Metal Gear Solid World

Implementing a secure network access

By Jose Allan Tan

Joe Months after he left his employer if there was a violation Safer to his former employer. Weeks of research has identified as the culprit to a person access to the corporate intranet Joe with ID and password. Joe was a paid job in his new business so she was not aware of the event until he was approached by police investigators piece together.

The problem here is indifference, not Joe so you can let someone get your hands on network ID and password. It is more a failure of society to enforce network access policies for all those who have (or had) access to the system.

According to the "IDC Asia / Pacific Security Software Tracker biennially, 2H 2006," market software, I & AM in Asia-Pacific (excluding Japan) is estimated at approximately $ 190 million in 2006.

"Many business solutions I & AM were built as or implementations point here. Patchwork Other modules were then added to these implementations, such as changing conditions age. The market demand for more holistic solutions, I & AM and many vendors position their products to meet this need, "said Willie Low, senior market analyst at IDC Asia / Pacific.

Access denied

Uttam Majumdar, head of consulting and professional services to Locuz Enterprise Solutions based in Hyderabad, defined as I & AM business strategy to manage the lifecycle of identity information of its users and their access for safety and methods policies.

The point of I & AM solutions is to limit access to the resources of an organization who have legitimate access. Without your organization is at risk. The largest organization of other resources that need protection, and more complex systems and policies become.

As a business grows and adds more users who need access to the system employed by partners or suppliers, the greater the need for an automated system for processing requests for access and lifecycle management of these users. Delays in access to legitimate users naturally lead to lower productivity and the discontent in the workforce. In reverse the window of vulnerability increases, the company is required to revoke access rights, where appropriate.

Igor Janicijevic, Senior Security Architect Cybertrust, defines I & AM as a service company that combines business processes, technology and the political management of digital identities and specify how they are used to access resources. Activities include providing users, permissions management and password management and identity synchronization and accounts between different computer systems. "I AM & cuts different functions within the company, and increasingly in many cases the participation of organizations external, such as customers and suppliers, Janicijevic said.

According to Jerry Cox, CA's director of security solutions in Asia Pacific and I am solves the problem of threats to security is the combination of policies based on identity access policies. "Based on the role of an individual or rights to access the job description on mainframes, distributed operating systems, Web applications or even applications apply. The role of business is linked identity and identity is related to access, or authorization policy. Sometimes this is called the access control based on roles, "says Cox.

Creation I & AM policies and the implementation of these through a process of combining technology and costs money. But the key issue is not the cost of having the system, but the greater cost of not having one. I & AM can be like having an insurance policy. You think you're giving away the hard earned money to someone that gives you something you can not see or touch. But when an accident occurs Are you glad you took the policy to cover it.

Selling Proposition

One of the challenges facing CIO IY AM propose projects to develop the business model to justify the additional budget. I & AM initiatives are not typical of IT infrastructure projects. They become all business processes, policies and technologies aimed at providing a service throughout the company that most models of ROI can not handle. "From the perspective of the CFO, the issues to be considered are the costs of integration time, provide services and benefits associated with an enterprise-wide across multiple business units and corporate departments, "said Janicijevic.

The right approach

All I & AM initiative will involve complex business processes to scale. Sometimes the challenge is determining where to start.

Janicijevic suggests that organizations perform a strategic analysis of critical business processes and take into account operational factors and articulate the fundamental requirements for the management of enterprise-class access before considering any implementation of technology in particular.

"Too often, organizations are attracted to a focus on technology, which sometimes leads an attempt to change the way we do business to meet the capabilities and characteristics technology that is used. The technology must be implemented to meet business needs and not vice versa, "says Janicijevic.

Also it is important to ensure a good understanding of the strategic direction of the organization. I & AM investment can be significant and it is important to a clear understanding of the strategic directions of the business to ensure that the selected model will help support in the future. Unless the strategy and the solution must be flexible enough to adapt to new business and market realities in the future.

The best policy

GC Cox considered that one of the advantages of the I & AM is the ability to outsource the identity and access management policies. Points out that policies can be linked to business processes some specific disadvantages systems or applications. "This allows the policy defined around business needs and objectives of risk management rather than random post by a myriad of systems and application administrators who may or may not understand the value of the data, he added.

Politics, as minimum, must include systems and applications that are essential to the commercial success of the company or of data that is sensitive and can not be compromised.

The I & AM Enforcer

Have policies in place is one thing. Communicate and enforce them is another. PM I & policies protect the most important assets of a company must be defined and implemented at the highest level in a company. Governance Enterprise Reporting is mandatory in many parts of Asia. What began as a U.S. franchise now extends to the rest world. The government includes the protection of corporate data assets of an undertaking and a periodic review of implemented security controls is required. There can be seen the high profile of the prison officials that the U.S., but of course, local executives began to see the headlines in his way. The truth is that responsibility has become a fact of business life.

Challenge for Asia is the delegation of responsibility for corporate information society. Today what remains in the hands of system administrators who work traditional day for which they were hired and are accountable to.

The role of a Chief Security Officer (CSO) is poorly developed and addressed. Cox believes that things will change. Security must be considered as a matter of management reviews, not as an afterthought.

The CSO should be able to define and implement a security policy. If a new system or an application does not meet the security policy of a company, the OSC will the power to prevent the online course system until security concerns are addressed. It is one of the reasons why CSOs should not report through the IT line command, but directly to the CFO or CEO of a company.

"They are the guardians to ensure the company resources are adequately protected and not shall affect or enable systems to undertake to meet the development time or other, "said Cox.

Identity and best practices for managing access

Several companies have different priorities and approach for development probably unique of its I & AM strategy and execution. The path can be slightly different, but the similarities begin below.

Identify and respond to the needs and key business objectives, such as "hard" and "soft" benefits in the event business. In explaining the initiative in terms of business, and clearly explain what the proposed benefits business. If not presents a group of IT geeks, to avoid the technical elements of the proposed solution. Remember I & AM initiative is not an exercise in technology alone.

In any complex enterprise business processes are often much more obstacles for any successful implementation. Then the test business processes that offer not just technology. Often, the technology becomes easier to implement once the business process issues have been resolved.

Do not let anyone fool you in the sale of a sense of false expectations. Each company is unique and all solutions require complex customization integrating the new solution in the business process. It is important to implement an exceptions process, robust and effective management. Your organization may have existing applications that can work very well with the new solution. Some systems can not be integrated in a profitable manner for the process of proper exception handling necessary.

The technology and business processes change dynamically as businesses integrate into the global economy. Added uncertainty should not deter the implementation of the right solution today. The best way to protect against obsolescence is to implement consistent management practices across the enterprise. Standardize processes business is the best way to protect investments and offers a roadmap for the future, as yet undefined, changes.

The guide post for any complex task, including I & AM, is the affairs of the company. If we follow this course, your identity and access management strategy must provide value throughout the organization.

I & AM is not a point solution. It is a strategy. And the more successful I & AM strategies are those with a holistic approach strategy formation. It can be implemented in several phases, but the aim should be the entire company in mind.

Certainly, external parties should be involved. The choice of provider is a good practice to evaluate the company's business objectives and the ability of a company to implement an I & AM solution under these objectives.

Cox offers a twist I & AM at an age old advice: choose a supplier that has the ability to provide a complete solution – management of identity (or activation), access management (or application) and check everywhere.

"The company should be able to provide these functions the mainframe way through distributed operating systems to custom applications and Web services. Also look for a company that is not to use the software to try to sell more hardware and has a solution sufficiently diversified that they can focus on the needs of your business not only selling your product. There is a large number of them, "says Cox.

About the Author

Jose Allan Tan is a technologist-market observer based in Asia. A former marketing director for a storage vendor, he is today director of web strategy and content director for Questex Asia Ltd. He also served as senior industry analyst for Dataquest/Gartner and was at one time an account director for a regional PR agency.

Oberon’s Adapter Door for Model 1052-00 for Planned Migration to Cisco 1140 Wireless Access Point

New USB Wireless G Access Point AP Point AP Adapter USA $19.98

Delta 31-285 Long Extension Sanding Adapter Access NIP $19.99

Mini Travel Wireless N WiFi Network Router/Access Point/Client Adapter+Antenna $24.95

Valcom microphone adapter- Provides microphone access t $104.99

AC Adapter For D-Link AirPremier DWL-3500AP Wireless Access Point Power Supply $18.99

OEM – New In Box Harman Pro Group Power Supply Adapter DigiTech Vocalist Access $24.99

Lot of 4, access wireless network and free Internet, USB WiFi Adapter Easy Setup $57.50

LINKSYS WIRELESS ACCESS POINT WAP4400N ROUTER w AC ADAPTER & ETHERNET CORD $69.95

CAC Carrier Access 003-03690100 FXS Adapter Card $9.99

Lot of 15 Aruba AP60/AP61 Wireless Access Point with 11 Power Adapters $99.00

Koolatron Multi-Purpose Adapter 110AC to 12 Volts DC ( Model AC-15) $29.99 Koolatron specializes in portable 12-volt devices, such as coolers, freezers, or microwaves, that plug into a car’s cigarette lighter or other 12-volt source. With the Koolatron 110-volt adapter, you can use these same devices wherever you have access to a 110-volt outlet. Now your camping fan can double as a hotel fan when on the road, or your portable cooler can keep things from heating up once …

Universal MP3 Car Charger with 2 USB Adapters $11.95 PHILIPS G2G202 UNIVERSAL MP3 CAR CHARGER WITH 2 USB ADAPTERS…

PLATE ADAPTR A.BRS 3-1/2 [Misc.] $2.57 “MAG SECURITY” ADAPTER PLATE 2-1/8″ bore 3-1/2″ OD Concerts from 2-3/8″ to 2-3/4″ backset Includes inside and outside plates Steel Antique brass finsih Carded/2…

Wireless IP Pan/Tilt/ Night Vision Internet Surveillance Camera Built-in Microphone With Phone remote monitoring support(Black) $46.88 Specs: Image Compression Format: M-JPEG standard Image Resolution: VGA(640×480) / QVGA(320×240) Sensor: 1/4 inch CMOS, 300,000 Pixels Light frequency: 50Hz, 60Hz or Outdoor Audio compression: ADPCM Data rate: 802.11b: 11Mbps (Max.), 802.11g: 54Mbps (Max.) Ethernet: One 10/100Mbps RJ-45 Viewing angle: 67? Horizontal Rotating Angle: 0~270? Vertical Rotating Angle: 0~120? Alarm Mode: motion detection…

GE 50759 6-Grounded Outlet In-Wall Adapter, White $3.49 6 outlets 3 transformer-spaced outlets Transformer-ready UL listed Ideal for home offices home theaters Designed to cover only an existing grounding duplex wall outlet…

Mr. Heater F276172 Propane One Pound Tank Refill Adapter $8.49 Refill Adapter, Allows You To Refill A LB Cylinder From A 20 LB Tank….

WaterPik FLA-220 Power Flosser, Battery Powered (Colors May Vary) $4.95 Easy and Effective Flosser Introducing new Water Pik Power Flosser, a more convenient and easy to use floss. This flosser is clinically proven to be beneficial for increased gum health. It comes with a flexible nylon tip thatÆs gentle enough to use daily. Prolonged use of this flosser prohibits bleeding gums, inflammation, plaque and other gum diseases. Clinically proven as effective Help…

SVAT CV502-4CH-002 Web Ready 4 Channel H.264 500GB HDD DVR Security System with Smart Phone Access and 4 Indoor/Outdoor Hi-Res Night Vision CCD Surveillance Cameras $647.99 Feature-rich and easy to use, the SVAT CV502-4CH-002 complete DVR security system has been specifically designed with the do-it-yourself consumer in mind. This kit includes a four channel DVR with a built-in 500GB hard drive, four indoor/outdoor hi-res night vision CCD cameras, and all the accessories needed to start monitoring your property immediately. In addition, the interactive coaching menu …

Hair Wash Basin Inflatable Ez Shampoo For Disabled $16.99 Hair Wash Basin Inflatable Ez Shampoo For Disabled is an inflatable basin designed for comfortable and convenient in-bed shampooing. The special design of basin hair wash provides secure, form-fitting support that cushions the head & shoulders and now includes a built-in inflatable headrest. The daily living aid personal care product is made of heavy-duty vinyl with custom drain stopper at the bas…

Vtech – InnoTab Interactive Learning Tablet – Pink $69.99 Take learning to the next level with the InnoTab Interactive Learning Tablet by VTech! This multi-media tablet combines interactive reading, learning games, creative activities, and a rich collection of applications into a sleek and durable toy that kids will want to play with. Featuring a 5″ color touch screen and tilt-sensor, kids can tap, flick, drag, and pat their way to learning fun. The fun …