Note: this blog is a mirror of my HP Labs Blog, on the same topic, accessible at: http://h30507.www3.hp.com/t5/Research-on-Security-and/bg-p/163

Wednesday, February 6, 2008

2008 National Survey on Access Governance: Business Risks and Challenges

A new survey on “access governance” has been released by the Ponemon Institute, as anticipated by this Businesswire article:

“According to the 2008 National Survey on Access Governance released on February 5th by the research firm Ponemon Institute, organizations are facing significant business risks because of inconsistent approaches to access management across the enterprise.
This survey of almost 700 experienced IT practitioners show that vast majority believe that employees, temporary employees and independent contractors have too much access to information assets that are not pertinent to their job function, and that access policies are not being regularly checked or enforced by their organization. This report describes the five major challenges identified by the survey respondents to implementing an effective access governance framework:
  • User access rights are poorly assigned
  • Policies are not regularly checked and enforced
  • Organizations are not able to keep pace with changes to users’ roles and they face serious noncompliance and business risk as a result
  • Senior management lacks understanding of the importance of access governance
  • Collaboration is viewed as critical but is not being achieved”


This survey can be downloaded online, from here.


--- NOTE: my original HP blog can be found here ---

No comments: