{"id":3608,"date":"2018-10-24T11:56:01","date_gmt":"2018-10-24T15:56:01","guid":{"rendered":"https:\/\/solutionsreview.com\/identity-management\/?p=3608"},"modified":"2018-11-08T11:49:09","modified_gmt":"2018-11-08T15:49:09","slug":"traditional-identity-management-still-enough-enterprise-security","status":"publish","type":"post","link":"https:\/\/solutionsreview.com\/identity-management\/traditional-identity-management-still-enough-enterprise-security\/","title":{"rendered":"Is Traditional Identity Management Still Enough for Enterprise Security?"},"content":{"rendered":"

\"Is<\/p>\n

We here at Solutions Review try to avoid alarmist titles when we can. We\u2019re not in the business of scaring enterprise decision-makers into making rash and immediate solution choices\u2014especially not in an area as vital and impactful as cybersecurity. Our goal is to inform and guide through a daunting process, not to cause unhelpful panics. \u00a0<\/span><\/p>\n

Yet as we inch ever closer to 2019<\/a>, our editors find themselves unable to shake the question: does traditional identity management still provide the identity security enterprises need to stand up to both hackers and insider threats? <\/span><\/p>\n

The short answer is obviously yes. Traditional identity management provides a strong and well-rounded identity solution to enterprises of all sizes. It offers greater authentication, credential management, and visibility than manual processes could hope to provide. However, a well-rounded solution may not provide the focus of a specialized identity solution\u2014the sort of specialized identity solution your enterprise might need to fill its identity gaps. <\/span><\/p>\n

What do these specialized identity solutions offer traditional identity management simply doesn\u2019t? Here is a brief overview of the main three branches: \u00a0\u00a0<\/span><\/p>\n

Privileged Access Management<\/b><\/h3>\n

Traditional identity management is concerned with your employees\u2019 access and credentials as an entire group. In contrast, a <\/span>privileged access management solution<\/b> is designed to secure the credentials, accounts, and passwords of your superusers\u2014the users with the most permissions and access on your enterprise\u2019s network. These users are usually your managers or executives…which makes their credentials so much more valuable for hackers. <\/span><\/p>\n

Additionally, privileged access management solutions help enterprises enforce the Principle of Least Privileges across their networks. This rule essentially keeps enterprises from bestowing their privileged users with too many permissions and too much access. As a popular example, you don\u2019t want your finance department\u2019s leader to be able to access the HR leaders\u2019 assets. Having too much overlap in permissions, or bestowing unnecessary privileges, can provide hackers with a tool to enact even more damage than they would otherwise. \u00a0\u00a0<\/span><\/p>\n

Privileged access management has taken a special importance over the past few years. According to the 2018 Verizon Data Breach Investigations Report, 80% of all enterprise-level data breaches include stolen or weak privileged accounts. <\/span><\/p>\n

\t\t\t

\"Download<\/a><\/p>\n<\/div>\n\t\t<\/div><\/div><\/p>\n

Identity Governance and Administration<\/b><\/h3>\n

Traditional identity management is concerned with access and credentials, especially when it concerns authentication. However, <\/span>identity governance and administration<\/b> solutions are more preoccupied with the permissions your users already have\u2014how they acquire new permissions, how their roles match with those privileges, and how your identity security policies align with your compliance requirements. <\/span><\/p>\n

Identity governance and administration\u2019s most important asset is their role management capability. IGA is designed to determine what access users have and to enact limitations on those permissions i.e. removing unnecessary access. The goal is to limit and prevent access creep\u2014the insidious accumulation of access users gain from temporary projects, role changes within the enterprise, and changes in role parameters and expectations. <\/span><\/p>\n

Much like privileged credentials operating outside the principle of least privileges, accounts with unchecked access creep can provide a powerful attack vector for both hackers and insider threats alike. Access creep can conceal glaring security holes and obscure dwelling threats for months. Best to put a stop to it before it happens. \u00a0\u00a0<\/span><\/p>\n

\t\t\t

\"Download<\/a><\/p>\n<\/div>\n\t\t<\/div><\/div><\/p>\n

Biometric Authentication<\/b><\/h3>\n

Authentication is, of course, a major priority for traditional identity management solutions. Solution providers are constantly innovating ways to supplement or supplant the single factor authentication scheme or the much-reviled password. These can include device authentication and recognition, geofencing, hard tokens, and PINs, operating in two factor or multifactor authentication schemes. <\/span><\/p>\n

However, <\/span>biometric authentication solution<\/b> providers are looking to take an even further step from passwords by making psychological traits like fingerprints or even common user behaviors like typing into authentication factors.<\/span><\/p>\n

The argument goes that biometric authentication factors cannot be forgotten, are always available, and cannot be replicated or stolen. While there are some arguments over its implementation, so far these claims have held fast. Certainly, they have\u2014when in an MFA authentication protocol\u2014proven to deter potential hackers and limit their access to valuable digital assets. <\/span><\/p>\n

\t\t\t

\"Download<\/a><\/p>\n<\/div>\n\t\t<\/div><\/div><\/p>\n

Traditional Identity Management?\u00a0<\/strong><\/h3>\n

And these three major branches don’t cover the possibility of\u00a0customer identity and access management (CIAM)<\/strong> which is much like traditional identity management but oriented to consumers than employees (emphasizing convenience over security, for example). Identity security has become a complex conversation indeed.<\/p>\n

Is traditional identity management the right identity security for your enterprise? Should you instead focus on a specialized solution? Only you can answer these questions, and only after serious self-examination and consultation with your security teams. <\/span><\/p>\n

Cybersecurity is not a rush job. Only the complete and thoughtful strategy will succeed. But success if more than its own reward. It might be the only path to a bright digital future. <\/span><\/p>\n


Widget not in any sidebars
<\/p>\n","protected":false},"excerpt":{"rendered":"

We here at Solutions Review try to avoid alarmist titles when we can. We\u2019re not in the business of scaring enterprise decision-makers into making rash and immediate solution choices\u2014especially not in an area as vital and impactful as cybersecurity. Our goal is to inform and guide through a daunting process, not to cause unhelpful panics. […]<\/p>\n","protected":false},"author":41,"featured_media":2919,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[5],"tags":[142,125,237,153,16,112,76,286,397,188,70,145,124,91,123,90,25],"acf":[],"yoast_head":"\nIs Traditional Identity Management Still Enough for Enterprise Security?<\/title>\n<meta name=\"description\" content=\"As we inch ever closer to 2019, we're unable to shake the question: does traditional identity management still provide the security enterprises need?\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/solutionsreview.com\/identity-management\/traditional-identity-management-still-enough-enterprise-security\/\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Ben Canner\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/traditional-identity-management-still-enough-enterprise-security\/\",\"url\":\"https:\/\/solutionsreview.com\/identity-management\/traditional-identity-management-still-enough-enterprise-security\/\",\"name\":\"Is Traditional Identity Management Still Enough for Enterprise Security?\",\"isPartOf\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/traditional-identity-management-still-enough-enterprise-security\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/traditional-identity-management-still-enough-enterprise-security\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/solutionsreview.com\/identity-management\/files\/2018\/06\/security-analytics-mod.png\",\"datePublished\":\"2018-10-24T15:56:01+00:00\",\"dateModified\":\"2018-11-08T15:49:09+00:00\",\"author\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541\"},\"description\":\"As we inch ever closer to 2019, we're unable to shake the question: does traditional identity management still provide the security enterprises need?\",\"breadcrumb\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/traditional-identity-management-still-enough-enterprise-security\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/solutionsreview.com\/identity-management\/traditional-identity-management-still-enough-enterprise-security\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/traditional-identity-management-still-enough-enterprise-security\/#primaryimage\",\"url\":\"https:\/\/solutionsreview.com\/identity-management\/files\/2018\/06\/security-analytics-mod.png\",\"contentUrl\":\"https:\/\/solutionsreview.com\/identity-management\/files\/2018\/06\/security-analytics-mod.png\",\"width\":800,\"height\":400,\"caption\":\"Is Traditional Identity Management Still Enough for Enterprise Security?\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/traditional-identity-management-still-enough-enterprise-security\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/solutionsreview.com\/identity-management\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Is Traditional Identity Management Still Enough for Enterprise Security?\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#website\",\"url\":\"https:\/\/solutionsreview.com\/identity-management\/\",\"name\":\"Identity and Access Management Solutions | Solutions Review\",\"description\":\"Evaluating Enterprise IAM Software, Identity Governance & Access Control Tools.\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/solutionsreview.com\/identity-management\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541\",\"name\":\"Ben Canner\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g\",\"caption\":\"Ben Canner\"},\"description\":\"Ben Canner is an enterprise technology writer and analyst covering Identity Management, SIEM, Endpoint Protection, and Cybersecurity writ large. He holds a Bachelor of Arts Degree in English from Clark University in Worcester, MA. He previously worked as a corporate blogger and ghost writer. You can reach him via Twitter and LinkedIn.\",\"url\":\"https:\/\/solutionsreview.com\/identity-management\/author\/bcanner\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Is Traditional Identity Management Still Enough for Enterprise Security?","description":"As we inch ever closer to 2019, we're unable to shake the question: does traditional identity management still provide the security enterprises need?","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/solutionsreview.com\/identity-management\/traditional-identity-management-still-enough-enterprise-security\/","twitter_misc":{"Written by":"Ben Canner","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/solutionsreview.com\/identity-management\/traditional-identity-management-still-enough-enterprise-security\/","url":"https:\/\/solutionsreview.com\/identity-management\/traditional-identity-management-still-enough-enterprise-security\/","name":"Is Traditional Identity Management Still Enough for Enterprise Security?","isPartOf":{"@id":"https:\/\/solutionsreview.com\/identity-management\/#website"},"primaryImageOfPage":{"@id":"https:\/\/solutionsreview.com\/identity-management\/traditional-identity-management-still-enough-enterprise-security\/#primaryimage"},"image":{"@id":"https:\/\/solutionsreview.com\/identity-management\/traditional-identity-management-still-enough-enterprise-security\/#primaryimage"},"thumbnailUrl":"https:\/\/solutionsreview.com\/identity-management\/files\/2018\/06\/security-analytics-mod.png","datePublished":"2018-10-24T15:56:01+00:00","dateModified":"2018-11-08T15:49:09+00:00","author":{"@id":"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541"},"description":"As we inch ever closer to 2019, we're unable to shake the question: does traditional identity management still provide the security enterprises need?","breadcrumb":{"@id":"https:\/\/solutionsreview.com\/identity-management\/traditional-identity-management-still-enough-enterprise-security\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/solutionsreview.com\/identity-management\/traditional-identity-management-still-enough-enterprise-security\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/solutionsreview.com\/identity-management\/traditional-identity-management-still-enough-enterprise-security\/#primaryimage","url":"https:\/\/solutionsreview.com\/identity-management\/files\/2018\/06\/security-analytics-mod.png","contentUrl":"https:\/\/solutionsreview.com\/identity-management\/files\/2018\/06\/security-analytics-mod.png","width":800,"height":400,"caption":"Is Traditional Identity Management Still Enough for Enterprise Security?"},{"@type":"BreadcrumbList","@id":"https:\/\/solutionsreview.com\/identity-management\/traditional-identity-management-still-enough-enterprise-security\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/solutionsreview.com\/identity-management\/"},{"@type":"ListItem","position":2,"name":"Is Traditional Identity Management Still Enough for Enterprise Security?"}]},{"@type":"WebSite","@id":"https:\/\/solutionsreview.com\/identity-management\/#website","url":"https:\/\/solutionsreview.com\/identity-management\/","name":"Identity and Access Management Solutions | Solutions Review","description":"Evaluating Enterprise IAM Software, Identity Governance & Access Control Tools.","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/solutionsreview.com\/identity-management\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541","name":"Ben Canner","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g","caption":"Ben Canner"},"description":"Ben Canner is an enterprise technology writer and analyst covering Identity Management, SIEM, Endpoint Protection, and Cybersecurity writ large. He holds a Bachelor of Arts Degree in English from Clark University in Worcester, MA. He previously worked as a corporate blogger and ghost writer. You can reach him via Twitter and LinkedIn.","url":"https:\/\/solutionsreview.com\/identity-management\/author\/bcanner\/"}]}},"_links":{"self":[{"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/posts\/3608"}],"collection":[{"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/users\/41"}],"replies":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/comments?post=3608"}],"version-history":[{"count":0,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/posts\/3608\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/media\/2919"}],"wp:attachment":[{"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/media?parent=3608"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/categories?post=3608"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/tags?post=3608"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}