Presentation is loading. Please wait.

Presentation is loading. Please wait.

Campus Security and Identity Management in a Banner World

Similar presentations

Presentation on theme: "Campus Security and Identity Management in a Banner World"— Presentation transcript:

1 Campus Security and Identity Management in a Banner World
Aaron Perry November 23, 2009

2 Agenda What is Identity Management? What we typically see in Higher Education institutions Challenges faced by Higher Education Institutions IAM Business Drivers & Benefits Higher Education IAM Architecture Banner IdM Case Studies Q&A

3 Setting the Stage… What is Identity Management?
A set of processes and a supporting infrastructure for the creation, maintenance, and use of digital identity - 80% process - 20% supporting infrastructure Keys to successful implementation… Support and involvement at all levels (Provost, Registrar, Dean, CIO, Process Owners, System Administrators, etc.) Governance and the authority to enact decisions Identification and Management of “Sources of Truth”

4 IAM Solutions Address Top Issues faced by Higher Education Institutions
IAM can improve security, reduce costs, and protect privacy Security breaches / business disruptions Operating costs / budgets Data protection / privacy Large and growing number of Institutions have experienced IT Security “Breaches” in last 12 months. Unauthorized access to sensitive institutional data Research database hacked Breaches of Student & Faculty SSN’s Breaches of PII Information

5 More breaches than ever…
3/28/2017 More breaches than ever… Data Breach Once exposed, the data is out there – the bell can’t be un-rung PUBLICLY REPORTED DATA BREACHES 630% Increase Total Personally Identifying Information Records Exposed (Millions) Source: DataLossDB Note total represents cumulative number since once exposed the data is out there – the bell can’t be unrung. Average cost of a data breach $202 per record Average total cost exceeds $6.6 million per breach Source: DataLossDB, Ponemon Institute, 2009 Oracle Confidential 5

6 More threats than ever…
3/28/2017 More threats than ever… 70% attacks originate inside the firewall 90% attacks perpetrated by employees with privileged access Oracle Confidential 6

7 Q & A To what extent is your institution considering or implementing an identity and access management solution? Not considering Currently evaluating Planned, but won’t start within the next 12 months Plan to start within the next 12 months Implementation is in progress Partially operational Fully operational

8 2008 EDUCAUSE Current Issue Survey
Ranking from All Institutions on Strategic Importance Security (2) Administrative/ERP/information systems (3) Funding IT (1) Infrastructure (7) Identity/access management (4) Disaster recovery/business continuity (5) 2007 ranking in parentheses

9 2008 EDUCAUSE Current Issue Survey
Ranking from All Institutions on Potential to Become More Significant Identity/access management (2) Security (1) Funding IT (3) Disaster recovery/business continuity (4) Administrative/ERP/information systems (5) Infrastructure (8) 2007 ranking in parentheses

10 What we typically see at Higher Education Institutions

11 Challenges and Issues Typical HE Challenges and Issues Data
No single view of identity data across applications Inconsistent user identity data Multiple repositories of user identity data Lack of defined standards for user attributes Many identity owners & sources Supportability Administration performed both centrally and locally Manual, paper-driven processes work, but lack audit ability IT staff is stretched, especially as new projects are defined and started Infrastructure support team has a wide range of responsibility with limited means Typical HE Challenges and Issues Growth Use of web-based applications continues to grow Increasing demands for new services Need to support within current spending levels Affiliate community is always growing Institutional Culture Priorities may vary on a per school or campus basis Varied and complex user populations Many institutions “bend over backwards” to provide the highest levels of service to their students 11

12 Typical Higher Education Reference Architecture – General View

13 Banner OIM Reference Architecture

14 IAM Business Drivers Business Facilitation Cost Containment
Improve productivity through streamlined, automated processes and efficient provisioning and de-provisioning of user accounts. Enable efficient deployment of new system-wide applications and services in a manner that provides ease of use for all constituents through use of standards and automation. Cost Containment Efficiently managing the growing number of users and network-accessible resources by streamlining and centralizing business processes in support of new users, end-user transfers/job changes, and user disablement. Reduce errors and the time required to manually administer user accounts and resources through automation of tasks. Security Effectiveness and IT Risk Improve security and support high levels of security and privacy appropriate to specific systems and services. Improve system audit ability and access management to ensure compliance with Federal, state, Department of Education and university regulations. Improve audit readiness via a central audit log of accounts and privileges, as well as reporting and auditing capabilities. Create effective monitoring and control over identity-related processes to ensure policies and practices are adhered to and security policies are consistently followed.

15 IAM Deployment Benefits
Solid Identity Management infrastructure built on standards that can serve as the platform for supporting all future identity management services Automated provisioning and identity origination Clean identity data with processes in place to prevent re-corruption Elimination of the use of SSN as the primary unique identifier for all end users Enterprise-level auditing with ability to track events across the entire institution Drastic reduction of risk as it relates to provisioning users to new services and the protection of those services due to all provisioning and access control events being audited Drastic reduction of cost and overhead due to further automation of manual administration process and introduction of delegated administration models enterprise-wide Self-service services benefit the user by offering the ability to update information from a central location for use throughout the enterprise Reduction of costs associated with manual provisioning and manual data cleansing processes

16 Higher Education Banner Case Studies
Yale University Oracle Identity Manager 300,000 Identities – Students, Faculty, Staff, Affiliates, Alumni SunGard Banner Student & Oracle eBusiness HR 15+ Resources Managed Lehigh University 25,000 Identities – Students, Faculty, Staff, Affiliates Replacement of current home grown system SunGard Banner HR & Student AD, LDAP, AFS, BlackBoard, Luminis Portal Wellesley College Oracle Identity Manager & Virtual Directory 10,000 Identities – Students, Faculty, Staff, Affiliates, Alumni AD & OID

17 Higher Ed IAM Clients

18 Questions Aaron Perry President Mobile Web

Download ppt "Campus Security and Identity Management in a Banner World"

Similar presentations

Ads by Google