April- June 20228GOVBUSINESS REVIEWIMPLEMENTING AN IDENTITY AND ACCESS MANAGEMENT PROGRAMIdentity and Access Management (IAM) is a concept that can be overwhelming, however, starting out can be simple. If you are just getting started in the IAM space, you will immediately be inundated with articles, knowledge bases, and regulatory requirements all focused on the same thing: making sure the right people have access to the right resources at the right times and for the right reasons. You may wonder where to start in this world of Identity and Access Management and how to make it a successful program at your firm.I have created a simple framework to help you get started and bring an IAM program to life.Envision for a minute, that you are tasked with establishing an IAM program. Multiple teams may be conducting activities to support IAM, but now your firm has decided it is time to consider a centralized team to help build guiding principles and implement a platform. Kicking off an initiative with a firm-wide impact, like IAM, means you'll need buy-in from various areas. Before you run out and purchase that platform, I want you to pause and continue reading. The five steps below will ensure the success of an IAM program and, ultimately, build a strong business case to bring in the right platform.Get Informed and Understand Current StateRemember how you used to research a topic back in school? It's the same concept. Check out simple articles online, talk to peers, or look up white papers/research from respected firms or IAM experts. For several weeks, you will need to eat, breathe, and sleep (ok - maybe not sleep) IAM. You will also take this time to conduct interviews and document the Devan N. D'SilvaIN MY OPINONDevan N. D'Silva, Identity and Access Mgmt. Manager, Vice President Risk Management, BairdBy
< Page 7 | Page 9 >