Closed Loop Compliance: Achieving closed loop compliance with Brainwave integration with ForgeRock...

Take control of your identities

Cyril GOLLAIN, General Manager – BrainwaveForgeRock Summit – June 2013

Brainwave Proprietary and Confidential Information

2010Brainwave creation1st patent

2011Product RTMInnovation award

201220+ customersGartner IAG MagicQuadrant

2013KuppingerCole Leadership CompassGartner Cool VendorInternational Biz Dvp25+ customers

Brainwave

2

A market leader in Identity Intelligence

Brainwave Proprietary and Confidential Information – All Rights Reserved.

Second law of thermodynamics

Entropy never decreases


The User Entropy: Access rights everywhere


Closing the Loop for Account Management

Request

ProvisionControl

Remediate

5

PLAN

DOCHECK

ACT


Control?

6


Our goal: assess & mitigate the User risks

7

Who they are

What theycan do / what

they have doneWhat they have

been allowed to do


Identity Ledger: Agnostic Data Model

8


Architecture

Information System

Cloud

Company Policies,

Regulations…

Reports + Insight:• What are my risks?• What needs to be fixed?• Am I compliant?


Integration with OpenIDM

10

IT Resources

Manual operationsAutomated provisioning

Accounts and fine-grained access rights information

Identities and accessrights assignments

• Access rights reconciliation• Theoretical rights control• Account Recertification process• Remediation process• Controls & Insight

Automated / manualremediation actions

HR and organization-relatedinformationAccess logs


How it works

Brainwave Architecture


iGRC analytics client

Brainwave Architecture

12

RDBMS

iGRC analytics server

Equinox OSGI batch runtime

XML

Conf

igur

atio

n ex

port

……………………

Consultant

J2EE Web ContainerOSGI Equinox

iGRC Portal

Eclipse RAP

• Page rendering• Data Access (ODA)• Birt Reporting engine• Activiti Workflow engine

iGRC Web Application

End User

HTT

P /

HTM

L /

Ajax


Business oriented web application


Other ways to leverageBrainwave


« Pull » approach: REST services

Query the Brainwave datawarehouse and instantly publish REST services

23


« Push » approach: Emailing campaign

Trigger emails messages / reports based on control results, review results…

24


OpenIDM Frontend?

25


Thank you!

Cyril Gollain, + 33 6 13 78 52 04, [email protected]

26

Closed Loop Compliance: Achieving closed loop compliance with Brainwave integration with ForgeRock...

Technology

Transcript of Closed Loop Compliance: Achieving closed loop compliance with Brainwave integration with ForgeRock...