Managing Access Rights for Terminated Employees
نویسنده
چکیده
A recurring security scenario involves the problem of removing the access rights of an employee upon employee termination. A solution is presented in the form of procedures and an infrastructure. Operationally, sensors track security-related user operations (e.g. password use and object accesses) to determine the true access rights associated with a user. Security administrators combine that information with recorded access controls and invoke actuators to perform actions necessary to remove the complete access rights of a user.
منابع مشابه
Managing Information Access in Data-Rich Enterprises with Escalation and Incentives
Managing information access in highly dynamic e‐business environments is increasingly challenging. In large firms with thousands of employees accessing thousands of applications and data sources, managers must protect information against misuse but ensure that employees can access the information needed for value creation. An escala‐ tion scheme with audits to increase flexibility while maintai...
متن کاملManaging the Access Grid - A Process View to Minimize Insider Misuse Risks
It is generally agreed upon the fact that the quality of Identityand Access Management (IAM) data such as user accounts, access privileges or consistent user representation among different security domains is low. Growing user populations in mediumand large-sized organizations lead to a so called “identity chaos” in which over-privileged employees increase the risk of insider misuse. Recent gov...
متن کاملEnterprise Architecture Enhanced with Responsibility to Manage Access Rights - Case Study in an EU Institution
An innovative approach is proposed for aligning the different layers of the enterprise architecture of a European institution. The main objective of the alignment targets the definition and the assignment of the access rights needed by the employees according to business specifications. This alignment is realized by considering the responsibility and the accountabilities (doing, deciding and ad...
متن کاملImpact of Labor Law Implementation in the Lebanese Pharmaceutical Sector
Labor law implementation has a basic role in increasing employment stability, decreasing turnover, and managing the employer-employee relation, which increases the productivity levels in any organization. In this paper, the importance of implementing the labor law in the Lebanese pharmaceutical sector, in the two main divisions, sales (medical representative) and community pharmacies is discuss...
متن کاملAdverse Termination Procedures -or- "How To Fire A System Administrator"
When an employee is terminated, his or her access to the organization’s network and computer systems must be removed. However, the most difficult employee to terminate is often the person that built the system. We propose a three tier model for coordinating access removal that is useful in normal and adverse termination scenarios. We then work through a number of case studies to see how the mod...
متن کامل