A Successful Business is a Growing Business
You and your colleagues have worked hard to get to where you are today. You’ve never been larger and your business is still growing. New people, new ideas and new systems to handle the workload never stop coming in.
This growth in capabilities comes at a cost though and managing the Identity and Access required to scale up can seem like an overwhelming task. The good news is that you know that a well developed Role Based Access Control (RBAC) program can drastically reduce the effort required to ensure the proper access for your users without becoming a nightmare of manual access request and attestation efforts.
What makes a successful Role Based Access Control Program?
A Successful Role Program is defined as one that:
-
Produces as few roles as possible
-
That cover as much access as possible
-
For as many people as possible
-
With roles that align to existing control structures
-
As swiftly as possible
-
And ends when there are no more valuable roles
This is a lot of objectives to balance and it requires experience and capabilities to make sure that its done right. Our team at CyberSolve has a combination of decades of experience in RBAC and cutting-edge capabilities in the form of our Role Mining Analysis Tool-suite to make sure that the optimum set of roles is created as swiftly as possible.
Role Model Analysis is the Key Differentiator Between a Role Program that succeeds and a Role Program that Wastes Your Time
Role Model Analysis means weighing the value of different potential role models before deciding which one to pursue.
All Role Programs develop a Role Model, which is the set of roles and the order in which you decide to build them. Not all Role Programs deliberately choose the role model that best suits your IAM Environment and this prevent you organization from benefitting from your RBAC Effort. Before embarking on a large scale role creation process you’ll first want to determine if the way in which you intend to create roles is right for your business.
Finding mathematical certainty behind answering which roles to create used to require hundreds of man hours of manually collating spreadsheets. This could easily result in an organization changing faster than it can be analyzed, resulting in wasted effort.
How do we conduct a Role Model Analysis in a timely fashion?
A graph of the relative value of two different ways to create roles. In this particular data set the greater value of the “Department” role candidates suggests that it’s a superior way to build roles than based on Location.
The good news is that the old ways of figuring out which roles to build, the order to build them, and what to put in them are in the past. You don’t need a team of business analysts working for months sifting through access in Excel because we’ve written software to automate this process and put the results in front of key decision makers in a fraction of the time it used to take. By leveraging Data Science tools and the power of modern processors we’re taking the leg-work out of Role Based Access Control programs, this means less time is spent on collating data freeing up more time for making the decisions that really matter.
What does an RBAC Program with Role Model Analysis Program look like?
There are three steps we take to complete and RBAC program at a client and Role Model Analysis is only the first. We’re building you roles throughout all three steps, at an increasing pace as we develop your IAM teams ability to develop roles faster.
Deliverables By Phase
1. Find Your Role Model
-
Role Model Analyses
-
Entitlement Analyses
-
RBAC Program Requirements
-
A Pilot Set of Roles (>20)
By the end of this phase you will know what roles you should build and the order in which they should be built along with how to configure your IAM System to benefit from them.
2. Build Your Role Factory
-
IAM System Configuration
-
RBAC Program Methodology
-
More Roles (50+)
By the end of this phase you will have a team, policies and tools configured to create roles at speed without sacrificing access governance. Your IAM System will be fully configured to benefit from roles.
3. Run Your Role Factory
-
Roles (The rest of them)
In this phase the remainder of your role structure will be built until there are no longer valuable roles to create.
Mak is a Cyber Security Executive with over 20 years of experience in Security Controls Design, Implementation and Sustainment with proven management, analytical, technological and strategic skills. He is a globally experienced, process driven and result oriented leader with a proven track record of successfully leading high-performing technical and non-technical teams and delivering industry leading IT Security Capabilities. He has led large scale Cyber Strategy and Implementation projects for Fortune 500 organizations from Finance, Insurance, Banking, Healthcare, Media and Communications domains. He has successfully managed and coordinated global teams to deliver complex project in Identity and Access Management(IAM), Privileged Access, Data Analytics, Risk Management, Governance and Compliance.
Todd is a recognized IAM and Cloud industry expert who brings over 20 years of experience in managing, advising, architecting, and deploying IGA, Authentication and Authorization, and Cloud solutions and services across IDaaS, SaaS, IaaS, and PaaS. Todd is a frequent speaker on effective risk and security practices at leading industry events. He is responsible for the oversight of CyberSolve’s business segments and for the development of strategic plans to sustain the company’s rapid growth while providing trusted advice to clients across the security and risk spectrum.
Atul has over 20 years of experience in managing, designing and implementing Customer Relationship Management (CRM) and Salesforce integrations. He has acted as a cloud-focused solutions expert in both domestic and international markets. Prior to founding CyberSolve, Atul was a Technical Consulting Director at Salesforce where he demonstrated his strong experience architecting financial services industry solutions. Atul holds a Bachelor of Engineering from Madan Mohan Malaviya University of Technology.
Shub possesses over 15 years of experience in the Identity and Access Management (IAM) industry in pre-Sales and technology architecture roles. Shubham has held various positions with SailPoint, RSA, Saviynt, and Okta. He has extensive Identity and Access Management industry technology and sales experience in both domestic and international markets as well strong knowledge of how Identity and Access Management satisfies Audit and IT compliance issues. Shub holds a 
Rajesh has served Multi-National Corporations and large organizations as a full time Vice President of Finance, Chief Financial Officer and in equivalent roles. In order to fulfill his duties as a CFO he is a Chartered Accountant, holds a Diploma in Information System Audit (DISA certified by the Institute of Chartered Accountants of India), is a Certified SAP Consultant, Certified QuickBooks Professional Advisor, and Zoho Partner with 30+ years of experience in managing Finance, Accounting and ERP Systems for Medium to Large organizations in diverse sectors.
John is an experienced IT executive with extensive business leadership, operations management, project management, technology delivery and consulting skills who spent over two decades with General Electric where he was responsible for all aspects of their Global PIM program, he was also a key member of the security assurance team for the organizations Capital business. John leads the delivery of client services across the business landscape, to include Privileged Access Management, Managed Services, Identity Governance & Administration, Cybersecurity and Cloud Services.
Luis has been facilitating IAM programs for 20+ years. He was the CRO at Clear Skye, which builds identity governance capabilities on the ServiceNow Platform. His prior experience with services companies that deliver real world identity solutions has made him a trusted resource for information security executives that he has the privilege of advising. Luis assists in the management of our global sales organization, driving revenue growth via direct sales, ensuring our customers have the best plan and solution to ensure their IAM investment achieves the lowest TCO while providing the highest ROI.
Amit brings over 15 years of Identity and Access Management (IAM) experience to the organization. He has a proven track record in providing customers with the best of breed Identity and Access Management solutions. He ensures success within all engagements by staying integrated with the customer throughout the engagement whether it is a program, project or managed services and support. Amit acts as a customer champion at all times to ensure the right solution and resources are in place to achieve the right requirements.
James leads the delivery of client services across the Identity, Access, and Authorization landscape. He has delivered projects across a wide range of products including Okta, Ping, ForgeRock, Oracle, Microsoft, Citrix, Imprivata, Radiant Logic, Axiomatics and many others. With the advent of modern cloud services, James has served as the internal cloud architect and administrator for almost 10 years and uses that experience to help users make the best use of it.
Clark is a Channels, Sales and Marketing executive with 40+ years of experience as a direct seller, Executive and Founder. His experience includes services, software and hardware sales to Commercial, Federal, and State/Local/Education entities across US Domestic and International markets. Within the IAM spectrum, Clark spent over 5 years as SailPoint’s Channel Manager, Federal & Healthcare markets. He has developed and managed Partner relationships and strategies globally, and is known for significantly growing the revenue of his partners by building trusted, profitable relationships and business strategies.