| | APRIL 2022ENTERPRISE SECURITY8IN MY OPINIONHow to Build A Successful Identity and Access Management (IAM) Program?By Carlos Rodriguez, Director, IT Security & Risk, Citizens Property Insurance"Change is hard at first, messy in the middle, & gorgeous at the end"Robin SharmaA successful Identity and Access Management (IAM) program will support your efforts combating cybercrime, but it may prove disruptive to your organization as it requires significant changes in technology, processes, and the way employees interact.User access is what brings together the people, devices, applications, and data that we work with every day. But user access is also the most common area of attack. While IAM technologies have greatly advanced to help with detection, prevention, and response to identity attacks, employees must be brought along for any program to be successful. Here are some key areas to consider to deliver your IAM Enterprise Program.· Developing an Enterprise Strategy. Start by identifying key stakeholders and process owners that you will bring into the conversation to identify their successes and concerns. Your goal is to listen and lead them to conversations that can uncover how they can be more efficient while managing risk. Keep in mind that this group is likely diverse and includes members who have very different needs which may include:o Internal staff who access resources to perform their jobo Partners who need access to resources to support your businesso Product development teams and Technology teams who support the business;o Customers who access your product or services. · Define clear roles and responsibilities. Make decisions early on how you will structure the program; who will lead; who delivers; and who will operate the resulting set of solutions and processes. You will have to identify leadership, delivery and operational roles for supporting the implementation and day-to-day operations of the IAM infrastructure and processes. How you will approach this depends on your organizational structure and culture and many of these roles will likely be distributed across operational teams. Here are some Carlos Rodriguez
< Page 7 | Page 9 >