HP Identity Management for manufacturing companies

Transcription

1 HP Identity Management for manufacturing companies Be faster to market through secure access HP making identity management work HP s broad platform support and superior, standards-based architecture enabled Siemens to translate global business rules into online access policies quickly and cost effectively. Wolfgang Gries, Director I&C Technology, Siemens Transportation Systems

2 Introduction Manufacturing companies of all types have started to take a greater interest in the competitive advantages they can gain from deploying a sustainable and effective identity management system. This brochure concentrates on the key business drivers that are particularly relevant to the manufacturing sector, and outlines the benefits of the HP solution for identity management. The role of identity management Increased regulation, fierce competition and new systems have dramatically affected how companies in this sector manage many of their business processes, both internal and external. To rapidly develop new products, to increase productivity, to drive down costs, and to meet growing customer sophistication requires allowing users across the value delivery system direct and secure access to internal business processes. Manufacturing companies face a growing number of users including customers, suppliers, partners, employees and contractors who routinely require access across systems to conduct essential transactions. Managing this large community, and their necessary access rights, requires the adoption of a centrally enforced policy augmented by delegated, and even automated, management processes. Why you need identity management In the long term, it will come down to which auto companies can update their vehicle offerings quickly and get the update right from the consumer perspective. Auto companies will have to be flexible in their approach to design, manufacturing and engineering capacity. The Fitch Report, August 2004 The drive to adopt new business practices that optimise production output allows manufacturers to achieve better utilisation, faster development time, and greater collaboration, and to explore alternative routes to market. With global overcapacity it is also important that they look for ways to improve the customer, or channel, experience in order to maximise penetration. It is, therefore, more critical than ever to rapidly integrate new users into their current IT environment while maintaining adherence to security and access policies. 2

3 Identity management in the manufacturing sector Among the many challenges faced by companies in the manufacturing sector, these below are critical not just to business success, but also to business survival: Supply-chain management Processes such as Just-in- Time, Deliver-to-Line and Deliver-to-Schedule require the ability to ensure that all elements of the supply chain have access to the right information at the right time. Reducing time to market Speeding up readiness for production is an essential element of reducing the time to deliver new products to customers or the channel. This may involve increasing the effectiveness of R&D, finding quicker ways to add new suppliers, and rapidly empowering distribution and sales teams. HP Identity Management Experts from Frost and Sullivan, Secure Computing Magazine, Network Computing and others have assessed the HP Identity Management offering as the leading solution available. HP itself uses identity management to provide security and single sign-on (SSO) for over 12 million consumers and partners globally: Reduced costs and increased productivity through automation Tighter security and collaboration via detailed reporting and secure audit capabilities Faster partner integration via delegation and user self service Outsourcing Ensuring that all outsourcing partners retain access to essential information allows them to provide services that meet agreed levels. This may require you to delegate administration from the outsourcer back to the line-of-business. Regulatory compliance Protecting customer data and consistently managing user-access rights and user provisioning must be achieved through centralised access management, traceable processes and tamperproof audit trails. 3

4 Challenge supply-chain management Efficient manufacturing supply-chain solutions have become the differentiator between success and failure. They must be implemented in order to optimise everyday industry activities, enabling more intelligent and economical decisions with efficient planning processes. Improved supply-chain velocity, enhanced visibility across the whole of the supply chain and accurate information flows are essential. Enabling timely access to the shared resources, and controlling user access to the right people are crucial to success. Another key issues is how quickly an organization can respond to change. Business partnerships start and end. Designs and forecasts change. Regulators need new information. Even an act of God can disrupt the supply chain. In such situations, the ability to immediately and automatically update business processes and user access becomes a competitive advantage. HP Identity Management HP Identity Management provides an efficient, secure platform for managing remote user access by suppliers to your network. It ensures that all transactions are recorded in detail, and that consistent security policies are rapidly enforced across all suppliers. Changes in business processes can be updated once and automatically re-provision all users and their appropriate access rights. User access can be completely altered in as little as 1 click. HP provides: One-click creation and termination of a user s entire access across all resources Delegated administration that allows supplier owners to manage user access Centralised security policy enforced across all users Integrated workflow to ensure proper approvals and tracking Central, tamper-proof audit logs Ability to map user access directly to business processes We support over 12m users across disparate applications. HP OpenView provided us the only open solution to support all the protocols we needed and easily give us an enterprise single sign on solution for browser and non browser based applications. Anjali Anagol-Subbarao; Enterprise Architect, HP Internal IT Department 4

5 Challenge improved timeto-market In the face of intense competition and the drive for better efficiencies, manufacturers are increasingly relying on the value of collaborative Research and Development (R&D). To deliver new products to market at a faster pace, it has become important to focus on core activities and build virtual R&D teams across many suppliers, contract manufacturers, original design manufacturers, independent design and engineering teams and even regulatory agencies. One vital aspect of making this strategy successful is to ensure rapid access to sharing information, as well as maintaining security of intellectual property to retain competitive advantage. HP Identity Management With our solution, partner organisations can be rapidly brought into your environment. They can be granted appropriate privileges and user rights to only that information they need, so they can download and share data, and update master schedules, with management throughout the process delegated to the line-of-business. And, at the end of the project, they can be rapidly de-provisioned to maintain control over intellectual property. Better security, better processes, less cost Production overcapacity throughout the industry presents a momentous challenge that can only be overcome with extensive collaboration and information sharing, as the supply chain becomes more responsive to demand. Datamonitor 7-04 HP provides: One-click creation and termination of a partner s entire access Delegated administration to the line-of-business Central security and access policy enforcement Central, tamper-proof audit logs Federate or share access across company boundaries and manage from 1 location 5

6 Challenge outsourcing Outsourcing is an unstoppable trend, with manufacturers typically outsourcing many of their previously core activities to specialist companies. The breadth of outsourcing service providers is enormous, ranging from those who supply routine facilities such as catering, through HR and IT, and all the way to product design, assembly and test. With outsourcing comes the requirement to integrate the providers into the business processes often to the heart of the critical systems that impact business performance. Managing and controlling this large community of new users, and retaining the integrity of sensitive information, is crucial. HP Identity Management With the HP solution, the management of user-access rights is greatly accelerated, allowing you to exercise fine control over many aspects. Now you can define and implement a central security policy to be enforced across all applications, even those outsourced. Management of access rights can be delegated back to the business owner, streamlining collaboration and reducing the impact of outsourcing. HP provides: Delegated administration and user self service Web single sign-on across applications, and even across company boundaries Central security and access policy enforcement Automated or one-click account termination Conditional access policies based on any user attribute like company, location, time, etc. Essential security for supply-chain interactions The success of manufacturing e-initiatives depends on information flowing quickly, securely and reliably within the organisation and to all members of the supply chain: customers, dealers, partner companies and suppliers. As manufacturers share critical business information and applications with supply-chain partners, they face the same vulnerabilities confronted by other vertical markets: the risks of unauthorised access to web-enabled applications and resources. Jennifer Thomson, IDC research 6

7 Challenge regulatory compliance The manufacturing sector faces growing national and global regulation that has been progressively introduced to ensure appropriate levels of corporate governance. Notable among these regulations are: EU Privacy Act The focus of this directive is on demonstrating that appropriate security measures have been taken against unauthorised access to, or unauthorised alteration, disclosure or destruction of, customer data. Sarbanes-Oxley This act has established new standards of corporate accountability for all public companies that wish to do business in the U.S. HP Identity Management HP Identity Management allows you to meet the major requirements of these regulations for governance. HP provides customers with the capabilities to control access as required, demonstrate continuous compliance and rapidly retrieve a tamper-proof audit record. HP provides: Simplified access to management information with a single-screen view - Immediately establish who has access to what information - Measure adherence to the approval process in just three clicks In looking to vendors that supply IAM systems, we note that HP provides a strong example of a vendor with a product line that not only can fulfil compliance needs but also can provide additional features for increased business value and help prepare organisations for compliance with future expansion and regulation coverage. Christian A. Christiansen, IDC. Identity Management: A Growing Player in the Regulatory Compliance Challenge Secure history of all access requests, authorisation decisions and administrative changes Centralised identification and authorisation across all applications Delegated administration while maintaining accordance with company procedures 7

8 Working with HP Identity Management HP Identity Management software is an integrated, standards-based solution that provides the necessary tools to manage users and their access rights across the business environment. The HP solution has the broadest support for platforms, application environments and directories of any solution in the market. The HP solution comprises the following products from the HP OpenView portfolio that can be selected individually or as an integrated package: HP OpenView Select Access HP OpenView Select Access is a web-based access-management solution with a unified approach to defining authorisation policies and securely managing access. Administrators can enforce a central security policy while empowering business users to control access to key resources. It also provides a personalised end-user experience and single sign-on across web applications. HP OpenView Select Identity HP OpenView Select Identity is a user-provisioning and workflow solution that can automatically define user-access rights to business services, and not just IT resources. Select Identity automatically provisions the resources that users need, helping to eliminate errors and potential for unauthorised access that often come with manually provisioning users for large numbers of resources. HP OpenView Select Federation HP OpenView Select Federation provides federated identity management that can link identity infrastructures and services across partners. Select Federation provides cross-domain single sign-on, privacy management, mobile identity support, and auditing. Select Federation integrates with other identity services and infrastructures regardless of the industry standard protocols or vendors. HP Identity and Security Services The HP Consulting and Integration group has over 20 years of experience in security consulting, and has deployed some of the largest identity-management solutions in the world. This group can help customers develop, or verify, a roadmap of identity and accessmanagement improvement projects that can optimise project scope, align with available investment funding, and provide early demonstrations of progress. As one of the leading security services organisations, the HP Consulting and Integration group boasts: Expert security staff of over 600 security-certified professionals Vast knowledge base including CISSPs, SANS, CCIEs, CISM, CCIE, SSCP and CISCO VPN Best Security Service Award from Secure Computing magazine Microsoft Gold Security Partner with deep ties to security technology Only IT systems vendor with preferred, strategic relationships and investments with BEA and Microsoft Provider of professional services bridging the.net and J2EE domains Cisco Gold Partner and Number 1 Cisco Services Partner in EMEA Trained and certified in industry best practices and methodologies such as BS7799/ISO1779 8

9 For more information To find out more about how HP Identity Management can help your business: Contact your local HP Sales office Visit for detailed information on the HP Identity Management solution and white papers on how it addresses specific compliance regulations Visit to learn more about HP s software solutions for manufacturing 9

10 Visit Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice. The only warranties for HP products and services are set forth in the express warranty statements accompanying such products and services. Nothing herein should be construed as constituting an additional warranty. HP shall not be liable for technical or editorial errors or omissions contained herein EEE. May 2005