user access certification
 

The Alternative to Costly IDM Deployments

The Access and Control Benefits of Identity Management Without the High Cost

Identity Management (IDM) deployments are commonly touted as the only way to achieve strong control and compliance benefits related to user access rights and entitlements. While IDM solutions are an effective option for some companies, the issues of high cost and complicated deployments should not be ignored. A typical IDM deployment can range from $300,000-$800,000 or more for software licensing alone. Gartner estimates that labor and consulting costs are 5x or more of the software costs. Some of the reasons that project price tags often grow to over $3,000,000 include:

  • Countless meetings to gain corporate-wide "Buy-In" before the implementation begins. The time spent on these meetings is often not tracked or accounted for.
  • High amount of customizations are needed to connect to data sources. One IDM vendor was asking for $75,000 for each connector they create!
  • Countless custom workflows require months of professional services to complete.
  • Improper planning leads to wasted time and effort.

According to Deloitte, nearly 50% of Identity Management purchases become "shelfware", undeployed software due to the overwhelming project complexity.

A Better Answer

The Access Auditor solution from Security Compliance Corporation is an Identity Auditing (IDA) tool to help control user access rights and privileges. By focusing on the access rights and not user provisioning, Access Auditor is able to provide a consoliated view of user access in a single repository.

A full deployment of Access Auditor can be completed in a matter of days

Access Auditor works in combination with any provisioning solution to provide the following benefits:

  • Automate the user access certification process
  • Simplify and improve compliance with role-based certifications and management.
  • Consolidated view of user access rights across all applications
  • Automated alerting to changes in user privileges
  • Alerting and reporting to separation of duties (SOD) violations
  • Easy-to-use user recertification / attestation of access rights through a web browser
  • Real-time and historical access rights reports
  • Reference tool for help desk users to manage employee transfers and terminations

To find out more about how Access Auditor can help you gain control over your user access rights at a fraction of the cost of Identity Management deployments, contact us today!

 

The PMI GroupCase Study: PMI Group, Inc - Simplifying Compliance Auditing with Access Auditor

Download Access Auditor Brochure Now!

 


 

Upcoming Events

October 20-24, 2008 MISTI - 28th Annual IT Audit and Controls

  • Session on Auditing Access Rights
  • Panel Discussion on Fraud Detection and Prevention
  • Session on Web Application Security

March 9-11, 2009 MISTI - InfoSec World Conference

  • Case Study on Effective Role Management
  • Case Study on Network Access Control

March 12, 2009 MISTI - The Summit on IT Governance, Risk and Compliance

  • IT/GRC Summit Chairperson