NDLI: Economics of Identity and Access Management: Providing decision support for investments

Content Provider	IEEE Xplore Digital Library
Author	Mont, M.C. Beresnevichiene, Y. Pym, D. Shiu, S.
Copyright Year	2010
Description	Author affiliation: Systems Security Lab Hewlett-Packard Laboratories Long Down Avenue, Stoke Gifford, Bristol BS34 8QZ, England, UK (Mont, M.C.; Beresnevichiene, Y.; Pym, D.; Shiu, S.)
Abstract	Identity and Access Management (IAM) is a key enabler of enterprise businesses: it supports automation, security enforcement, and compliance. However, most enterprises struggle with their Identity and Access Management strategy. Discussions on IAM primarily focus at the IT operational level, rather than targeting strategic decision-makers' issues, at the business level. Organizations are experiencing an increasing number of internal and external threats and risks: there is scarcity of resources and budget to address them all. Decision-makers (e.g., CIOs, CISOs) need to prioritize their choices and motivate their requests for investments. This applies for investments in IAM vs. other possible security or business investments that could be made by the organization. In this context, a range of possible IAM investment options has an effect on multiple strategic outcomes of interest, such as assurance, agility, security, compliance, productivity, and empowerment. We have developed a repeatable approach and methodology to help organizations work through this complex problem space and determine an appropriate strategy, by providing them with decision support capabilities. The proposed approach, validated in collaboration with security and IAM experts, couples economic modelling (which explores decision-makers' preferences between the different outcomes) with system modelling and simulations to predict the consequences (likely outcomes) associated with different investment choices and map them against decision-makers' preferences, in order to identify the most suitable investment options. We illustrate how this methodology has been applied in an IAM case study, in a business-driven context with core enterprise services. This work is in progress. We discuss current results and next steps.
Starting Page	134
Ending Page	141
File Size	277943
Page Count	8
File Format	PDF
ISBN	9781424460373
e-ISBN	9781424460397
DOI	10.1109/NOMSW.2010.5486588
Language	English
Publisher	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Publisher Date	2010-04-19
Publisher Place	Japan
Access Restriction	Subscribed
Rights Holder	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Subject Keyword	Productivity Economics Automation Strategic Preferences Laboratories Predictive models Security Identity management systems IAM Simulation Investments Information security Decision Support Identity Analytics Economic forecasting Modelling Risk management Portfolios
Content Type	Text
Resource Type	Article

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in