IAM is Linked to Regulations

Many regulations, in many jurisdictions, call for internal controls:
- This implies effective AAA: Authentication, Authorization and Audit.
Every system already has AAA.
- The weakness is bad user/access data.
The missing link is business process:
- Appropriate access rights.
- Timely access termination.
- Effective authentication.
Identity and access management process and technology are needed to bridge the gap between business requirements and AAA infrastructure.