Gartner Identity & Access Management Summit

Registration

02 December 2012 02:00 PM - 06:00 PM

Tutorial: Foundation for Business Identities: The Identity Data Model

02 December 2012 03:00 PM - 04:00 PM

Without accurate, up-to-date identity information from directories and identity databases, business users won’t have appropriate access. Identity and access governance uses an identity data model designed from identity repositories and logs to deliver business-driven IAM. - What is an identity data model in IAM? - What is identity and access governance, and how does it use an identity data model? - How can enterprises ensure that their identity data models are effective?

Tutorial: Why Your Security Awareness Program Is Doomed … and What You Can Do to Rescue It

02 December 2012 03:00 PM - 04:00 PM

If your awareness program was designed by a guy with pocket-protectors, a fresh CISSP, and a highlighted NIST 800 series, then you can guarantee it is obsolete. New approaches draw on advertising, marketing, social engineering and practical magic to build a new context for security awareness. - Why does training fail to change behavior? - How can we influence and motivate employees more effectively? - What are the skills and tools we need to make this happen?

Tutorial: IAM Myths and Monsters

02 December 2012 04:15 PM - 05:15 PM

The phrase “identity and access management” can raise feelings both of great hope and of great fear. Horror stories abound. At the same time, many people hold out great hope for the promises of what IAM can accomplish. Join us as we explore IAM's myths and monsters. - What are the common IAM myths? - What are the monsters and how can I defeat them? - How can I make the most of this conference to help slay the monsters, defeat the dragon, and win the prize?

IAM Event Orientation & Welcome Reception

02 December 2012 05:15 PM - 06:30 PM

General Networking Breakfast

03 December 2012 07:00 AM - 08:00 AM

Registration

03 December 2012 07:00 AM - 06:30 PM

Breakfast Kick-Off with Moderated Discussion (For Healthcare End Users Only. Pre-registration Required.)

03 December 2012 07:00 AM - 08:00 AM

Join your peer to highlight and discuss key issues facing Healthcare that have significant implications on your organization’s ability to deliver and sustain mature IAM processes and capabilities.

Opening Keynote: The Gartner Nexus of Forces and the Future of IAM, 2013-2015

03 December 2012 08:15 AM - 09:00 AM

Gartner has identified four forces that will have a profound impact on IT, including IAM. Cloud, social media, mobility, and information are forces of change in the way IAM is delivered, the way it is consumed by the enterprise, and the manner in which identity and access is managed. Although the impact of the Nexus of Forces is long-term, there are already signs that they are impacting IAM solutions and buyers now.

Welcome Address

03 December 2012 09:00 AM - 09:15 AM

Developing a Strategic Vision for User Authentication

03 December 2012 09:30 AM - 10:30 AM

The increased range and variety of authentication methods and platforms now available means that there that there is likely a “best fit” authentication solution for every enterprise use case. But it is difficult for IAM and information security leaders to find that solution among the myriad options. - What are the characteristics of a good authentication method? - How do different use cases influence and constrain enterprises’ choices? - How can enterprises architect a sound authentication solution?

Roundtable: Directory Strategy (& Consolidation) (For End Users Only. Pre-registration Required, limit 2 per attendee.)

03 December 2012 09:30 AM - 10:30 AM

As enterprises both expand and simultaneously seek to simplify their environments, there are many implications to directory services. This user roundtable will allow for questions and interaction, as analysts and attendees grapple with implications and best practices.

Identity Bridge: Enabling Hybrid Cloud Architectures

03 December 2012 09:30 AM - 10:30 AM

An identity bridge is an on-premises appliance that solves problems across on-premises and SaaS environments. For most enterprises, the identity bridge is an essential tool. It can provide federation, synchronization, provisioning, mobile credential management and authorization services. - What are some current examples of current identity bridges? - What are successful road maps for multi-functional identity bridges? - What are Gartner’s projections for cross-domain super bridges? - What are Gartner’s recommendations for successful deployments?

IAM At the Nexus of Cloud, Mobile, and Social

03 December 2012 09:30 AM - 10:30 AM

Enterprises must manage identity in an increasingly hybrid world in which legacy on-premises IAM infrastructures are extended or replaced to support SaaS and mobile endpoints. Identities established on social media platforms are also being leveraged for enterprise system access. - What issues must be addressed when applications are moved to the cloud, when endpoints are mobile, and social identities are to be leveraged? - What are the traditional and emerging methods for resolving these problems? - What are the current and emerging standards that support IAM, the cloud, mobility and social?

The Cyber Threat Landscape

03 December 2012 09:30 AM - 10:30 AM

The threat environment is evolving. Attacks are financially motivated and are supported by a sophisticated underground economy. To stay ahead of the “bad guys,” enterprises need to invest wisely in security tools and personnel. The right balance between too little and too much security is essential. - What are the key trends in cybersecurity attacks? - Which new tools and processes should enterprises adopt to defend against these attacks? - What are the best practices for mitigating cyber threats?

Avatier Corporation: The Best IAM System? …the One that is Quickly Operational

03 December 2012 09:30 AM - 10:30 AM

Would you choose development or configuration to meet your needs? Is customization the enemy of getting your system operational? Why is the enterprise landscape littered with half- completed IAM deployments and what do you need to know prior to accelerate your deployment? Why are IAM niche vendors stealing the show? Join the discussion on these topics and more as Avatier shares stories from the trenches with real customer solutions and the results of an eye-opening new survey.

RSA: Adaptive IAM for a hyper-connected World

03 December 2012 10:45 AM - 11:45 AM

It is no secret that Identity & Access Management systems are under severe stress as organizations consume dozens of new cloud-based applications and add thousands and even millions of new consumer and partner users to their extranets. IAM is ripe for a reboot. In this session, we will discuss an approach to ‘Adaptive IAM’: Solutions that build on existing IAM investments and make them more adaptive to cloud, mobility and new threats

Avatier Corporation: Leveraging Today’s Megatrends to Drive the Future of Identity Management

03 December 2012 10:45 AM - 11:45 AM

The next step in the evolution of identity and access management can have a dramatic influence in streamlining IT department processes. Avatier CEO Nelson Cicchitto addresses an entirely new technology category defined by the convergence of requests, approvals, and tracking of personnel access to data, applications, systems, facilities, and equipment. He will discuss the emergence of this new category—Universal Assignment Management™ (UAM)—and the role IT managers will play in its adoption.

Cyber-Ark Software: The Exploding Privilege Problem: How To Protect These Critical Attack Points

03 December 2012 10:45 AM - 11:45 AM

The exploitation of privileged accounts has become a primary attack vector for cyber attacks and the most devastating data breaches over the past two years. As the enterprise perimeter dissolves and internal and external threats increase, identifying, managing and protecting privileged activity is critical to the overall security for any business. This session will help attendees understand where these privileged accounts exist within their organization and how they can manage and monitor privilege activity to mitigate risk.

Attendee Lunch

03 December 2012 11:45 AM - 12:45 PM

Solution Showcase Dessert Reception

03 December 2012 11:45 AM - 01:45 PM

Exclusive Elite Club Networking Lunch (Elite Club Members Only)

03 December 2012 11:45 AM - 01:00 PM

Covisint, a Compuware Company: Orchestrating External Engagement through Access Patterns

03 December 2012 01:15 PM - 01:35 PM

Dave Miller, Chief Security Officer at Covisint will describe the method for developing an identity framework that allows external engagement. The discussion will include: • Standard Access Management Tasks – Justification for cloud-based Identity and Access Management Services: o Credential Management o Authorization o Audit • Building a framework that allows broker access to data, such as through: o Hyperlinks o Portlets-based o Mashups o Mobile Devices • Using robust API Services to allow third-party deep integrations and development.

Architecting IAM for Success

03 December 2012 01:45 PM - 02:45 PM

A tools-based focus can result in failed projects, wasted resources and lack of business alignment. When IAM architecture is part of broader security and enterprise architecture program, enterprises can improve identity-oriented business processes, information flows and technology implementations. - What are the most-effective contents and structures for security architecture? - How should enterprises practically model IAM architectures to ensure linkage to the business strategy, and to adequately address risks? - What are security architecture pitfalls and best practices?

Roundtable: IAM & Security for Healthcare (For End Users Only. Pre-registration Required, limit 2 per attendee.)

03 December 2012 01:45 PM - 02:45 PM

This analyst-user roundtable allows attendees from the healthcare industry to discuss their IAM- and security-related challenges, successes and questions. This session will be highly interactive and will provide real-world value and insight for those who participate.

A Magic 8 Ball in the Sky: Federated, Distributed, and Cloud Externalized Authorization

03 December 2012 01:45 PM - 02:45 PM

Externalized authorization has granted enterprise applications rich decision-making ability and ways of controlling who can do what with what kind of data. Although, identity management services have begun their inevitable migration to the cloud, authorization has lagged its peers. • To what extent is externalized authorization becoming mainstream? • What are the deployment patterns for externalized authorization with respect to cloud services? • What are the challenges of federated authorization?

Cost, Consequence and Value: The Economics of IAM

03 December 2012 01:45 PM - 02:45 PM

How do we measure the value of IAM? For many, justifying IAM has been elusive. It remains a horizontal concern in the vertical world of business services, something shared by all business functions but owned by none. How can an IAM project be reconciled with the budgets of business? - How much does IAM cost today, and why? - How does an enterprise cost-justify an IAM project—is it possible? - How will the economics of IAM change in the era of cloud and mobility?

Take an Enterprise Approach to Data Security, or Else…

03 December 2012 01:45 PM - 02:45 PM

Many organizations protect data with no clear understanding of the data's associated value and risk. Step 1 is ensuring that the right people have the right access. This session analyzes the real drivers for data protection and provides a survey of some of the available tools to address the problem. - Why the current approach to protecting data in technology silos doesn't work - What steps can clients take to ensure that enterprise data is protected throughout its life cycle? - What controls and tools are available to protect enterprise data in practice?

Workshop: The Gartner ITScore Maturity Model for IAM (For End Users Only. Pre-registration Required, limit 2 per attendee.)

03 December 2012 01:45 PM - 03:15 PM

IAM leaders use this Gartner assessment to evaluate their IAM efforts against key maturity indicators. This helps determine which aspects of a maturity level are most important and how to advance. Immature programs are likely to be inefficient, ineffective and unable to deliver full business value. - What does maturity mean for an IAM program? - How does ITScore measure maturity of the IAM program? - How can enterprises use ITSCORE to assess the maturity of their IAM programs?

Lieberman Software Corporation: Customers Reveal All: Securing Privileged Identities in the Real World

03 December 2012 03:00 PM - 04:00 PM

Have you ever had an audit finding where your controls for managing privileged access were lacking? Have you stopped changing passwords on service accounts because complying with mandated requirements sends your systems off-line? In this session you'll hear stories from the trenches from IT staff at well-known organizations who manage privileged identities on some of the world's most scrutinized networks. And, we'll explore new approaches for rapid remediation of privileged account security holes.

SailPoint: Next-generation IAM: A Strategic Approach Moving Forward

03 December 2012 03:00 PM - 04:00 PM

This two-part session will discuss why next-generation IAM solutions better address today’s business and IT challenges. Adobe’s Steve Lavigne will present a case study about evolving an existing IAM infrastructure to a governance-based one, sharing best practices from the transition. Then, SailPoint’s Kevin Cunningham will discuss how mobility, cloud adoption and the consumerization of IT are radically changing the way in which we need to be thinking about identity management going into the future.

IBM: Next Generation Access and Identity Management for a Multi-Perimeter World

03 December 2012 03:00 PM - 04:00 PM

Today’s multi-perimeter world of mobile, cloud, social and information interactions has transformed the enterprise, so the traditional approach to IAM is no longer sustainable. Organizations need a new integrated approach for securing the wide variety of enterprise and web resources from any device, any service and any source. In this session, IBM will discuss the changing security landscape and why this transformation requires you to consider a new multi-perimeter IAM strategy for the future.

Governing Risk, Security and IAM: It's Much More Than Just Reporting

03 December 2012 04:15 PM - 05:15 PM

Effective governance provides accountability, responsibility, authority and assurance. Governance consists of a set of processes and activities executed and overseen by appropriate governance bodies. Success of governance initiatives depends on the effectiveness of the groups tasked with executing. - What are current security and risk governance best practices? - What processes, structures and forums constitute effective security and risk governance? - How does IAM governance differ from risk and security governance?

Roundtable: IAM & Security for Financial Services (For End Users Only. Pre-registration Required, limit 2 per attendee.)

03 December 2012 04:15 PM - 05:15 PM

As enterprises both expand and simultaneously seek to simplify their environments, there are many implications to directory services. This user roundtable will allow for questions and interaction, as analysts and attendees grapple with implications and best practices.

Town Hall: Privilege Account Activity Monitoring (PAAM) Market

03 December 2012 04:15 PM - 05:15 PM

Gartner analysts for the PAAM market present their thoughts related to the market and technology, and share use cases. The majority of the time will be open for attendee questions and comments. If you’ve been wondering where and how PAAM may fit into your strategy, then this is the session to attend.

Case Study: Streamlining User Provisioning

03 December 2012 04:15 PM - 05:15 PM

As a start-up luxury resort and casino, The Cosmopolitan of Las Vegas (“The Cosmopolitan”) needed to onboard approximately 4500 new employees in three months, and there was minimal infrastructure in place to manage provisioning and deprovisioning of these employees in compliance with SOX, PCI, and Nevada Gaming Control Board regulations. Kristen Singleton, CIO, will share the process, challenges and solution which integrated many key Cosmopolitan systems, including the HR system, allowing for automated account setup across the diverse user population.

User Activity Monitoring for Early Breach Detection

03 December 2012 04:15 PM - 05:15 PM

Early detection of targeted attacks and security breaches has never been more important and more difficult to achieve. User activity monitoring is key to early detection of targeted attacks, and has become part of the standard of due care for a variety of regulations across all industry segments. - What are the security and compliance drivers for user activity monitoring? - How can SIEM and other monitoring technologies be deployed for early detection of internal and external threats? - Which SIEM vendors are best suited to particular monitoring use cases?

Gartner Keynote: The Gartner IAM MQs and Marketscopes

03 December 2012 05:30 PM - 06:15 PM

In this session, authors of Gartner Magic Quadrants and MarketScopes for IAM discuss the trends within their various markets, the Magic Quadrant and MarketScope findings, and address audience questions. Topics and tools specifically covered include authentication technologies, user administration/provisioning, identity and access governance, Web access management and identity federation.

Solution Showcase Reception

03 December 2012 06:15 PM - 08:15 PM

Good Technology: Best Practices for Leveraging Personal Identity to Increase Security of Mobile Applications

03 December 2012 06:30 PM - 06:50 PM

Discover the new ways to extend Identity and Access Management (IAM) capabilities to mobile devices and applications making them more secure. This session will elaborate on how developers and IT managers can quickly and seamlessly extend strong, two-factor authentication, and IAM capabilities to mobile devices and applications, as well as customize each mobile application experience based on personal identity in order to reap the benefits of today’s mobile work environment while protecting enterprise data

Fischer International Identity: Securing Federations and Clouds Takes Sound Identity Management Practices

03 December 2012 07:00 PM - 07:20 PM

As more and more entities implement federated services, identity management has entered the spotlight. Sound identity management practices are not a new topic; however, there is now a sharper focus on key practices such as automation and attribute management. Government initiatives such as NSTIC stand to become key influencers over existing and future identity deployments. This session will focus on key identity management components that ensure the validity and integrity of federated transactions.

Registration

04 December 2012 07:00 AM - 06:00 PM

General Networking Breakfast - by Industry & Topics

04 December 2012 07:15 AM - 08:15 AM

Topics To Include: • Consumer Products/Services • Energy, Utilities and Water • Financial Services • Healthcare • Manufacturing • Public Sector- Education • Public Sector/Government- Federal • Public Sector/Government- State/Local • Telecommunications and Information Services • Transportation

The Road to IAM Maturity (For Healthcare End Users Only. Pre-registration Required.)

04 December 2012 07:15 AM - 08:15 AM

Using the results of the previous day’s session, discuss foundational and strategic avenues to address critical IAM implications, including process and solution maturity.

Power Breakfast: The Future of User Provisioning and Access Governance

04 December 2012 07:15 AM - 08:15 AM

Often, User Provisioning and Identity and Access Governance (IAG) serve as the ‘entry points’ to broader IAM programs. However, there is still movement in what User Provisioning and IAG are becoming. - What feature sets are critical? What is the hype? What is the reality? And what does the future hold?

Oracle: Trends in Identity Management

04 December 2012 07:30 AM - 08:00 AM

As enterprises embrace mobile and social applications, security and audit have moved into the foreground. The way we work and connect with our customers is changing dramatically and this means re-thinking how we secure the interaction and enable the experience. Work is an activity not a place - mobile access enables employees to work from any device anywhere and anytime. Organizations are utilizing "flash teams" - instead of a dedicated group to solve problems, organizations utilize more cross-functional teams. Work is now social - email collaboration will be replaced by dynamic social media style interaction. In this session, we will examine these three secular trends and discuss how organizations can secure the work experience and adapt audit controls to address the "new work order".

Guest Keynote: The Art of Business Influence

04 December 2012 08:15 AM - 09:15 AM

It is more important than ever to influence multiple stakeholders: departments, teams, and the organization as a whole. Communication expert Mark Jeffries has a simple, yet vital message — communication excellence leads to increased credibility, more successful projects and higher profits. Mark presents a practical toolbox of innovative communication, networking and influence tools designed to give you a smart, proven, communication-based approach to the challenges you face every day — with your project sponsors, colleagues and within your teams. From networking to negotiation, from the power of words, to the behaviors of the “trusted advisor” - Mark presents a practical and entertaining session filled with valuable takeaways.

Provisioning, Identity and Access Governance, and Directory Fundamentals

04 December 2012 09:30 AM - 10:30 AM

Provisioning, directory, and identity access governance (IAG)technologies form the foundation of an identity management solution. In this session Gartner will provide a component description and architectural overview of these technologies. Gartner will also offer deployment considerations, insights, and best practices based on years of customer experience. In this session participants will: - Develop a basic understanding of provisioning, IAG, and directory technologies - Gain insights into the integration touch points between provisioning, IAG, and directories - Identify best practices for deploying these services

Geolocation, Access Control, and Privacy: the Spy in Your Pocket

04 December 2012 09:30 AM - 10:30 AM

The classic data privacy problem is about two kinds of disclosure: active and passive. Mobile devices increase passive disclosure, often without our knowledge and sometimes without our consent. They are increasingly hooked into the Internet at the application level and may include several geolocation technologies. - The potential for data leakage is ever greater, but is it all bad? - Could all that data actually help protect us against identity theft? - Is this yet another nail in the coffin of authentication?

Roundtable: Directory Migration Strategies (For End Users Only. Pre-registration Required, limit 2 per attendee.)

04 December 2012 09:30 AM - 10:30 AM

Directories are the plumbing that enable higher level IAM functions. Optimizing directory architecture and deployment routinely leads to migration, consolidation and rationalization of directories and can disrupt IAM functions and performance across the enterprise. In this roundtable we will focus on what works and what doesn’t work when it comes to directory migration and consolidation programs with disparate directory systems such as AD, LDAP and e-directory.

Choosing a Replacement for Incumbent OTP/Hardware Tokens: Going, Going, … Almost Gone

04 December 2012 09:30 AM - 10:30 AM

OTP hardware tokens have been a staple user authentication method for more than 25 years, but are increasingly losing out to alternative methods in new and refreshed implementations. This session explores this trend and asks if the demise of hardware tokens is inevitable … or not. - Where are they used and what are the problems? - What are viable alternative authentication methods? - Will OTP hardware tokens make a comeback?

Maverick Session: Kill Off Security Controls to Reduce Risk

04 December 2012 09:30 AM - 10:30 AM

Infosec's traditional mindset can’t keep up with technological and behavioral change. The result is policies and technologies that cause frustration and impede agility. It's time to recognize that the relationships among IT, the business, and individuals have been transformed irrevocably. - Why are status quo approaches to information security untenable? - Does a less controls-intensive, more people-centric strategy make sense? - What are the elements of a potential people-centric approach?

Using Content-Aware DLP to Ensure a Connection Between Identity, Access, Usage and Risk

04 December 2012 09:30 AM - 10:30 AM

IAM programs are targeted at ensuring the correct people have access the information they need to do their jobs. The big risk: Are they using that access appropriately and responsibly? Content-aware data loss prevention provides a great mechanism for the axiom, “Trust, but verify.” - Is IAM the final answer in implementing an enterprise data security program? - How can we use detective and preventative controls such as DLP to support the framework for access provided by IAM? - What are best practices and pros and cons for implementing DLP to support data security initiatives?

Workshop: How an IAM RFP Can Help You Choose the Best Solution for your Business (For End Users Only. Pre-registration Required, limit 2 per attendee.)

04 December 2012 09:30 AM - 11:00 AM

An IAM-related RFP must evaluate many factors; such as business requirements; state of the solutions market; vendor relationships; and integrator skill. The right IAM solution can improve an enterprise’s chances for success and establish an enduring relationship for addressing future requirements. - What is the best RFP process to ensure successful results? - What are the questions everyone asks of IAM vendors in an RFP? - What steps can enterprises take to leverage an RFP to be successful?

Centrify Corporation: Evolving Enterprise Identity: From the Datacenter to Cloud and Mobile

04 December 2012 10:45 AM - 11:45 AM

Rapidly evolving user-driven computing models are invading the enterprise today and generating a need for enterprise identity services that sit at the intersection of datacenter, mobile and SaaS resources. Can you get there without adding staff and additional infrastructure? Join Centrify experts for a discussion on the architectural, security and operational considerations for adopting SaaS and mobile computing using a single, unified approach.

AlertEnterprise, Inc.: Secrets to Making IAM Work across the Enterprise: IT-OT-Physical Convergence

04 December 2012 10:45 AM - 11:45 AM

Millions of dollars are being spent on security, but breaches still continue. Organizations are conditioned to respond to incidents in Silos. No one really has the big picture related to security threats. Attackers are not thinking this way. Discover how leading edge organizations are employing technologies that can eliminate silos and bridge the gaps between IT Security, Physical Access Controls and SCADA systems to deliver true security across the enterprise.

BeyondTrust Software: When Managing Risk, Metics are Easy, Insight is Hard

04 December 2012 10:45 AM - 11:45 AM

The security data driving today’s modern threat and risk intelligence is ‘Big Data’ in itself. It might be the biggest data in your organization, with regards to value and impact to operations. The real challenge is in making sense of all of this valuable information in an actionable format. This session will highlight the approaches companies are taking to use the insights gleaned from their security data and operations to drive better strategy decisions.

Courion Corporation: Leveraging Intelligent IAM to Manage Access Risk in your Enterprise

04 December 2012 10:45 AM - 11:45 AM

Companies are spending millions on Identity & Access Management (IAM) and Identity & Access Governance (IAG) portfolios, but breaches are increasing exponentially. IAM/IAG strategies are needed that add automated intelligence and risk management to drive an effective set of preventative/protective controls; mitigate data breaches; and detect/settle threats as they occur. Hear from thought leaders and industry experts as they discuss the benefits of real time IAM intelligence to identify, quantify and manage access risk.

Attendee Lunch

04 December 2012 11:45 AM - 12:45 PM

Solution Showcase Dessert Reception

04 December 2012 11:45 AM - 02:45 PM

Hitachi ID Systems: How Bank of America Secures Access to Privileged Accounts, Globally

04 December 2012 12:15 PM - 12:35 PM

This session will review: - Business requirements for a system to control privileged accounts. - A class of service approach to delegating access decisions. - Technical constraints: scalability, fault tolerance, self-service enrollment, integration. - Capabilities of commercially available technology. - Deployment priorities. - Technical and organizational challenges that a successful deployment must overcome (replication, security integration, data quality, change control windows, etc.) - Current state and future direction of the BOA solution.

Aveksa: Best Practices For Business-Driven IAM

04 December 2012 12:45 PM - 01:05 PM

As they face more security threats and regulatory challenges than ever, enterprises today are implementing Identity & Access Management solutions built around business context. In this presentation, Aveksa will explore past and future approaches to Identity & Access Management, recommend approaches that have been successful for global organizations, and provide best practices for a business-driven approach to IAM.

Amazon Web Services and Identity

04 December 2012 01:45 PM - 02:45 PM

Amazon Web Services(AWS) is pivotal for many organizations. But AWS is an umbrella for many services: virtualization(EC2), storage(S3) and relational databases(RDS, DynamoDB and SimpleDB). Managing IAM functions within AWS and via core enterprise IAM tools/processes remains a challenge and mystery. - What are the native IAM capabilities within AWS? - How can I integrate my existing processes into AWS for holistic IAM?

Roundtable: IAM & Security Issues for the Public Sector (For End Users Only. Pre-registration Required, limit 2 per attendee.)

04 December 2012 01:45 PM - 02:45 PM

This analyst user roundtable will allow attendees from the public sector to discuss their IAM and security related challenges, successes and questions. This session will be highly interactive and will provide real-world value and insight for those who participate.

Ways to Achieve More With Less in Your IAM Program

04 December 2012 01:45 PM - 02:45 PM

In times of economic stress and uncertainty, organizations are being forced to be creative in delivering much needed solutions. IAM is no different. This session presents ideas on how to stretch your IAM dollar to make the best impact possible with what you have. - How can I be creative with IAM and related technologies? - What have other companies done? - How can I avoid making the situation worse?

How Social Networks Will Become Identity Providers for Enterprise User Identities

04 December 2012 01:45 PM - 02:45 PM

Federation with business partners simplifies admin and access for their customers and workforce. But true generic identity providers have yet to emerge. Enterprises now seek to support user enrolment and login via social networks. Will these networks become the main identity providers of the future? - How are enterprises using federation and social networks today? - How will enterprises use social network identities in the future? - What is needed for social networks to become the principle identity providers on the Internet?

Protecting Your Network in The BYOD Era

04 December 2012 01:45 PM - 02:45 PM

Network Access Control burst on the scene in 2003 as the answer to Sasser, Blaster and other worms. For several years, it was derided as an overhyped concept. Now that BYOD has emerged as an unstoppable trend, NAC is back in favor again as a solution for gaining control of the network. - Why is NAC a good solution for supporting BYOD? - Which vendors are leading the way with NAC? - What is the role of identity in implementing BYOD policies?

Privileged Account Management: Gaining Relevance in the Age of Virtualization

04 December 2012 01:45 PM - 02:45 PM

Privileged accounts remain a significant threat to the enterprise because they can result in denial of service attacks, unauthorized transactions, and data breaches. Lori Rowland discusses the risks of these accounts and recommends approaches to keep your organization out of compliance “hot water.” - What threats do privileged accounts pose? - How can/should organizations control various types of privileged accounts? - How can organizations keep auditors happy?

The Art of Business Influence - The Secrets of Pitch and Presentation (For End Users Only. Pre-registration Required, limit 2 per attendee.)

04 December 2012 01:45 PM - 03:15 PM

Mark Jeffries digs deeper into his concepts around influence with a workshop based on one of the most important challenges of the IT business - how to present your ideas and suggestions to others. From techniques of presentation to the psychology of the meeting, Mark will lead an interactive and engaging session aimed at honing your skills both in the physical world and online too! Also including: What's really going on in the meeting, The power of story telling, How to ensure your message is always remembered and How to bring your presentations to life.

Radiant Logic: SSO’s Dark Secret: You Can’t Get It Without Federated Identity

04 December 2012 03:00 PM - 03:30 PM

Everyone’s talking about federation, but the dark secret is that the federation approach—using SAML, OAuth, or other standards—addresses only half of the problem. This session will explore why you can’t get SSO without providing each application with the right identifier—and that means navigating not just the security layer, but also the internally-facing identity layer. Learn why a federated identity service acts as a central identity clearinghouse to power SSO, federation, and cloud integration.

Lighthouse Security Group, LLC: IAM in the Cloud with Lighthouse Gateway

04 December 2012 03:00 PM - 03:30 PM

As organizations embrace cloud and lower IT overhead, cloud-based IAM services offer a pathway to securely integrate SaaS applications and replace traditional on-premise IAM infrastructure. However, the proposition has organizations wondering whether the compromise of reduced capability and limited maturity of many offerings is worth the trade-off. Lighthouse’s CTO will discuss its IBM-based Lighthouse Gateway, showcasing how organizations can avoid choosing between a mature, feature-rich solution and reaping the benefits of the cloud.

Aveksa: Business-Driven Identity & Access Management: A Customer Case Study

04 December 2012 03:00 PM - 03:30 PM

In this session you will hear how one of Aveksa's leading Global 2000 customers transformed its Identity and Access Management initiatives by implementing a business-driven approach to IAM. By doing so, the company was able to significantly lower the total cost of ownership for its IAM project, better align IT and the business, reduce the risk of security breaches, and increase compliance assurance.

Dell Inc: Real-world case study–replacing a legacy access request portal

04 December 2012 03:00 PM - 03:30 PM

Join Becca Collins, supervisor, IT Access Control, and Amanda Cagle, IT security analyst, of Williams Energy, as they explain what steps Williams took to replace its legacy access request system. They’ll explain why Williams undertook this task, the challenges it faced, lessons learned and ultimately what success the company is now seeing

Town Hall: Selling IAM to the Business

04 December 2012 03:45 PM - 04:45 PM

One of the most elusive deliverables in IAM is the business justification for building IAM. How can IT create a coherent and believable story about why IAM is needed in the enterprise in language that the business can understand and accept? This is an interactive Q&A session. - Is it possible to develop a return-on-investment statement for an IAM program? - Who do I need to sell IAM to within the enterprise to increase chances of funding success? - What should an IAM business justification have to be successful?

Roundtable: Identity and Mobility (For End Users Only. Pre-registration Required, limit 2 per attendee.)

04 December 2012 03:45 PM - 04:45 PM

There are a lot of questions being asked in the marketplace related to how identity and mobility will integrate. What unique IAM-related opportunities and challenges arise with the proliferation of mobile devices? Join the discussion to share with and learn from your peers.

Case Study: Meeting Patient Needs Online: Federated Identity, Proxy Services and Usable Security at Kaiser Permanente

04 December 2012 03:45 PM - 04:45 PM

Kaiser Permanente provides medical care to 9 million people across the United States, with over 4 million of its members regularly accessing medical records information, securely emailing physicians and viewing lab results through an online portal and related mobile services. In this session, Kaiser’s expanding approach to consumer identity, informed by principles of population care management, will be presented, followed by an interactive Q&A session.

IAM, Operational Technology and the Internet of Everything

04 December 2012 03:45 PM - 04:45 PM

Smart devices manage power grids, control traffic, automate assembly lines and collect health information in hospitals. Organizations relying on this operational technology (OT) are beginning to converge IT and OT planning, design and operations organizations to deal with a rapidly changing world. - What is OT and why is it becoming so important to ALL enterprises? - What impact do OT requirements have on IAM for an enterprise? - How should enterprises prepare for the IT/OT convergence and its effect on IAM?

Panel: New-School Identity Protocols Fight for Your Love

04 December 2012 03:45 PM - 04:45 PM

Ian Glazer will host this insightful panel, where industry-leading experts discuss the emerging use of these “new school” identity protocols and how they will forever alter enterprise IAM. Panelists will be representing new protocols including OAuth, OpenID Connect, and SCIM as well as old favorites including SAML and XACML.

Presenting a Hard Target to Attackers - Operationally Effective Vulnerability Management

04 December 2012 03:45 PM - 04:45 PM

Today’s attackers are getting better at finding and exploiting security weaknesses. We must provide hard targets to attackers. Extending vulnerability management will help deal with emerging threats. This presentation provides advice on extending vulnerability management to meet new requirements. - What are the capabilities and limitations of vulnerability management? - How can vulnerability management be extended to deal with emerging threats and cloud computing? - What vendors deliver vulnerability management technologies to meet new requirements?

RSA: Advancing IAM to Defend the Borderless Enterprise

04 December 2012 03:45 PM - 04:45 PM

RSA will lead a thought provoking discussion on how IAM solutions must adapt to protect corporate data and users wherever they are, even when they’re outside the traditional boundaries of the organization. This will include key questions: As mobile users and cloud services transform IAM, what new security requirements do you need to be aware of? What technology advances could potentially close the IAM gap in this new open online world?

Guest Keynote: "The World According to Dave Barry" (Please note:This session will not be recorded or available through Gartner Events on Demand post-event.)

04 December 2012 05:00 PM - 06:00 PM

No two speeches of humorist Dave Barry's are exactly the same. Barry brings his hilarious sense of humor to your stage and offers up his wacky point of view on relationships, work, kids, technology, and life in general. In the style that is his trademark, Barry speaks about the absurdities of our everyday lives. Clever and hilarious, this longtime writer delivers laugh after laugh.

Avatier Corporation: Get Your Football Game On! Music, Drinks, Betting and Prizes!!!

04 December 2012 06:00 PM - 08:00 PM

The Identity Management game is on and we’re hosting the biggest competition and tailgate party in Vegas! A huge Madden tournament will test your prowess and hone your video football skills. But, even if you pass on video games, you can bet on the winners and catch big prizes. We’re serving lots of food and beer. Visit the Avatier booth for a ticket and get a Fumble Recovery “Jet Lag” Bag to boot.

Lieberman Software Corporation: An Evening of Magic

04 December 2012 06:00 PM - 08:00 PM

Join Lieberman Software for an evening of magic! You’ve seen the magic of our software… now experience professional magicians at work close up. Enjoy magic tricks, drinks, food, and enter to win great prizes. We will be giving away numerous Kindle Fires and every visitor to our hospitality suite will receive a gift bag filled with tricks and treats. This is your chance to visit with our executive management team in a relaxed, fun setting.

Centrify Corporation: Be an IT Superhero

04 December 2012 06:00 PM - 08:00 PM

Who is that masked man? It’s you. Coming to your end users’ rescue with unified identity services that save them from dealing with multiple passwords and enhance your superpowers by centralizing identity management across data center, cloud and mobile. Put down your cape, take a load off from leaping tall buildings in a single bound, and join Centrify and your fellow IT superheroes at our hospitality suite at the Gartner Identity and Access Management Conference!

Cyber-Ark Software: International Wine and Dine

04 December 2012 06:05 PM - 08:05 PM

Cyber-Ark Software, the leader in privileged identity management, invites you to come and enjoy our “International Wine & Dine” a night of Food, Wine and Prizes! Talk shop with other IAM professionals, taste cuisines from all over the world or just enjoy wine from your favorite country. Don’t forget to visit our booth or suite to enter for our big prize…you never know a trip to Napa could be right around the corner!!! Join us Tuesday, December 4th from 6:00 – 8:00 p.m. in the Turin Room!!!

Breakfast with the Analysts

05 December 2012 07:00 AM - 08:00 AM

Registration

05 December 2012 07:00 AM - 12:30 PM

Attendee List

05 December 2012 07:00 AM - 12:00 PM

Elevating and Sustaining the IAM Program (For Healthcare End-Users only. Pre-registration Required.)

05 December 2012 07:00 AM - 08:00 AM

IAM program maturity is not a one-time event. This discussion will focus on building a business case and governance framework for ensuring that processes are well-integrated and sustained throughout the organization.

Power Breakfast: Trends & Take Aways for Information Security, 2012-2013

05 December 2012 07:00 AM - 08:00 AM

With continuing trends in cloud, consumerization, mobility and the next big thing, the way IT is delivered is changing. Each brings new threats and breaks old security processes. Here we review the top 2012-2013 security hot topics to map the trends. - What social, business and technology trends lead to increased threat to businesses? - What security technologies and processes will provide the highest return on investment over the next 5 years? - How can businesses balance protecting customer data with the need to increase revenue?

Case Study: Identity Access Management as a Financial Services Disruptor

05 December 2012 08:00 AM - 09:00 AM

Join John Stuart, CIO at Beverly Hills Wealth Management (BHWM), to discuss BHWM's strategy for delivering enterprise-level connectivity and cloud service tools accessibility at a newly formed Registered Investment Advisor. Take a deep dive into the parallel development of BHWM’s Financial Advisory collaboration portal branded Maestro and the Identity Access Management tools embedded into the UI. Discover how strategic partnerships, cloud-based identity, and access management methods typically found in large financial institutions have helped BHWM become an independent investment services differentiator. • Discover what the RIA market looked like in the past and how the Independent Financial Services market has grown in seats, services, and opportunity. • Understand how new federation techniques are empowering the independent advisor practice. • Get to know the environment and business requirements at BHWM and how they are protected by IAM. • Learn about the parallel development of Maestro, BHWM’s custom employee portal embedded with Identity Access Management services.

Roundtable: Things You Always Wanted to Know About Authentication but Were Afraid to Ask (For End Users Only. Pre-registration Required.)

05 December 2012 08:00 AM - 09:00 AM

Authentication and associated practices and technologies can be a daunting topic. This Gartner facilitated analyst user roundtable will allow you to ask and discuss anything and everything related to authentication.

Consulting and System Integration (C&SI) and Managed/Hosted Services

05 December 2012 08:00 AM - 09:00 AM

The services market to aid IAM deployments is growing and expanding. Maturity of IAM products and services continues to make implementations easier, but complexity and compliance concerns continue to demand help in making IAM systems truly effective. IDaaS and outsourcing are also growth markets. - What is the current state of IAM C&SI and managed/hosted service markets today? - What are best practices in choosing these services? - What is the future of IAM C&SI and managed/hosted services?

Making It Work: Identity and Mobility

05 December 2012 08:00 AM - 09:00 AM

Integrating mobile devices into the existing IT fabric — particularly IAM — is challenging, due to product maturity and increased complexity. Join us to explore the authorization, credentialing, and authentication interactions among mobile devices, IAM components, and mobile device management.

Fighting Threats with Layered Security and Improved Identity Proofing

05 December 2012 08:00 AM - 09:00 AM

This session will look at internal and external threats against the enterprise and will delve into the layered security, fraud prevention and identity proofing approaches needed to mitigate these threats. - What are the current and future attack vectors threatening the enterprise? - What are the best practices for layered fraud prevention and identity proofing to protect account takeover and new account fraud? How do they fit into existing IAM processes? - What type of layered security services are needed to stop external threats, such as phishing and malware based attacks, against employees and external users

Workshop: Reporting to the Board (For End Users Only. Pre-registration Required, limit 2 per attendee.)

05 December 2012 08:00 AM - 09:30 AM

CIOs, CISOs and IAM leaders struggle to link efforts in IAM to the value they provide at line-of-business and executive levels. A handful of companies have figured it out; these practical tips can help you solve this challenge. In this workshop we share and discuss best-practice approaches to these challenges: - How can you develop a framework for linking IAM strategy to business strategies? - How can you best articulate the business value of IAM programs? - How do you link IAM indicators to IT key risk indicators and organizational key performance indicators?

Omada: Bayer Group – From IAM to IAG/Deep Access Intelligence

05 December 2012 09:15 AM - 09:45 AM

Bayer Groups global company-wide IAM solution has been rolled out to more than 140 companies in 62 countries with more than 100,000 managed active identities and users. In this session Stephanie Jaecks, Program Manager, Global IAM program at Bayer will present how Bayer is enhancing its successful IAM solution under implementation with important IAG features to achieve compliance, deep access intelligence, and complete control over IDs, accounts, and entitlements.

Authentify, Inc.: Rainy Day Scenarios for Cloud Based-based Authentication

05 December 2012 09:15 AM - 09:45 AM

While the advantages of cloud computing are becoming more obvious, there are disadvantages when considering end user authentication in less than ideal cloud scenarios. This session will discuss applying best practices in out-of-band authentication to avoid being struck by lightning in “rainy day” scenarios that include  The dreaded First Time Encounter  Adding strong authentication in Google App Engine, Azure, Amazon EC2, or OpenStack type environments  BYOD environments and others.

Identity and Security Considerations for Mobility

05 December 2012 10:00 AM - 11:00 AM

This session explores the intertwined requirements for security, data protection and IAM. The options for managing the risk associated with mobile devices’ storage of and access to sensitive information and applications is described and analyzed for their impact on the mobile strategy. - Control options for sensitive data on mobile devices - The extent to which identity controls can be incorporated into device protection - The relationship between security, device management and application architecture

Roundtable: Identity Data Model (For End Users Only. Pre-registration Required, limit 2 per attendee.)

05 December 2012 10:00 AM - 11:00 AM

Admit it - your organization has an identity data model. The question is, "is the existing model helping your organization or hurting it?" In this interactive analyst user roundtable, attendees and analysts will discuss success practices and real-world examples of the identity data model.

Getting to SSO

05 December 2012 10:00 AM - 11:00 AM

The quest for single sign-on is the result of disparate identity silos, increased password related support costs, and user frustration. This session helps attendees make decisions regarding strategies and tools to achieve SSO. - What are the forces driving enterprises to require SSO? - How should organizations plan for and choose SSO approaches and tools? - What are the market solutions, and which vendors and open source solutions can support different SSO needs?

Panel: National Strategy for Trusted Identities in Cyberspace

05 December 2012 10:00 AM - 11:00 AM

The goal of the panel is to introduce the works of some of the NSTIC pilot projects. Each project would receive a few minutes to talk about the nature of the project, the expected outcomes, and how the outcomes will impact the market. The audience will then get an opportunity to ask questions.

A Risk Based Approach to Attestation

05 December 2012 10:00 AM - 11:00 AM

IAM risk-mitigating controls provide a view into the appropriateness of an account's access. Attestation (access certification) can help address this, but many organizations are struggling with the volume of entitlements and the frequency of the reviews that are needed on an ongoing basis. - Should organizations continue to conduct attestation in a re-occurring, time-based fashion (yearly, quarterly, monthly, etc.)? - What is a risk based approach to attestation? - How can this approach be leveraged to control / contain an organization’s exposure to information security risks from an identity and access management perspective? - What are the benefits and critical success factors of this approach?

Lieberman Software Corporation: Roundtable: Achieving Continuous Compliance with Privileged Account Management

05 December 2012 10:00 AM - 11:00 AM

You know the drill: the auditors discovered that you’re losing track of privileged accounts, aren’t changing passwords regularly, and your Superuser passwords are stored in a spreadsheet on a public share. How do you implement real control that can be verified? Do you have the time, resources and budget to make the auditors happy? In this roundtable we’ll discuss better ways of securing your environment and achieving real privileged account security and regulatory compliance.

Closing Keynote: Putting Strategy Into Action

05 December 2012 11:15 AM - 12:15 PM

In this informal panel and discussion, Gartner IAM analysts reveal their key take-aways from the conference. Key issues include: What trends have been revealed while talking to attendees? What should attendees do ASAP upon returning to the workplace? How best can attendees leverage their conference experience?