simeiosol's Blog

Compliance Management ensuring that the actions of a set of people comply with a set of rules. The 1st rule:  publish the set of rules, and punish people who transgress them. The 2nd rule: publish an intermediate set of policies and procedures which comply with the rules, and ensure that people follow the policies and procedures.

IT-GRC – Information Technology – Governance, Risk & Compliance:-

The impacts and implications of compliance management, risk management and access governance on information technology are significant and pervasive.

IT Governance establishes decision structures and tracking mechanisms.

IT Risk Management helps mitigate adverse effects and identifies opportunities.

IT Compliance establishes and monitors IT controls.

The manual User Certification, Identity Audit, Identity Attestation, Identity Certification are now replaced with the automated Sun Role and Compliance Manager(SRM) solution with little scope for errors and the certification is now completed in a timely manner. Moreover, the administrator has control over the users and their access requirements. Additionally, the client’s requirements of customized reports and internal naming conventions were met providing a smooth transition to the SRM certification process. As per the client’s request, dependent applications within a namespace were defined which helped the client to manage the access to applications in a much more secure manner.

Simeio Solutions is a professional services and management consulting company with a strong collective background in implementing identity and role based access control solutions, supporting Fortune 1000 clients such as Agiliance, CA, Computer Associates, Oracle, Radiant Logic, Sun, SailPoint, Novell and IBM.

Simeio offers the first in industry on demand DirectAXs – a one-stop SaaS solution for all your Identity and IT-GRC requirements. Our ICOMAXs, ROMAXs and GRCAXs offering encompass every possible solution in the IAM and IT-GRC space for today and the future. We have two types of solutions on DirectAXs depending on your requirements. Simeio Solutions brings along an intelligent vision of identifying the sweet spots in business process definition and Reengineering. We believe finding the correct identity management product is just one step of several. Key to the company’s success is analyzing and implementing sustainable processes.

As part of their ongoing Sarbanes-Oxley compliance efforts, a global Broadcast Service Provider determined they needed to fully assess their process for managing user access to company resources, and to develop a sustainable future state process that could be quickly implemented to manage the entire life-cycle of enterprise identities within the organization.  

The client defined the following business drivers for this project: 

*Comply with the user access related provisions of the Sarbanes Oxley Act

*Increase operational efficiency by automating user access tasks and allowing delegated administration of users

*improve security by incorporating a Role Based Access Control (RBAC) structure

*Improve customer service levels by reducing the time to approve user requests

*Centralized and aggregated data store for all identities in SOX critical applications and one global view for a User Object.  

     The client chose a solution consisting of Identity Manager from CA and a Role Management product from Simeio partners to meet their business needs. The solution provided the client with a platform to manage the user access process for their 50,000 employees, contractors and partners. The solution delivered Role Engineering and Identity Auditing capabilities that allows the client to manage the full life-cycle of their enterprise identities, from role definition through certification by managers and verification by auditors. The key differentiator of this solution was that it not only provided detailed auditing capabilities, but also served as a common platform where Managers could apply corrective actions to policy violations before certifying compliance reports, and for Auditors to view evidence that adequate controls have been applied. The solution was used as an aggregation engine for SOX critical applications to achieve correlation of identities from multiple disparate data sources in a centralized store in Identity Manager.  

 Simeio Solutions is a professional services and management consulting company with a strong collective background in implementing identity and role based access control solutions, supporting Fortune 1000 clients.We offer a unique perspective, utilizing leadership team experience and best practice knowledge gained at the client side of multiple identity management implementations. This perspective is appreciated by our clients as it adds substantial value when defining their own sustainable operations processes, developing roll out plans and building collaborative successful project teams.