Why SAINCE?
|
As a leading provider of IT services to the healthcare industry and as an IBM Business Partner, we offer unparalleled technology, experience and industry expertise to deliver solutions and services in SOA, Business Process Management, Middleware and Integration, Security, Systems management, and Data Backup and Recovery. |
IBM Solutions Can Monitor, Track and Control Privileged-User Access of Core IT Assets
For these reasons, new security strategies are called for, and new solutions are required to implement them. Fortunately, the IBM Tivoli system management suite includes a number of solutions specifically designed to increase the visibility of trusted user behavior, enhance compliance with internal security policies and external government regulations, and enhance business resilience and overall data integrity. IBM Tivoli solutions make it possible to manage system/application access, track trusted user activity in real time, and detect and resolve emerging threats as quickly as possible—and with minimum business consequence.
Improving security to accommodate the possibility of abuse by privileged users often breaks down into developing a number of different steps, then optimizing the way IT implement those steps. For instance, consider the question of application access. Different applications are required for different purposes, and different users will inevitably have different levels of access and power within them. Establishing security policies which determine different levels of access by different users, and then map those policies to different IT assets, can be a challenging proposition.
The IBM Tivoli Access Manager family, however, simplifies that challenge considerably. One excellent example: IBM Tivoli Access Manager for e-business. Network managers can use this solution to create security policies dynamically, and then assign them to users, or groups of users while also minimizing the potential for abuse of privileges. These policies can span a remarkably diverse array of platforms, ranging from System z-hosted databases to Web-based Java applets, and also deliver the convenience of single-sign on even when involving multiple systems. This solution delivers more than authentication and access, however; it also handles auditing and report generation. In this way, network managers are empowered not just to limit access to the appropriate users in accordance with internal security policies or external government regulations, but to demonstrate that compliance on demand, quickly and easily.
Similarly, IBM Tivoli Access Manager for Operating Systems enhances overall security by addressing specific security shortcomings known to exist in UNIX or Linux operating systems. In these environments, trusted users are sometimes granted root or superuser access privileges which may be needed for high-level network management. But such extraordinary privileges also represent a theoretical possibility of abuse, and by improving the granularity of privilege—so that root users can do some things, in some situations, yet not others—security can be enhanced. IBM Tivoli Access Manager for Operating Systems provides just this type of granularity. And like other members of the IBM Tivoli Access Manager family, it also supports auditing by drawing from multiple data sources and subsequently generating reports.
|
|
