guerry of the Natural Capital Project - March 31st, 2010 [March 31st, 2010]
- Eliminate and Decrease Styrofoam - March 31st, 2010 [March 31st, 2010]
- Portland Plans to Spend $600 million on Master Bike Plan - April 2nd, 2010 [April 2nd, 2010]
- (Webinar in Spanish) Demostración sobre Vista 2.5 de NatureServe en línea (Webinar) por Ian Varley, Carmen Josse, y Alexandra Sanchez de Lozada de NatureServe. - April 6th, 2010 [April 6th, 2010]
- Using and Adding Your Content to Google Ocean by Charlotte Vick, Google Content Manager of Mission Blue - April 13th, 2010 [April 13th, 2010]
- End Paper Receipts - May 1st, 2010 [May 1st, 2010]
- Demonstration of CanVis by Chris Haynes of NOAA Coastal Services Center - May 6th, 2010 [May 6th, 2010]
- Demonstration of HD.gov Web Portal by Jeff Adkins from NOAA Coastal Services Center - May 13th, 2010 [May 13th, 2010]
- Demonstration of Ecosystem Assessment and Reporting Tool by Steve Schill of The Nature Conservancy - May 13th, 2010 [May 13th, 2010]
- Demonstration of Version 2.0 of the Multipurpose Marine Cadastre by Adam Bode and Brian Smith of NOAA Coastal Services Center - May 17th, 2010 [May 17th, 2010]
- CRUDE Filmmakers Subpoenaed by Chevron - May 22nd, 2010 [May 22nd, 2010]
- Demonstration of the Digital Coast Coastal Inundation Toolkit by Steph Beard, Jodie Sprayberry and Billy Brooks of NOAA Coastal Services Center - May 25th, 2010 [May 25th, 2010]
- Presentation on the Creating Resilient Communities EBM Tool Demonstration Project by Jocelyn Hittle of PlaceMatters - June 10th, 2010 [June 10th, 2010]
- Presentation on Economic Data Needed for EBM by Linwood Pendleton of Duke University - October 11th, 2010 [October 11th, 2010]
- Recycling Water - October 16th, 2010 [October 16th, 2010]
- ODOT Partners with Oregon Toxics Alliance to Reduce Pesticides - October 17th, 2010 [October 17th, 2010]
- Goats Hired to Mow Portland Lot - October 17th, 2010 [October 17th, 2010]
- A World of Health: Connecting People, Place, and Planet - October 17th, 2010 [October 17th, 2010]
- Alternative Recycling Options - October 17th, 2010 [October 17th, 2010]
- No More Bullying the Bull Trout - October 17th, 2010 [October 17th, 2010]
- 1000+ EV Charging Stations Slated for Oregon I-5 Corridor - October 17th, 2010 [October 17th, 2010]
- The Vertical Farm Concept - October 17th, 2010 [October 17th, 2010]
- Blog Action Day 2010 | Water - October 17th, 2010 [October 17th, 2010]
- Eco Districts - October 24th, 2010 [October 24th, 2010]
- Will The Nissan Leaf Thrive? - October 24th, 2010 [October 24th, 2010]
- A Green Railroad - October 24th, 2010 [October 24th, 2010]
- Biomass is not Oregon's clean-energy future as currently promoted - October 24th, 2010 [October 24th, 2010]
- Electrified Parking Spaces - October 24th, 2010 [October 24th, 2010]
- Tree Planting - October 24th, 2010 [October 24th, 2010]
- Three Tips to Reduce Your Carbon Footprint and Live Longer. - October 24th, 2010 [October 24th, 2010]
- Biomass is not Oregon’s clean-energy future as currently promoted - October 31st, 2010 [October 31st, 2010]
- Rail~Volution - October 31st, 2010 [October 31st, 2010]
- Green Streets Initiative - October 31st, 2010 [October 31st, 2010]
- Mayor Kitty Piercy and Envision Eugene - November 7th, 2010 [November 7th, 2010]
- The Willamette River Transit Bridge - November 13th, 2010 [November 13th, 2010]
- Collaborative Learning and Land Use Tools to Support Community Based Ecosystem Management by Chris Feurt of the Wells National Estuarine Research Reserve - November 14th, 2010 [November 14th, 2010]
- Portland Federal Building Begins Green Makeover - November 14th, 2010 [November 14th, 2010]
- Vestas’ New HQ in Portland Shoots for LEED Platinum - November 14th, 2010 [November 14th, 2010]
- College Degrees to Get You in the Environmental Field - November 14th, 2010 [November 14th, 2010]
- Demonstration of openNSPECT, an Open Source Version of the Nonpoint-Source Pollution and Erosion Comparison Tool by Dave Eslinger of NOAA Coastal Services Center - February 14th, 2011 [February 14th, 2011]
- Demonstration of EMDS by Keith Reynolds of the US Forest Service - February 14th, 2011 [February 14th, 2011]
- Demonstration of Habitat Priority Planner by Chrissa Waite and Danielle Bamford of NOAA Coastal Services Center - February 14th, 2011 [February 14th, 2011]
- Presentation on the Coastal Adaptation to Sea Level Rise Tool (COAST) by Sam Merrill of the New England Environmental Finance Center - February 14th, 2011 [February 14th, 2011]
- Presentation on the Coastal and Marine Ecological Classification Standard by Kathy Goodin of NatureServe - February 14th, 2011 [February 14th, 2011]
- Demonstration of Coral Reef Scenario Evaluation Tool (CORSET) by Jessica Melbourne-Thomas of the University of Tasmania - February 14th, 2011 [February 14th, 2011]
- Demonstration of Multi-scale Integrated Models of Ecosystem Services (MIMES) by Roel Boumans and David McNally of AFORDable Futures LLC - February 14th, 2011 [February 14th, 2011]
- Creating Life in the Desert - February 14th, 2011 [February 14th, 2011]