Identity and access management is an important part of any enterprise security plan, because in today's digital economy, it is inseparable from enterprise security and productivity. Stolen user credentials are often the entry point to the enterprise network and its information assets. Enterprises use identity management to protect information assets from increasing extortion software, criminal hacking, phishing and other malware attacks. Cybersecurity ventures has predicted that the loss caused by global extortion software will exceed US $5 billion in 2017, an increase of 15% over 2016. In many enterprises, users sometimes have more access than they need to work. The robust Iam system can implement user access rules and policies and add an important layer of protection to the whole enterprise.

Sarbanes Oxley Act stipulates that companies and enterprises shall be responsible for the access control of customer and employee information. The recently issued general data protection regulations (gdpr) has stricter requirements on security and user access control. Enterprises protect the personal data and privacy of EU citizens, affecting every company doing business in the EU or having EU citizens among customers, There are also corresponding identification requirements in the basic requirements of hierarchical protection. Businesses covering the Chinese mainland, the European Union and the US listed companies all need to abide by the above bills and regulations.

Industry demand

Palladium summarized the pain points encountered by enterprises in identity authentication and access security as follows:

1. Many application systems are independent of each other, forming an information island with complex management, which is not conducive to security control;

2. Multiple authentication methods coexist, and there is a lack of unified authentication management platform;

3. There is no unified account management platform, and the new accounts, permission changes and account deletion of multiple application systems are completed manually, which not only has low efficiency and high time cost, but also is prone to omissions, resulting in potential access hazards;

4. A unified enterprise portal is needed to complete fast and convenient access to business resources in combination with single sign on;

5. Employees need to memorize accounts and passwords of multiple application systems, resulting in weak passwords, which are easy to be exploded and hit in the production process;

6. The security level of the business system is uneven, the code vulnerability rectification is difficult and the cost is high;

7. Lack of audit means for employees to access the business system.

1. Establish a unified application security delivery platform for customers, provide a unified operation entrance for the core business system, and realize single sign on. All business and operation and maintenance personnel first log in to the Iam platform to conduct business operations on the system to realize unified identity management.

2. Reasonably allocate the specific situation of users' use of resources in the business system, realize the legal access of different users to different entity resources, and eliminate illegal access and unauthorized access. The permissions of each business personnel are effectively controlled, and the policy is fine-grained to the accessible devices and available system accounts and application accounts.

3. The operation contents of business personnel are completely recorded by Palladium Iam platform, which not only meets the audit requirements of regulatory authorities, but also provides technical support for accidents caused by misoperation and illegal operation.

4. Provide effective audit reports and original and accurate operation log records for the regulatory department, which will help to improve the organization's it internal control and external audit system and enable the organization to successfully pass the IT audit.