Secure the Enterprise

Secure the Enterprise

Identity assurance solutions must be adaptable and scalable to meet the needs of the enterprise at all levels.


Jerome Becquart of ActivIdentity, part of HID Global discusses the challenges facing CSOs in Securing the Enterprise, and how a multilevel security approach can help safeguard the enterprise and minimize the risk of potential security breaches.


What have recent headlines taught us about enterprise security breaches, and how can enterprises increase security? 

The perception that organizations are untouchable and security cannot be breached is something of the past. In the first five months of 2011, we saw 178 million to 218 million user accounts, e-mail addresses, token seed files or records stolen from companies that were breached. In the wake of recent high-level security breaches, CSOs must be ready to answer the tough questions CEOs are asking about their organizations’ security preparedness. As threats become more sophisticated and frequent, security measures such as perimeter defense and traditional OTP no longer offer sufficient protection. By implementing a multi-layered approach with a combination of smart cards and advanced OTP tokens, the security organization can validate and authenticate users' access to resources, providing a trusted environment for users.

Why are enterprises more vulnerable today? Where are these vulnerabilities? 

Traditional security methods such as static passwords and authentication at the perimeter are almost obsolete for protecting employee credentials and enterprise data. Restricting employee Internet access has proven impractical, because it interferes with daily business operations. As the value of customer assets increases, so does the value of getting into these assets. Hackers are using social networks to breach the system, assuming employee identities. Once they have penetrated the IT network, hackers can easily access sensitive IT resources and valuable corporate information.

How can companies have a security solution that addresses the global scope, frequency and sophistication of today’s threats? 

They must create an environment in which employees can establish trust in the identity of anyone accessing resources, particularly sensitive information. CSOs need to feel confident about the steps they have taken to protect the network and resources. They also need to implement an enterprise identity assurance solution that validates users’ identities, authenticates their credentials and provides access based on these credentials.

Enterprises need to make sure the security environment does not have an impact on daily business activities and that they educate employees and keep them informed.
 
Some organizations are implementing perimeter defense systems and smart tokens. Does this strategy address advanced persistent threats? 
Yes, multi-layered strong authentication inhibits an attacker’s ability to escalate account privileges or leap laterally to compromise other users’ accounts. Using smart card to secure VPN, Windows login and server access can signifi cantly reduce the risk of breaches. Employing OTP tokens with algorithms based on multiple variables is also a good strategy. 

As a part of HID Global, how can ActivIdentity help enterprises strengthen their security strategy into the future? 

I believe that as part of HID Global our identity assurance solutions will be able to meet the customer needs of today and the future. Identity assurance solutions must be adaptable and scalable to meet the needs of the enterprise at all levels, and I believe we can provide customers with this solution. I foresee in the near future that a CSO priority will be convergence—the use of a single credential to authenticate to a PC, network, applications, digitally sign emails, encrypt data and open a facility door.




About Jerome Becquart / Vice President and General Manager, ActivIdentity
Mr. Becquart is General Manager and Vice President of ActivIdentity, part of HID Global, and serves on the Board of Directors for ActivIdentity. Global management responsibilities include solution and product marketing, marketing communications, engineering, professional services and technical support. Under Mr. Becquart’s leadership, the organization has transitioned to a trusted advisor for customers, building a best in class global technical support team and implementing industry best practices across consulting and training services. Mr. Becquart has been with the organization since 1996, and has held several executive management positions.
Bookmark and Share


  Email
  Request a Call
  Find a Local Office
Follow Us On: