Workflow und Identity Management - Genehmigungsprozesse, Role Mining, Role Design und Compliance Management

Transcription

1

2 Workflow und Identity Management - Genehmigungsprozesse, Role Mining, Role Design und Compliance Management Stefan Stiehl Senior Technology Sales Specialist Identity Security Management sstiehl@novell.com

3 Compliance Management Models Compliance with is in-process assurance that the right work is done in the right way by the right entities Policy that expands to cover more services, applications and plattforms with increased flexibility and automation, providing simplified, authoritative, resource and access management Identity allows policy engines to reason about parts of the system 3

4 Compliance Management Models Wrapped Embedded PDP Delegated 4

5 Compliance Management Models Wrapped Embedded PDP Delegated Requirements Matrix Regulations 5

6 Compliance Management Models Identity Identity Providers Identity and Identity Provider Wrapped Workflow Embedded PDP Delegated 6 Policy Definition Service Compliance Management Service Requirements Matrix Regulations

7 Compliance Management Models Identity Identity Providers Remediation Service Analysis Storage Reports Identity and Identity Provider Federated CMDB Wrapped Workflow Embedded PDP Delegated 7 Policy Definition Service Compliance Management Service Requirements Matrix Regulations

8 Compliance Automation and Validation 8

9 Compliance Management Security Event Management Audit, Reporting HR Identity Management Benutzer Workflow / Rollen CUA Web Front-End x Entwicklung Designer 9

10 Compliance Management Workflows. Entwicklung 10

11 Audits and Dashboards 11

12 Audits and Dashboards 12

13 Security and Vulnerability Management IT Security Team Business Managers 13

14 Access Governance 14

15 Access Governance Audit, Reporting Access Governance CMDB Identity Management Rechenzentrum HR x UDMS x AHD x Benutzer x Web Front-End Entwicklung 15 Designer

16 Access Governance Automates the processes of mining and managing roles Delivers visibility, simplicity and accuracy to the complex process of defining and managing user access 16

17 Access Governance Enable business managers and application owners to be accountable for meeting the company's compliance requirements. 17

18 Access Governance Audit, Reporting Access Governance CMDB Identity Management Rechenzentrum HR x ODMS x AHD x Benutzer x Web Front-End Entwicklung 18 Designer Previleged User Manager

19 Privileged User Management Deliver Superuser Privilege Management for all UNIX/Linux 19

20 Privileged User Management Control and Record Which Privileged Users Have Access to What 20

21 Wrapped Embedded Questions? Identity Identity Providers Remediation Service Analysis Storage Reports Federated CMDB Identity and Identity Provider P D P Workflow Policy Definition Service Compliance Management Service Requirements Matrix Regulations 21

22

23 Unpublished Work of Novell, Inc. All Rights Reserved. This work is an unpublished work and contains confidential, proprietary, and trade secret information of Novell, Inc. Access to this work is restricted to Novell employees who have a need to know to perform tasks within the scope of their assignments. No part of this work may be practiced, performed, copied, distributed, revised, modified, translated, abridged, condensed, expanded, collected, or adapted without the prior written consent of Novell, Inc. Any use or exploitation of this work without authorization could subject the perpetrator to criminal and civil liability. General Disclaimer This document is not to be construed as a promise by any participating company to develop, deliver, or market a product. It is not a commitment to deliver any material, code, or functionality, and should not be relied upon in making purchasing decisions. Novell, Inc. makes no representations or warranties with respect to the contents of this document, and specifically disclaims any express or implied warranties of merchantability or fitness for any particular purpose. The development, release, and timing of features or functionality described for Novell products remains at the sole discretion of Novell. Further, Novell, Inc. reserves the right to revise this document and to make changes to its content, at any time, without obligation to notify any person or entity of such revisions or changes. All Novell marks referenced in this presentation are trademarks or registered trademarks of Novell, Inc. in the United States and other countries. All third-party trademarks are the property of their respective owners.