IAM is Linked to Regulations
- Many regulations, in many jurisdictions, call for internal controls:
- This implies effective AAA: Authentication, Authorization and Audit.
- Every system already has AAA.
- The weakness is bad user/access data.
- The missing link is business process:
- Appropriate access rights.
- Timely access termination.
- Effective authentication.
- Identity and access management process and technology are needed to bridge the gap between business requirements and AAA infrastructure.