{"id":5767,"date":"2022-01-24T08:54:10","date_gmt":"2022-01-24T12:54:10","guid":{"rendered":"https:\/\/solutionsreview.com\/identity-management\/?p=5767"},"modified":"2022-02-07T12:29:06","modified_gmt":"2022-02-07T16:29:06","slug":"its-time-to-think-beyond-iam-solutions","status":"publish","type":"post","link":"https:\/\/solutionsreview.com\/identity-management\/its-time-to-think-beyond-iam-solutions\/","title":{"rendered":"It\u2019s Time To Think Beyond IAM Solutions"},"content":{"rendered":"

\"Identity<\/a><\/p>\n

As part of Solutions Review’s Premium Content Series\u2014a collection of contributed columns written by industry experts in maturing software categories\u2014Jim Barkdoll<\/span><\/span>, the President and Chief Commercial Officer at Axiomatics<\/a>, <\/span><\/span><\/span><\/span><\/em><\/strong>shares some expert insights on identity and access management (IAM), role-based access control (RBAC), and attribute-based access control (ABAC).<\/span><\/span><\/span><\/em><\/strong><\/p>\n

\"\"Leading an enterprise IT team is no easy task. Global enterprises often have hundreds or even thousands of disparate applications, some of which are new, some legacy, and some based on unsupported software. Combined with a continuous increase in regulatory and security compliance requirements, dynamic aspects of burgeoning cloud applications, plus a ‘work from anywhere’ workforce, the result is challenging for even the most seasoned security experts.<\/span>\u00a0<\/span><\/p>\n

Traditionally, organizations have turned to an identity and access management (IAM)<\/a><\/strong><\/span> solution to ensure workers get the access they need to do their jobs. Over the last decade, thanks in part to multiple compliance mandates and high-profile breaches, organizations shifted focus to ensure workers get only the access they need to only the data they need \u2013 nothing more.\u00a0<\/span>\u00a0<\/span><\/p>\n

This creates a balancing act for IT teams\u2014the business requires access and speed to complete critical day-to-day activities, but they must also secure essential data and processes. Too much security and the business slows down. Too little and the organization might face financial and reputational damage via a costly public breach. <\/span>\u00a0<\/span><\/p>\n

In the beginning, there was IAM.\u00a0<\/strong><\/h3>\n

In the last ten years, IAM solutions have matured and continue to save countless hours and avert headaches for today’s IT professionals. Additionally, these solutions have continued to evolve, offering enterprises faster and more sophisticated protection. This is particularly true when it comes to access, as without IAM, organizations would have to manage each applications’ or user’s access separately, which is neither manageable nor scalable.<\/span>\u00a0<\/span><\/p>\n

\t\t\t

\"IAM<\/a><\/p>\n<\/div>\n\t\t<\/div><\/div>\n

Though this sounds ideal, the issue rises with the continuous stream of changes IT teams deal with daily. People leave and start new roles either within the organization or elsewhere; new compliance regulations are introduced, new applications and\/or hardware are added, and so on. For years, role-based access control (RBAC)<\/a><\/strong><\/span> was used to address this. With RBAC, IT assigned a user to a role, and policies were established to state what each position could access and were often synched to a human resources system.<\/span><\/p>\n

When a new user was hired, the IAM solution would assign them a role based on their job title. If their job title changed due to an internal transfer or they left the organization, the IAM system would capture this once it synched with the HR system, and the change would be made. Though this appears straightforward, it does not reflect a vital issue: context.<\/span>\u00a0<\/span><\/p>\n

Context is everything, and without it, a security solution (including an IAM solution) misses the critical elements necessary to determine whether an access request should be granted or denied. This is particularly true when you consider social engineering, which is rapidly becoming the preferred method for attackers to access critical corporate assets. Through this method, if a bad actor tricks an employee into exposing their credentials, solely relying on an RBAC policy review might not prevent a breach, as illustrated by the scenario below.<\/span>\u00a0<\/span><\/p>\n

\"\"<\/p>\n

It’s time to address context.\u00a0<\/strong><\/h3>\n

Attribute-based access control (or ABAC) has been around for a while and was identified by the National Institute of Standards and Technology (NIST) as a critical component to eliminate risks from inappropriate access. In the NIST Special Publication 1800-3A: Attribute-Based Access Control, it was said, “Its [ABAC] dynamic capabilities offer greater efficiency, flexibility, scalability and security than traditional access control methods, without burdening administrators or users.” NIST first recommended ABAC adoption back in 2014.<\/span>\u00a0<\/span><\/p>\n

More importantly, ABAC addresses safeguarding access to applications, databases, microservices, and APIs within a complex architecture, as seen in large, globally-matrixed enterprises. Instead of focusing on whether a role should permit access, ABAC considers attributes, including a user’s location, time of day, the device used, resource in question, or desired action. Reviewing attributes is done in real-time, which is why ABAC is well-suited to address the evolving challenges enterprises face. <\/span>\u00a0<\/span><\/p>\n

Though IAM solutions promise a lot (and deliver on much), in many cases, they continue to contribute to a problem plaguing many enterprises’\u00a0<\/span><\/span><\/span><\/span><\/em><\/strong>role explosion. With RBAC, a reliance on roles can create a scenario where, for example, ten roles are made to address access, whereas one policy could handle the same situation through an ABAC-centric approach.<\/span>\u00a0<\/span><\/p>\n

Implementing ABAC\u00a0<\/strong><\/h3>\n

The core of ABAC and the key to its implementation within an enterprise IAM environment lies in careful consideration of both enterprise attributes (discussed above) and policies. Leveraging ABAC, a user’s entitlements result from a runtime authorization request evaluated against a set of guidelines. This is a different approach to access and renders traditional access reviews ineffective. Successfully implementing ABAC in an enterprise IAM environment requires careful consideration of enterprise attributes and digital policies. ABAC requires new processes and new authorization requirements, which often leaves enterprise IT teams wondering where to begin.<\/span>\u00a0<\/span><\/p>\n

A lifecycle policy is a systematic approach to implementing ABAC within the enterprise in eight steps, as seen below:<\/span><\/p>\n

\"\"<\/p>\n

With new and evolving security and technology challenges emerging almost daily, traditional provisioning and de-provisioning are no longer sufficient. ABAC requires new processes and authorization requirements to be gathered but offers a modern approach to access management, moving away from the traditional, static approach entrenched in so many organizations. While IAM offerings<\/a><\/strong><\/span> have matured considerably in the last decade, what enterprises require has also evolved and requires a dynamic approach. Considering ABAC offers such an approach and a way for enterprises to ensure critical data and processes are only accessed by the right people, at the right time, in the right way.<\/span><\/p>\n

\n

\t\t\t

\"Download<\/a><\/p>\n<\/div>\n\t\t<\/div><\/div><\/p>\n","protected":false},"excerpt":{"rendered":"

As part of Solutions Review’s Premium Content Series\u2014a collection of contributed columns written by industry experts in maturing software categories\u2014Jim Barkdoll, the President and Chief Commercial Officer at Axiomatics, shares some expert insights on identity and access management (IAM), role-based access control (RBAC), and attribute-based access control (ABAC). Leading an enterprise IT team is no […]<\/p>\n","protected":false},"author":81,"featured_media":5786,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[5],"tags":[1828,1827,1830,1204,425,1829,1824,384,1768],"acf":[],"yoast_head":"\nIt\u2019s Time To Think Beyond IAM Solutions<\/title>\n<meta name=\"description\" content=\"As part of Solutions Review's Premium Content Series, Jim Barkdoll of Axiomatics shares some expert insights on IAM, RBAC, and ABAC.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/solutionsreview.com\/identity-management\/its-time-to-think-beyond-iam-solutions\/\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Jim Barkdoll\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"5 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/its-time-to-think-beyond-iam-solutions\/\",\"url\":\"https:\/\/solutionsreview.com\/identity-management\/its-time-to-think-beyond-iam-solutions\/\",\"name\":\"It\u2019s Time To Think Beyond IAM Solutions\",\"isPartOf\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/its-time-to-think-beyond-iam-solutions\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/its-time-to-think-beyond-iam-solutions\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/solutionsreview.com\/identity-management\/files\/2022\/01\/Thinking-Beyond-Identity-and-Access-Management-1.jpg\",\"datePublished\":\"2022-01-24T12:54:10+00:00\",\"dateModified\":\"2022-02-07T16:29:06+00:00\",\"author\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/33fe44add3e60b2b3be9661c8969b05f\"},\"description\":\"As part of Solutions Review's Premium Content Series, Jim Barkdoll of Axiomatics shares some expert insights on IAM, RBAC, and ABAC.\",\"breadcrumb\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/its-time-to-think-beyond-iam-solutions\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/solutionsreview.com\/identity-management\/its-time-to-think-beyond-iam-solutions\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/its-time-to-think-beyond-iam-solutions\/#primaryimage\",\"url\":\"https:\/\/solutionsreview.com\/identity-management\/files\/2022\/01\/Thinking-Beyond-Identity-and-Access-Management-1.jpg\",\"contentUrl\":\"https:\/\/solutionsreview.com\/identity-management\/files\/2022\/01\/Thinking-Beyond-Identity-and-Access-Management-1.jpg\",\"width\":800,\"height\":400},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/its-time-to-think-beyond-iam-solutions\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/solutionsreview.com\/identity-management\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"It\u2019s Time To Think Beyond IAM Solutions\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#website\",\"url\":\"https:\/\/solutionsreview.com\/identity-management\/\",\"name\":\"Identity and Access Management Solutions | Solutions Review\",\"description\":\"Evaluating Enterprise IAM Software, Identity Governance & Access Control Tools.\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/solutionsreview.com\/identity-management\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/33fe44add3e60b2b3be9661c8969b05f\",\"name\":\"Jim Barkdoll\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/solutionsreview.com\/identity-management\/files\/2023\/12\/jim-barkdoll.jpg\",\"contentUrl\":\"https:\/\/solutionsreview.com\/identity-management\/files\/2023\/12\/jim-barkdoll.jpg\",\"caption\":\"Jim Barkdoll\"},\"description\":\"Jim Barkdoll is a data security veteran with a successful track record of helping enterprise customers solve challenges they face in protecting their critical assets. Jim has over 25 years of business development and executive leadership experience in successfully growing teams and revenues within channel, SMB, midmarket and enterprise accounts. Prior to Axiomatics, Jim served as CEO of Stealthbits before selling it to Netwrix. Jim also served as Titus\u2019 CEO and executed successful transactions to Blackstone and ultimately to HelpSystems, a TA Associates company.\",\"sameAs\":[\"https:\/\/www.axiomatics.com\/\",\"https:\/\/www.linkedin.com\/in\/jimbarkdoll\/\"],\"url\":\"https:\/\/solutionsreview.com\/identity-management\/author\/jbarkdoll\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"It\u2019s Time To Think Beyond IAM Solutions","description":"As part of Solutions Review's Premium Content Series, Jim Barkdoll of Axiomatics shares some expert insights on IAM, RBAC, and ABAC.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/solutionsreview.com\/identity-management\/its-time-to-think-beyond-iam-solutions\/","twitter_misc":{"Written by":"Jim Barkdoll","Est. reading time":"5 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/solutionsreview.com\/identity-management\/its-time-to-think-beyond-iam-solutions\/","url":"https:\/\/solutionsreview.com\/identity-management\/its-time-to-think-beyond-iam-solutions\/","name":"It\u2019s Time To Think Beyond IAM Solutions","isPartOf":{"@id":"https:\/\/solutionsreview.com\/identity-management\/#website"},"primaryImageOfPage":{"@id":"https:\/\/solutionsreview.com\/identity-management\/its-time-to-think-beyond-iam-solutions\/#primaryimage"},"image":{"@id":"https:\/\/solutionsreview.com\/identity-management\/its-time-to-think-beyond-iam-solutions\/#primaryimage"},"thumbnailUrl":"https:\/\/solutionsreview.com\/identity-management\/files\/2022\/01\/Thinking-Beyond-Identity-and-Access-Management-1.jpg","datePublished":"2022-01-24T12:54:10+00:00","dateModified":"2022-02-07T16:29:06+00:00","author":{"@id":"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/33fe44add3e60b2b3be9661c8969b05f"},"description":"As part of Solutions Review's Premium Content Series, Jim Barkdoll of Axiomatics shares some expert insights on IAM, RBAC, and ABAC.","breadcrumb":{"@id":"https:\/\/solutionsreview.com\/identity-management\/its-time-to-think-beyond-iam-solutions\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/solutionsreview.com\/identity-management\/its-time-to-think-beyond-iam-solutions\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/solutionsreview.com\/identity-management\/its-time-to-think-beyond-iam-solutions\/#primaryimage","url":"https:\/\/solutionsreview.com\/identity-management\/files\/2022\/01\/Thinking-Beyond-Identity-and-Access-Management-1.jpg","contentUrl":"https:\/\/solutionsreview.com\/identity-management\/files\/2022\/01\/Thinking-Beyond-Identity-and-Access-Management-1.jpg","width":800,"height":400},{"@type":"BreadcrumbList","@id":"https:\/\/solutionsreview.com\/identity-management\/its-time-to-think-beyond-iam-solutions\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/solutionsreview.com\/identity-management\/"},{"@type":"ListItem","position":2,"name":"It\u2019s Time To Think Beyond IAM Solutions"}]},{"@type":"WebSite","@id":"https:\/\/solutionsreview.com\/identity-management\/#website","url":"https:\/\/solutionsreview.com\/identity-management\/","name":"Identity and Access Management Solutions | Solutions Review","description":"Evaluating Enterprise IAM Software, Identity Governance & Access Control Tools.","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/solutionsreview.com\/identity-management\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/33fe44add3e60b2b3be9661c8969b05f","name":"Jim Barkdoll","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/image\/","url":"https:\/\/solutionsreview.com\/identity-management\/files\/2023\/12\/jim-barkdoll.jpg","contentUrl":"https:\/\/solutionsreview.com\/identity-management\/files\/2023\/12\/jim-barkdoll.jpg","caption":"Jim Barkdoll"},"description":"Jim Barkdoll is a data security veteran with a successful track record of helping enterprise customers solve challenges they face in protecting their critical assets. Jim has over 25 years of business development and executive leadership experience in successfully growing teams and revenues within channel, SMB, midmarket and enterprise accounts. Prior to Axiomatics, Jim served as CEO of Stealthbits before selling it to Netwrix. Jim also served as Titus\u2019 CEO and executed successful transactions to Blackstone and ultimately to HelpSystems, a TA Associates company.","sameAs":["https:\/\/www.axiomatics.com\/","https:\/\/www.linkedin.com\/in\/jimbarkdoll\/"],"url":"https:\/\/solutionsreview.com\/identity-management\/author\/jbarkdoll\/"}]}},"_links":{"self":[{"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/posts\/5767"}],"collection":[{"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/users\/81"}],"replies":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/comments?post=5767"}],"version-history":[{"count":0,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/posts\/5767\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/media\/5786"}],"wp:attachment":[{"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/media?parent=5767"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/categories?post=5767"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/tags?post=5767"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}