register for 2024
May 28-31, 2024 | Aria Resort & Casino, Las Vegas, NV
register for 2024
2023 Event | Session Video
New Approach to IGA Governance: Combining Identity, Device and Target governance into one – IDT

Speaker: Vladislav Shapiro – President – Costidity Inc.
Date: Thursday, June 1, 2023
Location: ARIA Resort & Casino | Las Vegas, NV

Description: Every organization has a bunch of disjoint governance efforts named after this element run by different groups: Identity Governance (IAM), Data Governance (Data Management), Application Governance (application owners), End Point governance (hardware group), Network Governance (Network Administrators), etc. We state that this current system is inefficient due to, on one side, existence of many uncovered cases (one governance authority thinks that another one covers it), which creates security holes, and on the other side, too many contradictory regulations preventing people to do their job and pushing them to deviate. We propose to change focus from managing individual elements separately (single points) to governing triplets (identity+device+target) as the subject of controls. We propose to create “allowed triplets”, which contains identity, device path and target path. This way, the triplet will become a subject of attestation, risk measurements, rules, reports and other controls instead of each element individually, which brings to better management and reduction of cost, unnecessary policies and combining efforts of different enterprise groups. The basic of such collaboration is identity fabric, i.e., interwoven relationships between people-centric (identity), hardware-centric (end point, server, firewall and other devices protection) and resource-centric (applications, data, etc.) ordinances and rules.

Follow us on
identity everywhere
Stay informed on the latest event updates
Identiverse: The Identity Universe
hosted by CyberRisk Alliance
register now