Identity-aware Infrastructurepublishingext.dir.texas.gov/portal/internal/resources... · SailPoint...

23
Identity-aware Infrastructure Identity at the Center of Security, Compliance & IT Operations Darran Rolls, CTO & CISO

Transcript of Identity-aware Infrastructurepublishingext.dir.texas.gov/portal/internal/resources... · SailPoint...

Page 1: Identity-aware Infrastructurepublishingext.dir.texas.gov/portal/internal/resources... · SailPoint at a Glance World’s largest, dedicated IAM vendor • Based in Austin Texas, USA

Identity-aware InfrastructureIdentity at the Center of Security, Compliance & IT Operations

Darran Rolls, CTO & CISO

Page 2: Identity-aware Infrastructurepublishingext.dir.texas.gov/portal/internal/resources... · SailPoint at a Glance World’s largest, dedicated IAM vendor • Based in Austin Texas, USA

SailPoint at a Glance

World’s largest, dedicated IAM vendor• Based in Austin Texas, USA• Operations in 15 countries• 300 Partners worldwide• Customers in every vertical

The leader in identity governance

Page 3: Identity-aware Infrastructurepublishingext.dir.texas.gov/portal/internal/resources... · SailPoint at a Glance World’s largest, dedicated IAM vendor • Based in Austin Texas, USA
Page 4: Identity-aware Infrastructurepublishingext.dir.texas.gov/portal/internal/resources... · SailPoint at a Glance World’s largest, dedicated IAM vendor • Based in Austin Texas, USA

Identity Governance market leadership

GartnerMagic Quadrant for IGA, 2017

ForresterWave for IMG, 2016

KuppingerCole Report, Leadership Compass, 2017

Page 5: Identity-aware Infrastructurepublishingext.dir.texas.gov/portal/internal/resources... · SailPoint at a Glance World’s largest, dedicated IAM vendor • Based in Austin Texas, USA

Evolution #1Delegate

Administration

Generation #2Automated

Provisioning

20041998 2018

Generation #3Identity

Governance

20 Years of Identity Management Evolution

Page 6: Identity-aware Infrastructurepublishingext.dir.texas.gov/portal/internal/resources... · SailPoint at a Glance World’s largest, dedicated IAM vendor • Based in Austin Texas, USA

Evolution #1Delegate

Administration

Generation #2Automated

Provisioning

20041998 2018

Generation #3Identity

Governance

20 Years of Identity Management Evolution

ü Business user focused

ü Full lifecycle

ü Embedded controls

ü Securing & managing

all access

Page 7: Identity-aware Infrastructurepublishingext.dir.texas.gov/portal/internal/resources... · SailPoint at a Glance World’s largest, dedicated IAM vendor • Based in Austin Texas, USA

Copyright © SailPoint Technologies, Inc. 2017. All rights reserved.

Securing & Managing Access

Page 8: Identity-aware Infrastructurepublishingext.dir.texas.gov/portal/internal/resources... · SailPoint at a Glance World’s largest, dedicated IAM vendor • Based in Austin Texas, USA

Securing & Managing Access

People Access Data

Unstructured

Structured

ApplicationPeople

Applications

Devices

Authentication

Bio-Metric

WebBased

SAMLBased

PasswordBased

PKIBased

OAuthBased

Authorization

ApplicationSpecific

AttributeBased

SystemDefined

VaultedCreds

GroupBased

RoleBased

Page 9: Identity-aware Infrastructurepublishingext.dir.texas.gov/portal/internal/resources... · SailPoint at a Glance World’s largest, dedicated IAM vendor • Based in Austin Texas, USA

Identity & Access Governance

People Access Data

Bio-Metric

WebBased

SAMLBased

PasswordBased

PKIBased

OAuthBased

ApplicationSpecific

AttributeBased

SystemDefined

VaultedCreds

GroupBased

RoleBased

Who has Access to What and Why…

Page 10: Identity-aware Infrastructurepublishingext.dir.texas.gov/portal/internal/resources... · SailPoint at a Glance World’s largest, dedicated IAM vendor • Based in Austin Texas, USA

Identity & Access Governance

People Access Data

Bio-Metric

WebBased

SAMLBased

PasswordBased

PKIBased

OAuthBased

ApplicationSpecific

AttributeBased

SystemDefined

VaultedCreds

GroupBased

RoleBased

Automation, Delegation and Self-service

Page 11: Identity-aware Infrastructurepublishingext.dir.texas.gov/portal/internal/resources... · SailPoint at a Glance World’s largest, dedicated IAM vendor • Based in Austin Texas, USA

Identity & Access Governance

People Access Data

Bio-Metric

WebBased

SAMLBased

PasswordBased

PKIBased

OAuthBased

ApplicationSpecific

AttributeBased

SystemDefined

VaultedCreds

GroupBased

RoleBased

Visibility & Control = Identity Governance

Page 12: Identity-aware Infrastructurepublishingext.dir.texas.gov/portal/internal/resources... · SailPoint at a Glance World’s largest, dedicated IAM vendor • Based in Austin Texas, USA

Identity

Governance

Program Objectives

Page 13: Identity-aware Infrastructurepublishingext.dir.texas.gov/portal/internal/resources... · SailPoint at a Glance World’s largest, dedicated IAM vendor • Based in Austin Texas, USA

NIST 800-53 Control Groups

✔

✔

✔

✔

✔

✔

✔

✔

✔

✔

Page 14: Identity-aware Infrastructurepublishingext.dir.texas.gov/portal/internal/resources... · SailPoint at a Glance World’s largest, dedicated IAM vendor • Based in Austin Texas, USA

Identity Governance Program Objectives

Enabling efficient & accurate user access

Protecting access to applications and data

Staying compliant amidst mounting regulations

Cloud and on-premise applications and data…

IncreasedProductivity

Lower Security Risk

SustainableCompliance

Page 15: Identity-aware Infrastructurepublishingext.dir.texas.gov/portal/internal/resources... · SailPoint at a Glance World’s largest, dedicated IAM vendor • Based in Austin Texas, USA

Objective #1: Increased Productivity

• Joiner MOVER & leaver controls…

• Fine-grained access control…

• Delegated administration…

• End-user self-service…

IncreasedProductivity

Page 16: Identity-aware Infrastructurepublishingext.dir.texas.gov/portal/internal/resources... · SailPoint at a Glance World’s largest, dedicated IAM vendor • Based in Austin Texas, USA

Objective #2: Lower Security Risk

• Understanding access risk…

• Password management…

• File & access governance…

• De-provisioning & security response…

Lower Security Risk

Page 17: Identity-aware Infrastructurepublishingext.dir.texas.gov/portal/internal/resources... · SailPoint at a Glance World’s largest, dedicated IAM vendor • Based in Austin Texas, USA

Objective #3: Sustainable Compliance

• Access reviews…

• Detective and preventive policy controls…

• Data ownership & responsibility…

• Reporting & analytics…

SustainableCompliance

Page 18: Identity-aware Infrastructurepublishingext.dir.texas.gov/portal/internal/resources... · SailPoint at a Glance World’s largest, dedicated IAM vendor • Based in Austin Texas, USA

Identity-aware Infrastructure

Page 19: Identity-aware Infrastructurepublishingext.dir.texas.gov/portal/internal/resources... · SailPoint at a Glance World’s largest, dedicated IAM vendor • Based in Austin Texas, USA

Copyright © SailPoint Technologies, Inc. 2017. All rights reserved.

Page 20: Identity-aware Infrastructurepublishingext.dir.texas.gov/portal/internal/resources... · SailPoint at a Glance World’s largest, dedicated IAM vendor • Based in Austin Texas, USA

Understanding Key Relationships

DataEntitlementAccountIdentity

Darran Rolls

[email protected]

Group=Accounting

\\Shares\HR(read)

\\Shares\Corp(read write)

Group=Users \\Shares\doc3(read)

RACF1232123

SYSDBA

Data Profile1

Data Profile2

SYSOPER Data Profile3

Identity Account Entitlement Data

Page 21: Identity-aware Infrastructurepublishingext.dir.texas.gov/portal/internal/resources... · SailPoint at a Glance World’s largest, dedicated IAM vendor • Based in Austin Texas, USA

SIEM & DLP

Applications & Infrastructure

Mobile DeviceManagement

Identity-enabled Infrastructure

Integrated ResponsiveEcosystem

DataGovernance

User Behavior Analysis

PrivilegedUser Mgmt.

GRC

IT ServiceManagement

Shared Context& Actions

Security Infrastructure Identity Governance & AdministrationOperations Infrastructure

Page 22: Identity-aware Infrastructurepublishingext.dir.texas.gov/portal/internal/resources... · SailPoint at a Glance World’s largest, dedicated IAM vendor • Based in Austin Texas, USA

EndpointManagement

Access Management

Privileged Account Mgmt.

SIEM

Systems Management

Service Management

GRC

Enterprise Mobility Management

User Behavior Analysis

SailPoint Open Identity Platform

Page 23: Identity-aware Infrastructurepublishingext.dir.texas.gov/portal/internal/resources... · SailPoint at a Glance World’s largest, dedicated IAM vendor • Based in Austin Texas, USA

23

[email protected]


SailPoint Direct Connectors

SailPoint Direct Connectors

INTERMOT - aADVANCED - MOTORS IAM SERIES H6 MODEL · pag. 88 IAM rev. 00 TECHNICAL DATA H6 MODEL IAM 2200 H6 IAM 2500 H6 IAM 2800 H6 IAM 3000 H6 IAM 3200 H6 IAM 3500 H6 Displacement

INTERMOT - aADVANCED - MOTORS IAM SERIES H6 MODEL · pag. 88 IAM rev. 00 TECHNICAL DATA H6 MODEL IAM 2200 H6 IAM 2500 H6 IAM 2800 H6 IAM 3000 H6 IAM 3200 H6 IAM 3500 H6 Displacement

SailPoint - niap-ccevs.org · PDF file5.1 Extended Security Functional Requirements ..... 20 5.2 Extended Security Assurance Requirements ... [14] SailPoint IdentityIQ Direct Connectors

SailPoint - niap-ccevs.org · PDF file5.1 Extended Security Functional Requirements ..... 20 5.2 Extended Security Assurance Requirements ... [14] SailPoint IdentityIQ Direct Connectors

Version 8.1 Revised 6/16/2020 Installation Guide...Open Identity Platform — SailPoint’s Open Identity Platform lays the foundation for effective and scalable IAM ... SailPoint

Version 8.1 Revised 6/16/2020 Installation Guide...Open Identity Platform — SailPoint’s Open Identity Platform lays the foundation for effective and scalable IAM ... SailPoint

The ROI of IAM - docs.bankinfosecurity.comdocs.bankinfosecurity.com/files/handbooks/IAM/IAM-eHandbook.pdf · IAM, of course, is a huge issue for financial institutions – not just

The ROI of IAM - docs.bankinfosecurity.comdocs.bankinfosecurity.com/files/handbooks/IAM/IAM-eHandbook.pdf · IAM, of course, is a huge issue for financial institutions – not just

SailPoint Direct Connectors...SailPoint Direct Connectors Administration and Configuration Guide 7.2 Includes the following important changes: •Deprecating support for CyberArk Connector

SailPoint Direct Connectors...SailPoint Direct Connectors Administration and Configuration Guide 7.2 Includes the following important changes: •Deprecating support for CyberArk Connector

A Smarter Way to Manage Identity - SailPoint

A Smarter Way to Manage Identity - SailPoint

SailPoint IdentityIQ Supplemental Administrative Guidance · PDF fileSailPoint IdentityIQ Supplemental Administrative Guidance ST Version: 1.0 September 16, 2015 SailPoint 11305 Four

SailPoint IdentityIQ Supplemental Administrative Guidance · PDF fileSailPoint IdentityIQ Supplemental Administrative Guidance ST Version: 1.0 September 16, 2015 SailPoint 11305 Four

SailPoint Pricing for DIR 3560 - columnit.com · IdentityIQ Privileged User Management Integration Modules: Price per Integration Module (50 001+ Identity Cubes) SailPoint $ 125 000

SailPoint Pricing for DIR 3560 - columnit.com · IdentityIQ Privileged User Management Integration Modules: Price per Integration Module (50 001+ Identity Cubes) SailPoint $ 125 000

Report on SailPoint Technologies, Inc. and AI products ...

Report on SailPoint Technologies, Inc. and AI products ...

PING + SAILPOINT · access to the right applications. The integration between SailPoint and the Ping Identity Platform provides a simplified access and identity ... access to applications

PING + SAILPOINT · access to the right applications. The integration between SailPoint and the Ping Identity Platform provides a simplified access and identity ... access to applications

SailPoint: The Power of Identity™

SailPoint: The Power of Identity™

Intelligent Cloud Identity Platform - SailPoint · 2019-11-07 · The SailPoint IdentityNow platform brings you the power of enterprise-grade identity governance coupled with the

Intelligent Cloud Identity Platform - SailPoint · 2019-11-07 · The SailPoint IdentityNow platform brings you the power of enterprise-grade identity governance coupled with the

Investor Deck/media/Files/S/SailPoint-IR/... · 3 SailPoint secures digital identities Identity Governance How is Who should Who currently Enabling organizations to answer three …

Investor Deck/media/Files/S/SailPoint-IR/... · 3 SailPoint secures digital identities Identity Governance How is Who should Who currently Enabling organizations to answer three …

Sponsorship Packet Navigate17 - SailPoint · Sponsorship Opportunities It’s our fifth year! SailPoint Navigate draws hundreds of identity governance professionals from around the

Sponsorship Packet Navigate17 - SailPoint · Sponsorship Opportunities It’s our fifth year! SailPoint Navigate draws hundreds of identity governance professionals from around the

Comprehensive, Cloud-based IAM (IDaaS) · SailPoint, the undisputed leader in identity governance, brings the Power of Identity to enterprise customers around the world. SailPoint’s

Comprehensive, Cloud-based IAM (IDaaS) · SailPoint, the undisputed leader in identity governance, brings the Power of Identity to enterprise customers around the world. SailPoint’s

iam and harvard policiesiam.harvard.edu/files/iam/files/iam-security-privacy-policies.pdf · IAM$Security$&Privacy$Policies Scott%Bradner November%24,%2015 December%2,%2015 Tuesday

iam and harvard policiesiam.harvard.edu/files/iam/files/iam-security-privacy-policies.pdf · IAM$Security$&Privacy$Policies Scott%Bradner November%24,%2015 December%2,%2015 Tuesday

Oracle Identity Management 11g · (IAM) vendor by providing an integrated, application-centric product portfolio unmatched by its competitors. Oracle’s ability to anticipate and

Oracle Identity Management 11g · (IAM) vendor by providing an integrated, application-centric product portfolio unmatched by its competitors. Oracle’s ability to anticipate and

Okta and SailPoint: Delivering Reliable End-to-End ... Datasheet... · Okta + SailPoint Datasheet: Delivering Reliable End-to-End Identity Management information is then passed through

Okta and SailPoint: Delivering Reliable End-to-End ... Datasheet... · Okta + SailPoint Datasheet: Delivering Reliable End-to-End Identity Management information is then passed through

SailPoint Announces Second Quarter 2020 Financial Results/media/Files/S/SailPoint-IR/press... · Exhibit 99.1 SailPoint Announces Second Quarter 2020 Financial Results • Second

SailPoint Announces Second Quarter 2020 Financial Results/media/Files/S/SailPoint-IR/press... · Exhibit 99.1 SailPoint Announces Second Quarter 2020 Financial Results • Second