{"id":5286,"date":"2021-04-05T16:07:15","date_gmt":"2021-04-05T20:07:15","guid":{"rendered":"https:\/\/solutionsreview.com\/identity-management\/?p=5286"},"modified":"2021-04-06T12:53:41","modified_gmt":"2021-04-06T16:53:41","slug":"why-governance-in-identity-security-is-such-a-challenge","status":"publish","type":"post","link":"https:\/\/solutionsreview.com\/identity-management\/why-governance-in-identity-security-is-such-a-challenge\/","title":{"rendered":"Why Governance in Identity Security is Such a Challenge"},"content":{"rendered":"<p><img loading=\"lazy\" decoding=\"async\" class=\"alignleft size-full wp-image-4618\" src=\"https:\/\/solutionsreview.com\/identity-management\/files\/2019\/11\/managed-security-mod.png\" alt=\"Why Governance in Identity Security is Such a Challenge\" width=\"800\" height=\"450\" srcset=\"https:\/\/solutionsreview.com\/identity-management\/files\/2019\/11\/managed-security-mod.png 800w, https:\/\/solutionsreview.com\/identity-management\/files\/2019\/11\/managed-security-mod-300x169.png 300w, https:\/\/solutionsreview.com\/identity-management\/files\/2019\/11\/managed-security-mod-768x432.png 768w, https:\/\/solutionsreview.com\/identity-management\/files\/2019\/11\/managed-security-mod-480x270.png 480w, https:\/\/solutionsreview.com\/identity-management\/files\/2019\/11\/managed-security-mod-144x81.png 144w, https:\/\/solutionsreview.com\/identity-management\/files\/2019\/11\/managed-security-mod-320x180.png 320w\" sizes=\"(max-width: 800px) 100vw, 800px\" \/><\/p>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">Why is governance in identity security such a challenge to enterprise IT decision-makers? What can enterprises do to help ease this challenge?\u00a0<\/span><\/p>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">Recently, the editors of Solutions Review opened up a poll asking LinkedIn followers about their biggest identity management challenge. Did they struggle with the cybersecurity involved in authentication? Maintaining monitoring of their users after the initial login? Protecting their privileged users from persistent external threat actors?\u00a0<\/span><\/p>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">Actually, not as much as we expected. In fact, the majority of respondents (52 percent) said their biggest identity management challenge was governance and role management. None of the other categories came close to matching this concern.\u00a0<\/span><\/p>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">So why does <a href=\"https:\/\/solutionsreview.com\/identity-management\/identity-governance-and-administration-buyers-guide\/\" target=\"_blank\" rel=\"noopener\">governance in identity security<\/a> pose a problem for so many IT decision-makers?\u00a0<\/span><\/p>\n<div class=\"widget\"><div class=\"aside-card\">\t\t\t<div class=\"textwidget\"><p><a class=\"iam-inject\" href=\"https:\/\/suggestionengine.solutionsreview.com\/buyer\/signup\" target=\"_blank\" rel=\"noopener\"><img loading=\"lazy\" decoding=\"async\" class=\"alignleft size-full wp-image-1682\" title=\"\" src=\"https:\/\/solutionsreview.com\/identity-management\/files\/2021\/02\/Identity_Suggestion_Engine_Horiz_800.gif\" alt=\"IAM Solution Suggestion Engine\" width=\"800\" height=\"100\" \/><\/a><\/p>\n<\/div>\n\t\t<\/div><\/div>\n<h2 style=\"text-align: justify\"><b>Why Governance in Identity Security is Such a Challenge<\/b><\/h2>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">Let\u2019s start with some definitions: identity governance and role management refer to monitoring the permissions users have and curtailing them as much as is feasible.\u00a0<\/span><\/p>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">Fundamentally, this branch of cybersecurity subscribes to the philosophy known as the Principle of Least Privilege. At the core of this idea is that users should have the <\/span><i><span style=\"font-weight: 400\">least number <\/span><\/i><span style=\"font-weight: 400\">of permissions connected to their accounts. Limiting privileges ensures that no one account can cause as much damage if a hacker or insider threat takes control of it.\u00a0<\/span><\/p>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">This means that businesses need to know who has what permissions, how they use them, and whether those permissions are strictly necessary for their roles in the organization.<\/span><\/p>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">Of course, this is all easier said than done. First, you need to know all of your users (not always easy when you start factoring in non-human identities and third parties). Second, you need to know their behaviors and devices, which proves difficult in the era of mass work-from-home and bring-your-own-devices. Finally, your business must have the ability to maintain consistent insights into users\u2019 permissions during a volatile time in the economy with high turnover rates.\u00a0<\/span><\/p>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">It\u2019s an uphill battle, in other words. Even today, some enterprises honestly try to keep track of who has what permissions with Excel spreadsheets. Moreover, these challenges don&#8217;t get into the issues surrounding temporary passwords, often assigned during absences or special projects and then never revoked.\u00a0<\/span><\/p>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">Access creep and insider threats proliferate in these kinds of environments.\u00a0\u00a0<\/span><\/p>\n<h3 style=\"text-align: justify\"><b>How Identity Governance Helps<\/b><\/h3>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">This is where identity governance steps in to bring next-generation role management to enterprises of all sizes.<\/span><\/p>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">It operates by granting your IT security team the most valuable resource in all of cybersecurity: visibility. It enables your team to track and review all of your users and their permissions in your environment. Additionally, your team can decide to revoke permissions on any account at any time, thus allowing for your business to start following the Principle of Least Privilege.\u00a0<\/span><\/p>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">Further, you can actually begin employees on the right foot by using role management to create sets of permissions that go with each job title in your business. When a new employee steps into their role, their account thus already has all the pre-approved privileges they need to get started, preventing both slowdowns and dangerous permission granting in the long term.\u00a0<\/span><\/p>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">Also, identity governance can handle the challenge in temporary permissions. It creates an access request system that helps automate the assignment of temporary privileges. After a set time limit, the system can automatically revoke those same permissions, preventing the account holder from keeping them past the point of their necessity.\u00a0<\/span><\/p>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">In other words, governance in identity security doesn\u2019t have to be a challenge. It could be the start of a new day for your cybersecurity. Check out the <a href=\"https:\/\/solutionsreview.com\/identity-management\/identity-governance-and-administration-buyers-guide\/\" target=\"_blank\" rel=\"noopener\">Identity Governance Buyer\u2019s Guide<\/a> for more. Also, check out the <a href=\"https:\/\/suggestionengine.solutionsreview.com\/buyer\/signup\" target=\"_blank\" rel=\"noopener\">Suggestion Engine<\/a> for more.\u00a0\u00a0<\/span><\/p>\n<div class=\"widget\"><div class=\"aside-card\">\t\t\t<div class=\"textwidget\"><p><a class=\"iam-inject\" href=\"https:\/\/suggestionengine.solutionsreview.com\/buyer\/signup\" target=\"_blank\" rel=\"noopener\"><img loading=\"lazy\" decoding=\"async\" class=\"alignleft size-full wp-image-1682\" title=\"\" src=\"https:\/\/solutionsreview.com\/identity-management\/files\/2021\/02\/Identity_Suggestion_Engine_Horiz_800.gif\" alt=\"IAM Solution Suggestion Engine\" width=\"800\" height=\"100\" \/><\/a><\/p>\n<\/div>\n\t\t<\/div><\/div>\n","protected":false},"excerpt":{"rendered":"<p>Why is governance in identity security such a challenge to enterprise IT decision-makers? What can enterprises do to help ease this challenge?\u00a0 Recently, the editors of Solutions Review opened up a poll asking LinkedIn followers about their biggest identity management challenge. Did they struggle with the cybersecurity involved in authentication? Maintaining monitoring of their users [&hellip;]<\/p>\n","protected":false},"author":41,"featured_media":4618,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[5,1],"tags":[142,125,16,76,286,397,1252,188,70,1526],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v23.5 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Why Governance in Identity Security is Such a Challenge<\/title>\n<meta name=\"description\" content=\"Why is governance in identity security such a challenge to enterprise IT decision-makers? What can enterprises do to help ease this challenge?\u00a0\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/solutionsreview.com\/identity-management\/why-governance-in-identity-security-is-such-a-challenge\/\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Ben Canner\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/why-governance-in-identity-security-is-such-a-challenge\/\",\"url\":\"https:\/\/solutionsreview.com\/identity-management\/why-governance-in-identity-security-is-such-a-challenge\/\",\"name\":\"Why Governance in Identity Security is Such a Challenge\",\"isPartOf\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/why-governance-in-identity-security-is-such-a-challenge\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/why-governance-in-identity-security-is-such-a-challenge\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/solutionsreview.com\/identity-management\/files\/2019\/11\/managed-security-mod.png\",\"datePublished\":\"2021-04-05T20:07:15+00:00\",\"dateModified\":\"2021-04-06T16:53:41+00:00\",\"author\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541\"},\"description\":\"Why is governance in identity security such a challenge to enterprise IT decision-makers? What can enterprises do to help ease this challenge?\u00a0\",\"breadcrumb\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/why-governance-in-identity-security-is-such-a-challenge\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/solutionsreview.com\/identity-management\/why-governance-in-identity-security-is-such-a-challenge\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/why-governance-in-identity-security-is-such-a-challenge\/#primaryimage\",\"url\":\"https:\/\/solutionsreview.com\/identity-management\/files\/2019\/11\/managed-security-mod.png\",\"contentUrl\":\"https:\/\/solutionsreview.com\/identity-management\/files\/2019\/11\/managed-security-mod.png\",\"width\":800,\"height\":450,\"caption\":\"4 Different Authentication Models (And How They Can Help)\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/why-governance-in-identity-security-is-such-a-challenge\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/solutionsreview.com\/identity-management\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Why Governance in Identity Security is Such a Challenge\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#website\",\"url\":\"https:\/\/solutionsreview.com\/identity-management\/\",\"name\":\"Identity and Access Management Solutions | Solutions Review\",\"description\":\"Evaluating Enterprise IAM Software, Identity Governance &amp; Access Control Tools.\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/solutionsreview.com\/identity-management\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541\",\"name\":\"Ben Canner\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g\",\"caption\":\"Ben Canner\"},\"description\":\"Ben Canner is an enterprise technology writer and analyst covering Identity Management, SIEM, Endpoint Protection, and Cybersecurity writ large. He holds a Bachelor of Arts Degree in English from Clark University in Worcester, MA. He previously worked as a corporate blogger and ghost writer. You can reach him via Twitter and LinkedIn.\",\"url\":\"https:\/\/solutionsreview.com\/identity-management\/author\/bcanner\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Why Governance in Identity Security is Such a Challenge","description":"Why is governance in identity security such a challenge to enterprise IT decision-makers? What can enterprises do to help ease this challenge?\u00a0","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/solutionsreview.com\/identity-management\/why-governance-in-identity-security-is-such-a-challenge\/","twitter_misc":{"Written by":"Ben Canner","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/solutionsreview.com\/identity-management\/why-governance-in-identity-security-is-such-a-challenge\/","url":"https:\/\/solutionsreview.com\/identity-management\/why-governance-in-identity-security-is-such-a-challenge\/","name":"Why Governance in Identity Security is Such a Challenge","isPartOf":{"@id":"https:\/\/solutionsreview.com\/identity-management\/#website"},"primaryImageOfPage":{"@id":"https:\/\/solutionsreview.com\/identity-management\/why-governance-in-identity-security-is-such-a-challenge\/#primaryimage"},"image":{"@id":"https:\/\/solutionsreview.com\/identity-management\/why-governance-in-identity-security-is-such-a-challenge\/#primaryimage"},"thumbnailUrl":"https:\/\/solutionsreview.com\/identity-management\/files\/2019\/11\/managed-security-mod.png","datePublished":"2021-04-05T20:07:15+00:00","dateModified":"2021-04-06T16:53:41+00:00","author":{"@id":"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541"},"description":"Why is governance in identity security such a challenge to enterprise IT decision-makers? What can enterprises do to help ease this challenge?\u00a0","breadcrumb":{"@id":"https:\/\/solutionsreview.com\/identity-management\/why-governance-in-identity-security-is-such-a-challenge\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/solutionsreview.com\/identity-management\/why-governance-in-identity-security-is-such-a-challenge\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/solutionsreview.com\/identity-management\/why-governance-in-identity-security-is-such-a-challenge\/#primaryimage","url":"https:\/\/solutionsreview.com\/identity-management\/files\/2019\/11\/managed-security-mod.png","contentUrl":"https:\/\/solutionsreview.com\/identity-management\/files\/2019\/11\/managed-security-mod.png","width":800,"height":450,"caption":"4 Different Authentication Models (And How They Can Help)"},{"@type":"BreadcrumbList","@id":"https:\/\/solutionsreview.com\/identity-management\/why-governance-in-identity-security-is-such-a-challenge\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/solutionsreview.com\/identity-management\/"},{"@type":"ListItem","position":2,"name":"Why Governance in Identity Security is Such a Challenge"}]},{"@type":"WebSite","@id":"https:\/\/solutionsreview.com\/identity-management\/#website","url":"https:\/\/solutionsreview.com\/identity-management\/","name":"Identity and Access Management Solutions | Solutions Review","description":"Evaluating Enterprise IAM Software, Identity Governance &amp; Access Control Tools.","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/solutionsreview.com\/identity-management\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541","name":"Ben Canner","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g","caption":"Ben Canner"},"description":"Ben Canner is an enterprise technology writer and analyst covering Identity Management, SIEM, Endpoint Protection, and Cybersecurity writ large. He holds a Bachelor of Arts Degree in English from Clark University in Worcester, MA. He previously worked as a corporate blogger and ghost writer. You can reach him via Twitter and LinkedIn.","url":"https:\/\/solutionsreview.com\/identity-management\/author\/bcanner\/"}]}},"_links":{"self":[{"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/posts\/5286"}],"collection":[{"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/users\/41"}],"replies":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/comments?post=5286"}],"version-history":[{"count":0,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/posts\/5286\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/media\/4618"}],"wp:attachment":[{"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/media?parent=5286"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/categories?post=5286"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/tags?post=5286"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}