Operating environments are spiraling outwards to accommodate business demands for mobility, multi-device access from remote locations and real-time information. The ability to secure our core asset – information – and manage how this is accessed and by whom, is a major issue facing information security management today. Mobile collaboration and cloud computing have brought identity and access management to the fore as a means of tightly coupling people, identities and their roles to classified information.<\/p>\n
Securing information is business critical<\/strong> What\u2019s more, as the value of information is recognised by governing and regulatory bodies, legislation and the need to comply with certain standards around the storage and access of data will be imposed, forcing organisations to reconsider lax controls around information.<\/p>\n According to Samresh Ramjith, chief technology officer for Dimension Data Security Solutions South Africa, by introducing an identity and access management (IAM) strategy that takes into consideration the evolving and advancing nature of technology, an organisation is able to proactively implement the tools required to keep pace with legislation and compliance issues \u2013 and maintain good security practice.<\/p>\n How does access control fit in?<\/strong> Since one can\u2019t very well do away with the human aspect of the business, it becomes the task of management, enabled through technology, to control the flow of information through the organisation.\u00a0 \u201cThis is where access control comes to play such an important role in business, \u201csays Ramjith. \u201cBy tightening access to information, you lower the risk associated it.\u00a0 But the key is to do this judiciously so as not to impede business agility.\u201d<\/p>\n Finding the Balance<\/strong> \u201cThis is becoming even more critical with the introduction of things like mobility and cloud.\u00a0 Both of these technologies are designed to make information more readily available and enable a remote workforce. But as the lines of your \u2018secure\u2019 environment become blurred, security risks skyrockets\u201d says Ramjith. Improving business<\/strong> \u201cUnfortunately, given this disparity, there just isn\u2019t a single product which will provide that mythical \u2018silver bullet\u2019, and an array of tools may be required,\u201d cautions Ramjith.\u00a0 \u201cTo get the kind of visibility and level of integration required, most businesses will need to invest in consulting services.\u00a0 But the value this will add in terms of optimising overall operations is phenomenal.\u201d<\/p>\n The streamlining of business processes and workflows, introduction of automation, sanitising of databases and consolidation and integration of information all equate to an improved, well-oiled and efficient business machine.\u00a0 This machine will be ideally positioned to leverage the full potential of future developments in cloud, mobility and convergence – equating to real competitive advantage.<\/p>\n","protected":false},"excerpt":{"rendered":" Operating environments are spiraling outwards to accommodate business demands for mobility, multi-device access from remote locations and real-time information<\/p>\n","protected":false},"author":28,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-48","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"_links":{"self":[{"href":"https:\/\/companies.mybroadband.co.za\/dimensiondata\/wp-json\/wp\/v2\/posts\/48","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/companies.mybroadband.co.za\/dimensiondata\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/companies.mybroadband.co.za\/dimensiondata\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/companies.mybroadband.co.za\/dimensiondata\/wp-json\/wp\/v2\/users\/28"}],"replies":[{"embeddable":true,"href":"https:\/\/companies.mybroadband.co.za\/dimensiondata\/wp-json\/wp\/v2\/comments?post=48"}],"version-history":[{"count":2,"href":"https:\/\/companies.mybroadband.co.za\/dimensiondata\/wp-json\/wp\/v2\/posts\/48\/revisions"}],"predecessor-version":[{"id":58,"href":"https:\/\/companies.mybroadband.co.za\/dimensiondata\/wp-json\/wp\/v2\/posts\/48\/revisions\/58"}],"wp:attachment":[{"href":"https:\/\/companies.mybroadband.co.za\/dimensiondata\/wp-json\/wp\/v2\/media?parent=48"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/companies.mybroadband.co.za\/dimensiondata\/wp-json\/wp\/v2\/categories?post=48"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/companies.mybroadband.co.za\/dimensiondata\/wp-json\/wp\/v2\/tags?post=48"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
\nThe reality is that while a business may be able to recover from the loss of buildings and capital equipment, the damage done when information is lost can be irrevocable.\u00a0 The impact of stolen intellectual property could be catastrophic, and the loss of reputation if sensitive information were to be leaked, or even sold, may be something a business may never be able to overcome.<\/p>\n
\nThe answer is simple.\u00a0 The most secure building on earth is rendered obsolete if you leave the door wide open.\u00a0 \u201cBusinesses are coming to terms with the fact that people are their biggest security threat,\u2019 says Ramjith,\u00a0\u00a0 \u201cIn many instances our people may be unaware of the full extent of the risks they expose the business to with irresponsible behavior. Even when they are, people can still be negligent. They can also be gullible, vulnerable to the acquisition of information under false pretenses such as phishing and similar scams.\u00a0 And finally, they can be outright malicious, wishing to harm the organisation or profit from the sale of sensitive information.\u201d The converse holds true as well \u2013 organisations that engage their people as active participants in information security and risk management strategies are often able to deliver higher levels of consistent compliance and conformance to security standards.<\/p>\n
\nOrganisations need to strike a balance between agility and vulnerability. \u201cIAM, when implemented correctly, will ensure that the right information is available to the right people timeously.\u00a0 Information should be enough for individuals to perform their roles, but without putting the business under undue risk,\u201d explains Ramjith.
\nThis is where information security becomes a business enabler. For these kinds of solutions to work optimally, the organisation needs to have a deep understanding of how their business operates, who performs what role and how information flows through these workflows.\u00a0 With this insight in hand, role-based access becomes possible.<\/p>\n
\n\u201cAccess control, through role-based profiling is no longer about accessing a server with an encrypted\u00a0 password, but building the right security profile for an individual that allows them, wherever they are and what ever application they are working on to access the information they need to do their job.\u00a0 This ability to creating a free workforce is one of the key concepts driving IAM.<\/p>\n
\nThe organisation will need to make a commitment to the process and take a long hard look at its architecture, system engineering, processing and of course workflows.\u00a0 It also calls for a need to clean up the information environment which is a huge challenge in diverse, disparate and sprawling informational estates.<\/p>\n