| |
|
| |
| |
 |
| |
| “We have used Eurekify's Sage to build a few roles for thousands of users. It is clearly an easy method to create roles and maintain them”, Peter Zuenti, Consultant. |
|
|
| |
 |
| |
| “Sage Discovery and Audit provides a quick and easy insight of the authorizations within a company’s infrastructure. Sage helps customers realize the benefits of RBAC”, Koos Jennekens, Senior Consultant. |
|
|
| |
 |
| |
| “Sage provides instrumental tools for managing Roles. With Sage, our customers can very simply and quickly add new Roles or modify current ones according to organizational demands”, Franco Rasello, CEO. |
|
|
| |
|
| |
| “In order to control user permissions as well as being compliant with regulations, the Identity Management solution alone is not enough. The right way to start with a provisioning solution should be optimizing Roles”, Franco Rasello, CEO. |
|
|
| |
 |
| |
| "In my experience, role-based management is critical for achieving the true benefits and ROI of Identity Management implementation.", Marc Sel, Director - Security Solutions, PwC Belgium. |
|
|
| |
 |
| |
| “We have made incredible leaps forward by applying Eurekify technology to speed up the process aimed at pinpointing user profiles and roles”, Rob Bus, Managing Director. |
|
|
| |
 |
| |
| “Sage is the perfect tool for assessing specific needs within a large organization. It is also important for attaining administrative efficiency, reduce employee downtime and to improve security”, Ophir Zilbiger, CEO, Secoz Ltd. |
|
|
| |
 |
| |
| “Role definition applications can significantly reduce the cost of the process (by 40-60% according to a leading systems integrator). To our knowledge, Eurekify and Beta Systems are the only vendors in this space.”, Michael Tieu and Andrey Glukhov. |
|
|
| |
 |
| |
| “From Years of experience in implementing enterprise user administration systems in large environments, we strongly recommend a structured and business-aligned approach to the implementation method...”, Jesper Oestergaard, CEO. |
|
|
|
|
|
| |
|
 |
| |
|
The Challenge
Enterprises are struggling with the implications of general
regulations such as Sarbanes-Oxley (and its European version); ISO, etc.;
industry regulations such as HIPAA, PCI, GLBA, FERC, etc.;
and many local and national regulations. When it comes to IT privileges, most regulations mandate verification and demonstration of proper IT controls. This is not a small challenge when it comes to several tens of diverse systems. Solutions range from periodic certification of access rights by business managers, to automated detection of violations, to preventive verification of compliance not only with regulations but also with organizational policies.
Overview
Eurekify Enterprise Compliance Manager (ECM), formerly known as Eurekify Sage ECM, is part
of the Eurekify ER&CM suite. ECM provides privileges certification capabilities in a variety of ways, but goes beyond simplistic certification to automate detective and preventive compliance verification. ECM provides advanced tools to ease and speed the creation of a compliance model based on a rich set of IT controls. ECM comes with tools and processes for periodic verification and demonstration of compliance. ECM can be configured to provide detective and preventive compliance verification services to provisioning and help desk processes.
Common Compliance Management Processes
- Periodic (detective) verification of and reporting on compliance with an accepted model of proper IT controls
- Real-time (preventive) tests for requested access rights to identify potential violations of accepted compliance model, and/or high-risk assignments
- Certification of access rights by business managers and owners
- Other privileges quality maintenance processes
How It Works and Main Capabilities
 Easy to deploy and master by analysts, auditors, and business managers- Easy to set up, and extremely flexible certification campaigns and related business processes - any system/application and across systems; any level of granularity; entities and items selectable based on virtually any criteria.
- Rapid modeling of compliance and risk models (rich IT controls, SoD, and risk assessment templates) – any system and across systems; any granularity, etc.
- Highly effective compliance verification, reporting, and dashboarding tools and processes
- Preventive what-if compliance simulation and testing in real-time, which can also be easily integrated into any external system (e.g., provisioning processes, helpdesk review processes, etc.)
- Rapid privileges consolidation and account correlation via Eurekify UUID tool
- Privileges cleanup and quality control via Eurekify EQM
- Role-based models for compliance can be more easily created using Eurekify ERM
When to Use
- In Governance, Risk, and Compliance (GRC) projects
- In Identity Management and Automated Provisioning projects for detective and preventive compliance verification and reporting
- To establish and verify policies in individual platforms, systems, and applications
Eurekify ECM provides the fastest and most effective road to regulatory compliance and true GRC.
|
| |
| |
|
|
