We just completed participating in the Gartner Identity and Access Management Summit in Las Vegas. The show is always great for us from the standpoint of talking to lots of people that are facing IAM challenges and learning from Gartner what the future holds and best practices for making IAM work. We (the Dell One Identity team) get the opportunity to present a “solution provider” session at the show, and as in years past, we decided to bring a few customers onto the stage and let them talk about their IAM projects – warts and all.
The topic of our session was: “A Recipe for Identity and Access Management Success”. Our customer representatives were:
- Todd Werner, Manager of Identity and Access Management at Brown Forman
- James Jursch, Sr. IT Engineer – GIS Security Services at Cisco
- Eddie Parrish, Chief Information Security Officer at New Hanover Regional Medical Center
Each has a significant IAM project and each has experienced success in that area. They shared the lessons they learned as they selected, implemented, and used an IAM solution (coincidentally all from the One Identity family of IAM solutions) to solve some significant security challenges.
Werner talked about Brown Forman’s need to automate user provisioning and de-provisioning specifically with integration with SAP HR. They key to Brown Forman’s success was getting the business to buy-in to the IAM program and choosing the right implementation partner. As a result of “doing IAM right” Werner reports a 50% reduction in IT workload for IAM-related tasks and the ability to redirect staff members to other critical projects.
Jursh, discussed Cisco’s critical need for a comprehensive and flexible privileged account management program specifically to avoid the negative impact of all the high-profile breaches that permeate the news. He felt that the key to the success of their PAM program was due to getting universal buy-off on the program’s scope and avoiding the temptation for scope-creep – saving expanded scope for phase two.
Parrish, has already experienced two failed attempts at enterprise provisioning (and more importantly de-provisioning) and finally got it right when he was able to get complete buy-in from the business and the hospital’s board of directors. Although his project is in the early stages, he already reports automation of a significant amount of previously cumbersome and error-prone manual processes.
One thing that the conference has made abundantly clear is that IAM success is more about strategy and practices as opposed to technology. We are very proud of our technology, those solutions can only deliver on promised benefits when the project is well defined, the obstacles of business-buy-in have been overcome, and the expectations are realistic with an achievable timeline.
To learn more download our e-book Ensuring the Success of your IAM Project