Identity and Access Management Memorial s Strategic Roadmap

Transcription

1 Identity and Access Management Memorial s Strategic Roadmap Executive Summary January 29, 2015

2 Identity and Access Management Identity and Access Management (IAM) is an integrated system of policies, business processes and technologies that enable organizations to both facilitate and control their users' access to critical online applications and IT resources. 2

3 How did we get here? Oct Campus-wide Requirements Sessions * 12 sessions * 244 attendees Oct 30-Nov 25 Follow-up requirements gathering * and teleconference Dec Review of second draft * By Advisory Committee Jan 7 Finalized by Advisory Committee Oct Business Process Redesign Sessions * 6 sessions * 32 attendees Nov 26-Dec 9 Review of first draft * Two 3.5 hour review sessions with Advisory Committee Dec 22 Strategic and Business Objectives to Steering Committee * Endorsed 3

4 Strategic Roadmap for IAM Five Strategic Objectives Each with several Business Objectives Each Business Objective translates into initiatives and projects which are short, medium or long term For each Business Objective the report identifies policy, process and technology implications and requirements Assuming that resources are available, the roadmap is estimated to take 3 years to complete 4

5 Strategic Objective #1: Improve the Student Experience Reduce the number of student credentials Reduce the number and confusion around student and messaging options Provide students access to free IT resources such as Microsoft Office Pro Plus Improve business process for student onboarding and identity provisioning Improve student self-service technical support Improve communication with students regarding IT offerings and resources 5

6 Strategic Objective #2: Improve the Faculty and Staff Experience Reduce the number of faculty and staff credentials Reduce the number of options and confusion around faculty and staff Improve business process for faculty and staff onboarding and identity provisioning Improve faculty and staff self-service technical support 6

7 Strategic Objective #3: Gain flexibility and improve capacity to respond to changing needs and technologies Increase business automation for identity creation and access management Develop identity lifecycle processes for non-traditional entities Improve ability to efficiently leverage, collaborate with and participate in external IT resources (e.g. cloud services and research) 7

8 Strategic Objective #4: Increase Cross University Collaboration Establish common policies, standards and processes for university identity and access management Develop a common IT service delivery approach across the university so that IT appears and operates as a single organization from the end user perspective Initiate a distributed shared service model for core services 8

9 Strategic Objective #5: Improve IT Security Posture and Regulatory Compliance Deploy more granular authorization based upon organizational and functional roles in Banner and other critical systems Automate provisioning and deprovisioning of student and employee credentials and access across all enterprise directories and applications Use multi-factor authentication (MFA) for power users responsible for the administration of critical systems or with broad access to personal identifiable information (PII) or other critical data 9

10 Milestones Winter 2015: Planning and Resource Allocation Winter 2016: Improved Password Self- Service Fall 2017: Single Standard Platform for Students and Employees Fall 2015: Reduced Number of Passwords & Cross-University Governance Fall 2016: Automated User Account and Access Management 10

11 11

12 For more information and to view the full report, go to the IAM Program website at For more information, contact Sarah Arnott, IAM Program Manager or