What’s the Most Direct Path to Good Corporate Governance?

Last week’s oil spill has me thinking about how – and when – government regulation is the ideal path to mandate corporate governance. Specifically in the IdM space, I’ve watched government regulations evolve to address transparency, privacy and consumer data protection. As I look back at what’s happened, it’s apparent that most of these data [...]

Report: Compliance Drives Security Budgets

I read a very interesting Forrester report last week commissioned by Microsoft and RSA. It was based on a survey of 305 IT security decision makers and assesses data security practices at enterprises around the world.
A key takeaway from the report is the fact that compliance, not security, drives security budgets. I don’t think this will [...]

SailPoint Unveils a New Approach to Provisioning

This morning, we announced a next generation provisioning product that builds on the governance framework provided by our core product, IdentityIQ. The announcement is a culmination of almost two years’ work internally at SailPoint, and we believe it represents an evolutionary shift in the provisioning market that will benefit any company that is struggling to [...]

Feet on the Street: RSA Highlights Cloud and Cybersecurity

This week, several members of the SailPoint team made the annual trek to the industry’s biggest security event, the RSA Conference. As always, the conference was a high-paced mix of conference sessions, technology debates, and meetings with customers and partners.
I’m always interested in what themes get the most play at RSA. This year, I’d have [...]

Achieving Auditable Compliance with NERC CIP Reliability Standards

Beginning in 2010, energy producers and distributors face a looming challenge – to become “auditably compliant” with the Critical Infrastructure Protection (CIP) standards by the July 1, 2010 deadline. Developed by NERC, an independent, not-for-profit organization whose mission is to ensure the reliability of the bulk power system in North America, and given the force [...]

Market Pulse Survey: Divide Between Business and IT Persists

We recently conducted our third Market Pulse Survey, which focused on the key drivers of access certifications and how organizations ensure their access privileges align with business policy. According to the 150 respondents, including many readers of this blog, there is clear evidence business users involved in these processes don’t fully understand what they are [...]

Predictions for 2010: The IT World Has Changed (for the Better)

Despite the economic challenges, this has been a record year for SailPoint as we’ve doubled our customer base and expanded into Europe and APAC. As we look forward to 2010, we have been reflecting upon the recession and how it will impact next year – particularly in regard to how companies consume, purchase and view [...]

Gartner IAM Summit Recap (Part 2): Our Customers Speak

As I mentioned in yesterday’s post, two SailPoint customers presented case studies last Wednesday at the Gartner IAM Summit. Bravely taking on the 8 a.m. time slot (which was well attended for the early hour) was Andy Weeks, Risk and Compliance Manager for Humana. Andy gave a very compelling overview of Humana’s IAM journey over [...]

Counting Down to the New Model Audit Rule

In less than three months, the new Model Audit Rule (MAR) will go into effect. Beginning January 1st, many non-public insurers will for the first time be required to comply with more stringent regulatory provisions, and public insurers that are already subject to SOX will be subject to additional reporting requirements. One key aspect of [...]

Roles and Communism at Burton Catalyst

One of the things I enjoy most about Burton Catalyst is the chance to hear first-hand from client organizations about their identity management deployments. For the most part, these sessions deal honestly with issues and challenges, are relatively hype-free, and focus on the pragmatic vs. the visionary. This year’s Catalyst featured an interesting set of [...]