What exactly is Identity and Access Management in our business and security industry? Identity management is the set of business processes, and a supporting IT infrastructure, that provides identity-based access control to systems and resources in accordance with established policies. Today, it’s more about controlling access, less about managing identities; use words like:
- Controls, access control, management, verification, authorization
- Credentials consist of usernames (something you have) and passwords (something you know)
- Credentials are submitted to authenticate to Information Resources
|
![]()
|
- Strong authentication is required for remote access and for accessing sensitive information
- Once authenticated, access privileges determine what a user can see and do in the application
- Authorization level is determined by a user’s profile stored in a repository
Identity and access management (IAM) is the entire aspect of maintaining a person’s complete set of information, spanning multiple identities and establishing the relationship among these various identities with the goal of improving data consistency, data accuracy, and data systems security in an efficient manner. Newcastle Consulting will assist its clients extend business services, improve efficiency and effectiveness, and plan for better governance and accountability.
Newcastle Consulting views IAM holistically and views it as interaction among people, process, and technology. Current trends in the security industry – especially at the Federal & State level – are deploying more systems that are interoperable. HSPD-12 asks for “A secure and interoperable Personal Identity Verification (PIV) card to provide the attributes of security, authentication, identity verification, trust, and privacy to a commonly accepted identification card for Federal employees and contractors.” It calls for a single smartcard for both physical and logical access to Federal Government Facilities and IT systems. During this time of war and terror, it is important that we establish certain types of technological advances to ensure that our most valuable National Security assets around the nation and the world are kept safe and secure and to guard against any unauthorized access.
Newcastle Consultings’ experts will advise and in some cases administer implementation of an agency’s/corporation’s HSPD-12 solution. In this process our security professionals will give special attention to management due to its (1) importance to the agency’s mission, (2) high development, operating and maintenance costs, and (3) significant role in the agency’s/corporation’s day-to-day operation. It is absolutely imperative that system integrators work collaboratively with the agency to provide administrative services to ensure that individual tasks proceed through a systematic sequence of initiating, planning, executing, controlling, and closing.
|
|
