3. Data Access Governance


Permissions auditFile system consolidationData access governanceIdentity & access management

Secure administration of access rights
to unstructured saved data.


econet’s Data Access Governance helps organizations meet the high expectations in risk management and the increasing compliance demands in regard to critical information.
 

Monitoring and managing access rights


econet’s Data Access Governance does more than just collate current permissions and periodically certify them. When it comes to data protection, it is far more important to perform ongoing orderly administration of permissions and to recognize any deviations between the actual and target conditions. Where do any access rights exist that do not follow the set rules?

To put this plan into practice, permissions have to be managed using regulated procedures that business users in companies’ departments find comprehensible and can perform quickly and easily to determine who should be given which access, when and where to a certain data resource.
 

Advantages of econet’s Data Access Governance


econet’s Data Access Governance meets business expectations and risk management requirements
  • Compliance with the company’s internal requirements and legal regulations for managing access to critical data (SOX, BDSG, MaRisk, GoBS/GDPdU, KonTraG, etc.)
  • Departments can manage their access themselves – without the direct involvement of IT staff
  • Regulated workflows for application and authorization processes
  • Comprehensive self-service functions
  • Administration of rights to information even at sub-AD group level (e.g. folders on file servers or libraries in Microsoft SharePoint)
  • Powerful reporting functions: Who has permission to do what, and who allocated which permissions when?


Integration into existing IAM systemsIntegration der econet Data Access Governance-Funktionen in bestehende IAM-Systeme


econet’s Data Access Governance functions can be connected to existing IAM systems, from loose links through to deep integration. This opens up a new realm of service that conventional IAM systems cannot offer. Administrators, operators and users remain in their familiar environment with no need to accustom themselves to additional systems.
  • Single point of administration
  • Incorporated into existing self-service gateways
  • Integrated into existing reporting


IAM versus DAG

IAM and DAG both control access to IT resources. Although they use different approaches, they complement each other rather than compete.

A brief comparison:
  • IAM solutions are used to administer identities and their access to as many different IT resources as possible.
  • DAG solutions, on the other hand, concentrate on systems that contain unstructured data. According to Gartner, this accounts for approx. 80 percent of all business information. Unstructured data refers to documents or information that is not stored in superordinate applications but “randomly spread” across file systems or document management systems.

  • Authorizations using IAM try to minimize administrative outlay by applying control and role-based automatic processes.
  • Authorizations using DAG are approved by the data owner in an application procedure or via a self-service gateway.
DAG ergänzt IAM

Augmenting existing IAM systems with
econet’s DAG solution means that access
to data resources can also be managed
at sub-AD group level such as on file servers,
in Microsoft SharePoint or other document management systems. Regulated procedures such as authorization workflows or gateway self-services incorporate the departmental data owners.

 

  • IAM systems generally do not perform administration any lower than the AD group level of the connected system.
  • DAG systems allow access administration right down to folder and file level. As well as allocating rights, econet’s DAG solution offers functions for automatically creating the data resources themselves and can provide all the information to a superordinate IAM system.

If you have any questions, simply call for a chat with one of our experts on +49 89 514 510, or get in touch via email. We look forward to hearing from you.