Tuesday, May 3, 2005 , 9:00 am Eastern Time

Press Release

Eurekify Sage Survey Used to Verify Compliance with Internal Policies and Industry Regulations.

Tel Aviv , Israel - Eurekify wishes to report successful trials using its flagship Sage DNA solution for the automated verification of compliance with internal policies and industry regulations.

Over the past 2 years, Eurekify has created and led the space of Role Management software solutions. Most of the applications of Eurekify's flagship Sage Discovery & Audit (DNA) have been around the construction and on going management and adaptation of role definitions for Role-Based Identity Management. In this area, Sage DNA complements and empowers all IdM software suites.

In a new application, Sage DNA is used to help organizations achieve compliance with internal policies and regulations, to demonstrate such compliance, and to automate the repeated demonstration of compliance periodically.

Several regulations, and indeed proper governance, require modern organizations to prove that they set policies for access rights, can manage the access according to those policies and are capable to enforce them. In addition, that they are required to prove that they have adequate internal controls. Examples of such regulations include Sarbanes-Oxley (SOX), HIPAA, FERC, GLBA, and privacy regulations. In addition, many organizations must comply with industry-specific regulations, and with specific internal policies and segregation of duties principles.

Eurekify Sage DNA offers a new Sage Compliance module. This new module, provided as part of the Sage Audit solution, allows organizations to define policies comprising of sets of business constraints and segregation of duty rules. These policies are formulated independently of a specific Sage DNA configuration and can then be applied to different configurations. Policies can even be authored by an expert as templates, and applied to individual companies.

Sage DNA provides mechanisms for verifying these rules against the de-facto privileges, and to document, track, and monitor any and all violations. In addition, Sage makes it possible to automate such verification on a periodical basis, and to compare the results over time. An organization may implement one or more Sage DNA policies for each and every regulation, internal policy, etc.

In several recent trials, leading auditing firms have used the Eurekify Sage DNA Compliance Survey to test a variety of business policies and segregation of duty rules in a number of leading banking and insurance companies. The process usually included analyzing privileges to reveal violations, and to pin point erroneous and/or improper privileges assignments. Invariably, Sage DNA was able to detect material violations, which were then reviewed, corrected, and tracked. In some cases, outright flaws within the infrastructure and/or provisioning processes were detected and are now being fixed. Sage's pattern-based auditing functions were also used to detect out-of-pattern and suspect privileges.

In addition to compliance tests, a typical Sage Survey offers organizations an opportunity to analyze privileges from one or more platforms, identify exceptions and deviations, and use Sage's famed role engineering capabilities. Organizations that are doing their first steps in their Identity Management roadmap will find the Survey invaluable to gain a better understanding of their own IdM needs and priorities, and a great tool to build their IdM business case.

Eurekify partners offer the Sage Survey as a short and inexpensive service, usually taking no more than one week. The analysis is performed offline, therefore not interfering with the organization's day-to-day operations. Sage can be used to analyze privileges from virtually any system and application, including homegrown systems.

About Eurekify:

Eurekify provides leading role management solutions that are critical for successful Identity Management implementations. Organizations and specialists worldwide recognize that much of the ROI, security, and manageability of IdM is directly linked to the ability to implement role-based management. Eurekify's Sage software provides large organizations with the ability to implement role-based management in a way that best fits their business processes and their IdM deployment plans. Utilizing advanced pattern-recognition technology, Sage is unique in its capabilities and is regularly recommended by leading IdM implementers worldwide. Sage includes additional tools that enable automated enforcement of internal policies and compliance with regulations.

For more information please contact us