Combining SABSA and Vis4Sec to the Process Framework IdMSecMan to Continuously Improve Identity Management Security in Heterogeneous ICT Infrastructures

Identity management ensures that users have appropriate access to resources, such as ICT services and data. Thereby, identity does not only identify, authenticate, authorize individuals, but also the hardware devices software applications which need for access. In consequence, is an important element of information security (ISM) data governance. As infrastructures are constantly changing, new threats emerge, has be continuously improved, just like any other business process. order align process with requirements, provide a systematic approach supported by reporting supporting visualizations, we apply Sherwood Applied Business Security Architecture (SABSA) Visualization (Vis4Sec) together in our approach, IdMSecMan (identity management). We first introduce IdMSecMan, before applying it central technical activities identification, authentication, authorization. Our underlined case study. we, example, see enabling multi-factor authentication organizations impacts areas may overlooked without structured approach. With framework all decisions improve within inter-organizational collaborations.