Skip to main content

Converged Identity Platforms consolidate features found in other technologies - SC Media

(Adobe Stock)
The lifecycle of technology innovation and adoption is circular. Point solutions and technologies are developed to solve a specific problem. Over time, these point solutions evolve, blend, and merge to help solve a larger overarching challenge.
Identity security is currently going through the blending cycle as security leaders recognize the need to combine capabilities such as identity governance, privileged access, and application governance to reduce threat landscapes and simplify competing demands for better security, authentication, and access. As they have, converged identity platforms (CIPs) have been introduced to help organizations better manage their identity security programs.
In fact, by next year, 70% of new access management, governance, administration, and privileged access deployments will be converged platforms, Gartner reports

Historically, many technology vendors have built out product suites to address a single overarching challenge. In this case, identity security. These suites have been a collection of disparate technologies and either branded or bundled together due to their commonalities, providing support for gaps in the other products.
Suites can have their drawbacks as they are often a set of products that simply share a brand name. The different software products may have been built by different companies and brought together via a merger or acquisition. Suites often have the same challenges as point products though. Upgrades may be delivered at different times, impacting other applications. Compatibility and integration between solutions could be lacking, preventing the use of automation, segregation of duty discovery, and more. Management consoles and reporting capabilities could be separate, necessitating the need for increased management or reliance on manual processes. In short, suites often hinder the advancement of security programs.
Converged identity platforms eliminate many of the challenges commonly found with solution suites. A CIP is a single solution that supports multiple identity security features and capabilities. Every feature shares the same underlying code, processes, user interface, and reporting, providing a seamless experience for all administrators and end users. CIPs offer a variety of capabilities that vary widely depending on the vendor and the initial problem they were solving (e.g. IGA, PAM, third-party governance, etc.).
By consolidating all of the core features, governance, and reporting, organizations are able to increase security while lowering implementation and operational costs. Centralized reporting helps eliminate the challenges around audits and providing compliance with requisite regulations or industry mandates on a continuous basis.
At the end of the day, a CIP should help you:
Adopting a CIP should help organizations simplify their IT and security stacks while providing strong identity security governance. Reducing the number of different platforms and technologies needing management speeds the identification of anomalous activity or misconfigured access. By consolidating capabilities and maintaining as much flexibility as possible, organizations can simplify management, and increase productivity and ROI, while future proofing their security program.

Attackers leveraging the ‘no-reply@dropbox[.]com’ domain sent emails with a Dropbox-hosted PDF to employees using the Darktrace SaaS environment.

Roku had accounts from 15,363 customers compromised following a credential stuffing attack between late December and late February.

Database was touted by leaker ‘Ddarknotevil’ to contain 3,800 Okta customers’ full names, user IDs, email addresses, phone numbers, company names, and office addresses, among others.

On-Demand Event
On-Demand Event

By clicking the Subscribe button below, you agree to SC Media Terms and Conditions and Privacy Policy.

Copyright © 2024 CyberRisk Alliance, LLC All Rights Reserved. This material may not be published, broadcast, rewritten or redistributed in any form without prior authorization.
Your use of this website constitutes acceptance of CyberRisk Alliance Privacy Policy and Terms & Conditions.

source

Comments

Popular posts from this blog

Apple wins over AliveCor antitrust lawsuit ov

Apple has finally got a win over the ongoing legal battle with AliveCor, the US-based medical device company over the Apple Watch's heart monitoring technology. AliveCor had accused the tech giant for limiting third-party access to specific heart rate data which is collected by the Apple Watch, claiming that it was an anti-competitive move. However, a judge in a US District Court has ruled completely in favour of Apple, stating that the company is not required to stand trial for the lawsuit In the 9to5Mac report, Apple's spokesperson was quoted saying, “AliveCor’s lawsuit challenged Apple’s ability to improve important capabilities of the Apple Watch that consumers and developers rely on, and today’s outcome confirms that is not anticompetitive.” “We thank the Court for its careful consideration of this case, and will continue to protect the innovations we advance on behalf of our customers against meritless claims,” it added. The case dealt with upgrades to Apple W

Technology industry to combat deceptive use of AI in 2024 elections - Stories - Microsoft

February 16, 2024 | Microsoft Source MUNICH – February 16, 2024 – Today at the Munich Security Conference (MSC), leading technology companies pledged to help prevent deceptive AI content from interfering with this year’s global elections in which more than four billion people in over 40 countries will vote. The “Tech Accord to Combat Deceptive Use of AI in 2024 Elections” is a set of commitments to deploy technology countering harmful AI-generated content meant to deceive voters. Signatories pledge to work collaboratively on tools to detect and address online distribution of such AI content, drive educational campaigns, and provide transparency, among other concrete steps. It also includes a broad set of principles, including the importance of tracking the origin of deceptive election-related content and the need to raise public awareness about the problem. The accord is one important step to safeguard online communities against harmful AI content, and builds on the indiv