How Access Management Compliance Supports Good Business
From: The Essentials Series: IT Compliance - Volume II
By: Rebecca Herold
Many business leaders I speak with now have great concern for data protection law and regulation compliance, which is certainly prudent. However, often when digging into the details of their compliance plans and activities, I find most of the effort and budget is going towards initiatives for firewall and perimeter protection, with increasing implementations for encryption.
These are definitely important! But when I ask about any plans they have for improving their authentication methods, a large number, with perhaps the exception of the online banks, say something similar to, "Oh, we are comfortable with our current authentication solution; our passwords must be strong, and must change every 90 days. And we have not experienced any problems with our access control systems. So, we should already be in compliance with these types of legal requirements." But will single-factor re-usable passwords continue to be an acceptable practice for authenticating enterprise users as incidents continue to occur on an ever more frequent basis?
|
Access to this article or resource requires registration |
||
|
Registration is absolutely free! You will receive access to all articles, eBooks, and white papers in the Realtime IT Compliance Digital Library. In addition, you will gain access to Realtime Nexus, the world's leading portal for free Information Technology eBooks. Enter your email address and click JOIN NOW |
|
Already registered? |