How do you integrate IAM with other cybersecurity solutions, such as cloud infrastructure entitlement management (CIEM) and privileged access management (PAM), to provide a more comprehensive and effective security posture?

CloudSecurity Strategy & Roadmap
3.8k viewscircle icon1 Comment
Sort by:
Director, Special Projects, IT/OT Security in Energy and Utilities2 years ago

We currently use SailPoint to manage our access multiple applications and platforms. Preferably we use APIs to integrate. The data flows both directions. SailPoint provisions and revokes in the system and also keeps up with who has what access in the application, so we know if any access was added in another way. 

Other applications are manual for provisioning and deprovisioning and we gather who has what permissions back into SailPoint from a flat file generated daily.

By the time we finish the scope of our program, we will have integrated ~300 systems and platforms into SailPoint.  We also use it to monitor for SODs both withing a system and between systems.  (Exception is SAP - intra-application SODs are detected by SAP GRC.)

There are other applications besides SailPoint that do this same functionality, so I recommend you look at alternatives.  When I joined the our next gen ERP program, the tool had already been selected so I don't have a great grasp on the overall market for these tools. 

Lightbulb on1

Content you might like

Are you noticing a shift toward hiring fewer specialists in tech roles and more generalists—individuals who are adaptable, open to development, and who bring greater diversity to the team? How is this trend affecting your hiring strategies? In the past, your talent pipeline may have focused on candidates with computer science degrees straight out of college. What qualities are you prioritizing now, and where are you searching for new talent?

Read More Comments

Is your company using facial recognition technology?

Yes59%

It’s being discussed25%

No15%

View Results

Do you feel confident in your current process for taking inventory of all your org’s apps?

Completely confident19%

Mostly confident73%

Not quite confident6%

Not at all confident1%

View Results

Most of the application team I lead is in Brazil and the global IT leadership (US-based) now wants to move some of that work to a new global delivery center in India to be more cost effective, but I have doubts. The Brazil team is delivering good quality — is cost efficiency enough reason to relocate the work? What are the biggest pros/cons we need to consider?

Read More Comments

What cloud cost optimization strategies have you found most effective in your organization? Are there specific techniques or best practices that have helped you reduce expenses without sacrificing the resources your teams need?