Thursday, July 8, 2010

This is what I am talking about....!

This article succinctly captures the business need for developing discipline around the management of identity data, and contextualizes the security posture and excess risk when it is not done.

The Intersection of Business Intelligence and Identity Management: Identity Governance

Wednesday, April 7, 2010

Beware the Enemy

Does your organization have some set of processes that live on paper, or in spreadsheets, or some other "out of band" method of administration? And you, the Directory Manager are trying to explain why there are some interesting number of accounts in your directory that are non-conforming in some way? Don't have password expiration, or don't have a long enough password?
You need a strategy for controlling the data that governs these exceptions; maybe even would like to to know the who what where of what is governing them. A reasonable request. You started looking into it. You found some things, but others eluded you. Time and effort constraints caused the pertinence of these issue to slip off your radar.

Then the auditors came...

They gave your boss a report. It was full of words like "non-conforming", "out of standards", "in violation of" and the like. Sheesh! Your boss sends you the 6:00AM email that asks what this is all about. How can it be??

Wednesday, February 17, 2010

Wait - isn't this admitting defeat?

This is a curious turn. I guess Novell is dropping the idea that one day it will conquer Sharepoint with Novell Teaming and Conferencing....

Microsoft, Novell collaborate on LDAP access to SharePoint