Management Briefing - Identity Governance & Administration

Management Briefing: Identity Governance & Administration

Must post first.

Subscribe

Write a 3 to 5 paragraph briefing paper that identifies and explains the three most important reasons why Sifers-Grayson should invest in an Identity Governance & Administration solution instead of continuing to use the existing paper-based process for requesting and issuing computer accounts.

Your audience is a mixed group of managers from across Sifers-Grayson's operating areas (company HQ's, Engineering, Finance & Accounting, Program Management, Sales & Marketing). Some of these managers are familiar with the importance of separation of duties and least privilege but most are not. One or two of the managers might know the definition for RBAC. Your briefing paper needs to address these information needs as well as discussing why information should be labeled as to its sensitivity ("classification") and ownership.

Provide in-text citations and references for 3 or more authoritative sources. Put the reference list at the end of your article.

 

PLEASE USE REFERENCES BELOW

 

The InfoSec Handbook https://link.springer.com/content/pdf/10.1007/978-1-4302-6383-8.pdf

Read pp 29-35

Read Chapter 4

Read Biometrics pp 297-303

Role based access control https://csrc.nist.gov/projects/role-based-access-control

Common Sense Guide to Mitigating Insider Threats (Introduction, Practice 7, Practice 8 & Practice 10 https://resources.sei.cmu.edu/asset_files/TechnicalReport/2012_005_001_34033.pdf

 

Identity Governance and Administration

Identity and Access Management (NIST NCCOE) https://www.nccoe.nist.gov/sites/default/files/library/fact-sheets/es-idam-fact-sheet.pdf

Definition: Governance https://www.isaca.org/Pages/Glossary.aspx?tid=1443&char=G

Identity Governance and Administration (Article) https://www.csoonline.com/article/3113451/identity-governance-and-admin-beyond-basic-access-management.html

Privilege Management

Privileged Account Management (NIST NCCOE) https://www.nccoe.nist.gov/sites/default/files/library/fact-sheets/fs-pam-fact-sheet.pdf

Enterprise Entitlements Management: Moving beyond authenticationhttps://www.zdnet.com/article/enterprise-entitlements-management-moving-beyond-authentication/

Four Best Practices for Passing Privileged Account Audits (Beyond Trust) https://www.beyondtrust.com/assets/documents/bt/wp-four-best-practices-for-passing-privileged-account-audits.pdf