Identity, Security, and Access Management (ISAM)
A special kind of systems integration, ISAM provides 'one source of truth' for authentication, authorisation & access to online resources, and management of the identity lifecycle across your organisation's many systems, from initial provisioning to deactivation and final archiving. A variety of tools and techniques are available to manage this global transformation in ways that enhance the security of your systems and protect your organisation against exposure of confidential information or exploitation of your computing resources by criminal networks, disgruntled former employees, or even internal users with malicious intent.
Project Studio Consulting has the broad-based experience to ensure that your ISAM project makes allowances for the technical needs of identity integration across not only enterprise applications, network shares, and virtual private networks, but also to account for the need for controlling access to web applications, mapping identity to specific content management roles/permissions, restricting specially-licensed desktop applications to specific users, or even controlling log-ins to specific computers.
Project Studio Consulting can manage development of customised Identity, Security, and Access Management solutions based on Microsoft, Sun/Oracle, Novel or reliable open-source technologies. In many cases a heterogeneous solutuon using best-of-breed components is actually the most secure option. Or, when seeking to maximise the advantage of a particular technology platform, Project Studio can provide the necessary strategies to maximise the benefit and minimise the risk.
The same ISAM tools and techniques can be used to help prepare your organisation's systems to move 'into the cloud.' Whilst the cost benefits of infrastructure as a service (IAS) are indisputable, many organisations are reluctant to store their sensitive data on servers which are not under their direct control, and may even be located in other countries where privacy and IP-protection laws do not meet the required standard. Commonly available encryption technologies which could answer these reasonable concerns are not part of the standard offerings of cloud-based service providers. Even when agreed service levels are clear, being in the legal right does not guarantee access to your data in the event of outage. It takes a project manager knowledgeable of the details of ISAM implementation and the range of architectures and service levels possible to ensure that a cloud-based solution does not compromise the security of you organisation's operations or its cause harm to its reputation. Knowing the right questions to ask your vendors is as important as the persistance necessary to get the answers.