We will help you identify the main benefits of an IAM project and clearly align it with the objectives of the organization.
Identity and Access Management (IAM) and Identity and Access Governance (IAG) have become key elements of an organization's security stance. There are countless reasons why an organization would choose to start an IAM or IAG project. For those who start this journey, one thing is crucial: to be completely transparent about the justifications and the objectives of the organizational expenses for such a project. At the same time, understanding the common pitfalls and tips before starting your project will increase your success and overall effectiveness. We will help you identify the main benefits of an IAM project and clearly align it with the objectives of the organization.
Preconceived ideas and risks to avoid before starting your project
An IAM or IAG project does not only refer to the deployment of a technical product. Many functions and departments of the organization in general are involved in the implementation. It is a more functional and organizational project whose operation can
fail if not enough attention is paid to a series of points. This section
It will help organizations identify preconceptions and pitfalls and how to avoid them.
RECOMMENDED IDEA
"IAM is a magic bullet"
Unfortunately, there is nothing magical about IAM. You can not use it as
a magic wand to handle fuzzy organization lines, incoherent definition of job profiles or technical degeneracy that makes applications incompatible with current standards.
To avoid disappointment, you should:
Evaluate your "IAM maturity"
Establish a roadmap to increase this maturity
Specify the requirements for each step to take full advantage of the IAM
For example, an IAM project will not integrate all SI applications within its scope, at least in the early phases of the project, such as the account and rights component.
As such, attention must be paid to stop. Therefore, you should pay attention to failures such as "IAM stops where the SI starts". It must be realistic, communicate clearly about the scope of your project, including
in the initial stages, to avoid that. If necessary, you should also be prepared to adapt to market technologies, internal processes, budget, etc.
RECOMMENDED IDEA
"Manage the project yourself to save time and have less headaches"
The implementation of this type of projects often has an impact on your entire organization. IAM is a multifunctional project that can disrupt the organization. For this reason, it is essential to communicate and involve all interested parties. This applies to commercial lines, human resources, general
the management, the IT department, the management controllers, the auditors, etc. The best approach is to make allies, find arguments that concern them and reach people with something at stake from the beginning.
TRAP:
"Buy the software before
You have even defined your need "
This is one of the biggest mistakes that organizations make when implementing the IAM project. For the most part, IAM packages do what they are designed for, but that does not mean they do everything in
in the same way, with the same functional coverage.
It is important not to embark on a particular solution as a group option, for example, or because it is reduced, or on the basis of too subjective advice, before having a good overview of what is expected in the short term. , in the medium and long term of AMI.
For example, it is easy to understand why a small affiliate does not necessarily want to use and deploy inappropriate group solutions.
from a functional and technical perspective. If the IS is of a reasonable size, it may be better to consider the manual procedures to begin and respond to project priorities.
However, once you have chosen your solution, the focus must change. It is essential that you examine exactly how the solution works, perhaps seeking the help of a partner, so that your plans are
according to the general capabilities of the solution. This will limit special developments. In addition, features that are not taken into account initially may be available and make it easier to adapt to certain use cases.
TRAP:
"I want to do everything at the same time"
Pay close attention to the initial scope. You must forget to implement your IAM project at once. An iterative approach
is by far the best course of action: break down into functional modules, geographical or organizational units, user populations or fields of applications
EmoticonEmoticon