Unifying Identity Management And Access Control

Download PDF version Contact company

For many companies, the current state of their access control infrastructure is best described as being fractured

For many companies, the current state of their access control infrastructure is best described as being fractured. Multiple disparate physical and logical access control systems and cumbersome manual processes are all too common. Standardizing one system throughout a company might address part of the problem, but replacing multiple systems may require large amounts of capital.

A long-term access control issue for any company how to manage its identities. It is important to ensure that individuals only have permission to enter authorized areas, both for the sake of security and compliance. With large numbers of employees, geographically distributed campuses and ever-changing authority levels, keeping permissions current is an important issue to address. Sophisticated identity management software can enable a single identity to be created for each individual across any organization. Integrating physical security systems with logical security systems creates software which can ensure synchronized and policy-based on-/off-boarding of identities.

Identity management challenges and opportunities

Although effectively managing identity can be a challenge, it also provides many opportunities for any organization. These include enabling human resource and LDAP-format databases to connect instantly with physical access control systems and to receive real-time reports across any number of physical access control systems. It is also possible to manage badge/credentialing systems more efficiently and to track visitors and third-party contractors and link them to an internal identity. Other new opportunities include the ability to correlate identities with alarms and events and to grant access based on a risk profile of an identity or location. Access can also be granted based on training or other special requirements.

...effectively managing identity can be a challenge, but it also provides many opportunities for any organization

All types of identities can be managed with advanced software, including permanent and temporary employees, contractors, service providers and vendors. Users can manage details of a physical identity, such as biographic and biometric information, the results of security checks and historical usage. Software also enables various access levels to be assigned to an identity across multiple physical access control systems and can specify details such as time of scheduled access.

An urgent termination feature can allow authorized personnel to immediately deny physical access. In addition to aggregating access level information from various systems, the administrator can manage details such as risk level, area owner, multiple approvers and prerequisites for access, such as training. The system can also provide audit trails of all transactions.

From a risk perspective, automated identity management systems enable organizations to lower liability and maximize protection of assets. Furthermore, systems promote standardization within a security organization and implementation of best practices.

Cost is another important benefit. A unified, software-based approach to identity management reduces the need for labor-intensive and repetitive processes.

Regulatory compliance needs incentivize effective identity management

Keeping permissions current is an important issue to address

A proliferation of regulatory requirements provides an additional incentive to manage identities more effectively. End-user companies are subject to a growing number of regulations that require verification of identities and access to facilities and information. For example, all corporate entities are subject to Sarbanes-Oxley compliance, which requires management of user identities and access to information while ensuring its integrity. Vertical markets have their own specific regulations, such as the CFATS, anti-terrorism requirements of the petrochemical industry, Gramm-Leach-Bliley which protects information in the finance arena, HIPAA privacy rules for healthcare and NERC/FERC security regulations in the energy sector. Governments face compliance with FIPS 201/HSPD-12 credentialing requirements and airports are regulated by TSA. Banking companies seek to comply with Basel II requirements that include risk management and pharmaceutical companies are regulated by the Drug Enforcement Administration. Centralized identity management systems allow managers to easily monitor regulatory infractions and proactively enforce security policies and rules.

Software systems enable compliance initiatives to be automated in real time to create a transparent, traceable and repeatable global process to manage governance and compliance. To comply with regulations takes strict governance of security controls across both physical and IT infrastructures and management of risk on a holistic level.

Download PDF version Download PDF version

Author profile

Ajay Jain President and CEO, Quantum Secure, Inc

Related companies
Quantum Secure, Inc

Related links
Articles by Ajay Jain

View all news from
Quantum Secure, Inc

In case you missed it

Security & Safety Things Becomes Azena, Underscores Advances In Smart Camera Platform Development

Security & Safety Things is announcing that it has rebranded to Azena, a new brand name that underscores the company’s corporate growth and leading-edge smart camera platform and positions it for the next chapter in its ambitious plans for redefining video analytics. With a growing slate of global customer and partner collaborations and expanding geographic coverage, Azena will continue to increase the value of its platform for systems integrators and end customers. More than 100 AI-enabled video analytics apps Since its market introduction in 2018, Azena has grown to more than 120 employees spread across its headquarters in Munich, its technology Innovation Accelerator facility in Pittsburgh, and another development hub in Eindhoven, The Netherlands, all supporting the Azena open platform for smart cameras.Integrators can flexibly add or change apps on one or multiple cameras as needed for their customers The Azena platform is comprised of an open operating system for cameras and an Application Store with nearly 100 Artificial Intelligence (AI)-enabled video analytics apps. It enables smart cameras to simultaneously run multiple apps directly on the device. Integrators can flexibly add or change apps on one or multiple cameras as needed for their customers and use any of the 15 cameras from six different manufacturer partners in a variety of form factors.“Systems integrators play a crucial role in connecting the video analytic edge devices on our platform into the larger system landscape for a truly data-driven approach to security, operational intelligence and automation,” said Hartmut Schaper, chief executive officer, Azena. “Our new identity as Azena positions us for improved name recognition and market presence as we continue to add functionality and the potential for expansion into new markets for our systems integrator partners.” More than 40 use cases in 25+ verticals The Azena Application Store features apps that address more than 40 different use cases in at least 25 different vertical markets, ranging from traditional perimeter security, retail loss prevention and occupancy management to stadium security and even the unique needs of aquaculture. Some examples of use cases include: One U.S. professional hockey team, the Pittsburgh Penguins, is using the Azena platform to monitor crowding at its stadium entrances, license plate recognition for more efficient stadium parking and heat mapping for improved layouts of its fan merchandise retail outlets. An oil drilling company is deploying smart cameras running the Azena OS so operations staff can remotely monitor any pumping disruptions in the oil fields. A chemical plant is monitoring its locations for the presence of smoke to enhance workplace safety measures Collaboration with Proseguy Systems integrator Prosegur, one of the world’s largest security companies, has announced its collaboration with Azena to use analytics on the edge as part of its Security Operations Center as a service offering. By deploying more sophisticated analytics to measure activity or automatically verify alarms, incoming alarm traffic from customer sites can be prefiltered, reducing the number of alarms needing to be handled by human operators in the SOC, enabling a more appropriate response.Integrators will find a host of other new features in the Azena platformIntegrators will find a host of other new features in the Azena platform designed to leverage device management capabilities and remote access for diagnosis and maintenance to cameras on a customer site, using Azena’s digital twin architecture. Other benefits include: Ability to run all the analytics apps from the Azena Application Store on the video stream of existing IP cameras by means of a small appliance from one of the camera manufacturer partners, bringing AI to already installed video systems Wide range of integration options to connect VMS systems, dashboard software, access systems, other apps or other cameras to support the creation of sophisticated end-to-end solutions Option for integrators to build and deploy custom solutions with apps available only to them and their customers via the Azena Application Store Ability to securely and remotely connect to a customer camera without a VPN A new integration assistant that quickly builds middleware for custom integrations between Azena components and third-party software and hardware Opportunity to negotiate directly with app developers on bulk pricing Standardized terms of use that can be adopted by all applications in the Application Store

What Are New Trends In Residential Security?

Residential security and smart homes are rapidly changing facets of the larger physical security marketplace, driven by advances in consumer technology and concerns about rising crime rates. During the COVID-19 pandemic, many people spent more time at home and became more aware of the need for greater security. As workplaces opened back up, returning workers turned to technology to help them keep watch over their homes from afar. We asked this week’s Expert Panel Roundtable: What are the trends in residential security in 2021?

How Businesses Can Protect Their People In The New Age Of Work

Ensuring employee health and safety remains a key priority for organizations this year, especially as we see COVID-19 cases continue to rise in different areas of the world. As an ongoing challenge, COVID-19 has shifted the priorities of many organizations. In fact, “improving health and safety for employees” is the top strategic goal this year of manufacturing and logistics organizations in the U.S. and U.K., according to research conducted by Forrester on behalf of STANLEY Security. But as we think about reopening and as hybrid workforce models and “workspace-on-demand” approaches rise in popularity, leaders need to consider implementing the right technologies to help ensure a safe return to the office. This means investing in health, safety, and security solutions that can help leaders protect their people. The intersection of security technology and health and safety There’s no doubt that the scope of security has expanded in the wake of the global pandemic. What was once an area governed by a select few security or IT professionals within a business has now become a crucial company investment involving many key stakeholders. The role of security has expanded to encompass a broader range of health and safety challenges for businesses Additionally, the role of security has expanded to encompass a broader range of health and safety challenges for businesses. Fortunately, security technologies have made significant strides and many solutions, both existing and new, have been thrust forward to address today’s biggest business challenges. Investment in security technology It’s important to note that businesses are eager to adopt tech that can help them protect their people. Nearly half (46%) of organizations surveyed by Forrester report that they’re considering an increasing investment in technology solutions that ensure employee safety. Technologies like touchless access control, visitor management systems, occupancy monitoring, and installed/wearable proximity sensors are among some of the many security technologies these organizations have implemented or are planning to implement yet this year. Facilitating a safe return to work But what does the future look like? When it comes to the post-pandemic workplace, organizations are taking a hard look at their return-to-work strategy. Flexible or hybrid workforce models require a suite of security solutions to help ensure a safer, healthier environment More than half (53%) of organizations surveyed by Forrester are looking to introduce a flexible work schedule for their employees as they make decisions about returning to work and keeping employees safe post-pandemic. Such flexible – or hybrid – workforce models require a suite of security solutions to help ensure a safer, healthier environment for all who traverse a facility or work on-site. One of the central safety and security challenges raised by these hybrid models is tracking who is present in the building at any one time – and where or how they interact. Leveraging security technology With staggered schedules and what may seem like a steady stream of people passing through, it can be difficult to know who’s an employee and who’s a visitor. Access control will be key to monitoring and managing the flow of people on-site and preventing unauthorized access. When access control systems are properly integrated with visitor management solutions, businesses can unlock further benefits and efficiencies. For instance, integrated visitor management systems can allow for pre-registration of visitors and employees – granting cellphone credentials before people arrive on-site – and automated health screening surveys can be sent out in advance to help mitigate risk. Once someone reaches the premises, these systems can also be used to detect the person’s temperature and scan for a face mask, if needed. We will likely see these types of visitor management and advanced screening solutions continue to rise in popularity, as 47% of organizations surveyed by Forrester report that they’re considering requiring employee health screening post-pandemic. Defining the office of the future A modern, dynamic workforce model will require an agile approach to office management. It’s imperative to strike the right balance between making people feel welcome and reassuring Businesses want to create an environment in which people feel comfortable and confident – a space where employees can collaborate and be creative. It’s imperative to strike the right balance between making people feel welcome and reassuring them that the necessary security measures are in place to ensure not only their safety but also their health. In many cases, this balancing act has created an unintended consequence: Everyone now feels like a visitor to a building. Protocols and processes With employees required to undergo the same screening processes and protocols as a guest, we’ve seen a transformation in the on-site experience. This further underscores the need for seamless, automated, and tightly integrated security solutions that can improve the employee and visitor experience, while helping to ensure health and safety. Ultimately, the future of the office is not about what a space looks like, but how people feel in it. This means adopting a “safety-always” culture, underpinned by the right technology, to ensure people that their safety remains a business’ top priority.