Overview#

IDSA Integration Framework is a concept from Identity Defined Security Alliance which classifies various components for the Framework.

Identity and Access Management#

• Access Management - Provides the authentication and authorization mechanisms (Single Sign-On, Multi-Factor Authentication, Graded Authentication) ensuring appropriate security levels are enforced.
• Identity Governance - Facilitates the management of a user’s identity as it pertains to access, authorization and adherence to compliance requirements.
• Identity Administration - Enables Self-Service Access Request, Password Management, Profile Management and Identity Lifecycle Management.

Security Operations (SecOps)#

• Security Information and Event Management (SIEM) - Enables bi-directional sharing of data for better visibility and intelligent decision making
• User and Entity Behavior Analytics (UEBA) - Behavior-based security intelligence to detect and assess risky activity on the network and alter authentication processes in response.
• Service Management - Provides a tracking mechanism to capture potential security considerations that warrant additional analysis.
• Fraud and Risk - Utilizes machine learning to find and prevent fraud, as well as the ability to correlate Security Incidents from disparate sources and ensure compliance with corporate and industry regulations.

Risk Management#

• Privileged Access Management - Provides enhanced visibility and adaptive threat response to attacks, with an emphasis on detecting abnormal authentication activity with Privileged Identity.
• Governance Risk Management And Compliance (GRC) - Provides visibility to potential security risks and allows organization an enforcement mechanism to remediate issues.
• Network Security (NetSec) - Facilitates communication across private and public cloud infrastructures for the purposes of providing a single layer of application security.

Data Protection#

• Data Access Governance (DAG) - The discovery and Data Protection of data across the enterprise and manages the process of how users are granted access to this data
• Enterprise Mobility Management (EMM) - Allows the registration of Mobile Devices to safely leverage Single Sign-On (SSO) for access to cloud computing and Native applications. In addition, the chain of trust associated with a registered device exposes device attributes and compliance rules.
• Data Loss Prevention (DLP) - Prevention of the distribution of sensitive data by utilizing sufficient risk based definitions to determine the appropriate level of assurance.
• Cloud Access Security Broker (CASB) - Utilizes the deep analysis capabilities to provide Adaptive Risk analytics to identify compromised credentials and potential risks that can then be used in authentication decisions.

More Information#

There might be more information for this subject on one of the following:

• Data Protection
• Identity Defined Security Alliance