07 / 29
IDM Suite Overview
Complex entitlements and credentials
Security / Internal Controls
Orphan accounts (no owner).
Dormant accounts (unused).
Segregation of duties (fraud risk).
Inconsistent, unreliable approvals.
Stale, inappropriate rights.
Weak user passwords.
Inadequate controls over privileged accounts.
Forgotten / locked out passwords.
Security change requests.
Ambiguous problem descriptions.
Who has what access rights?
When and how were rights provisioned?
Weak link between IDs and people.
Do entitlements match business need?
Too many passwords, login prompts.
Obscure change request forms.
Slow approvals, fulfillment.