Evolving regulatory compliance requirements can be a major headache for the
IT teams responsible for identity and access management (IAM). Sarbanes
Oxley, the wide range of privacy regulations and other federal requirements,
have transformed IAM from a problem that keeps the chief information security
officer up at night into a true business concern shared by all company
executives. Knowing who has access to what information within your
organization - and whether they should have that access - is a deceptively
complex issue that has the potential to drive a wedge between even the
healthiest of relationships across the business.
On the surface, it may seem as though the nuts and bolts of IAM should reside
in a company's IT department. This is because there are many islands of
information stored in databases across the business that are managed and
administered by th... (more)