Identity Management: a new tool in ServiceNow for managing credentials
According to a study by the Ponemon Institute, on average, one case of data leakage costs companies $ 3 million. In this case, as noted in Verizon, 90% of data theft is performed using phishing. Therefore, the problem of identifying users to identify the activities of intruders come out on top.
In this regard, ServiceNow has teamed up with Okta to create an application that will allow cloud service customers to identify security holes related to their identification data and quickly close them. The details of this solution will be discussed below.
/ Flickr / gnuckx / PD
')
Okta is an independent service provider for managing user credentials. It works with more than 5 thousand organizations, including Western Union, 20th Century Fox, LinkedIn, Dish Networks and Adobe. ServiceNow is also a partner of Okta: for example, on January 18 of this year, a specialized application was released that was developed for customers using the ServiceNow and Okta services.
The Okta Identity Cloud solution allows administrators to monitor compliance with corporate policies and provide each employee with access only to those IT systems and applications that they need to perform their duties.
The cause of most hacking systems organizations become compromised logins and passwords of employees. When a person is dismissed or transferred to another department, his identification data may create additional security risks if they do not change access rights accordingly. Here, it is often not the employee who acts as an attacker, but the one who managed to get his data. According to Accenture, 70% of companies were attacked from accounts of laid-off workers.
As noted in the Ponemon Institute, to close the "gap" organizations need about 66 days. To help the security services of the client companies reduce the time it takes to detect the source of a leak, ServiceNow turned to the Okta solution.
As Frederic Kerrest, co-founder of Okta, Okta Identity Cloud for Security Operations, will help protect the critical components of a modern cloud infrastructure, help prevent potential cyber threats and save time for security personnel when identifying compromised credentials.
Okta Identity Cloud is an extension to the ServiceNow Security Incident Response (SIR) application, uses the Okta Integration Network, and includes a set of APIs for embedding Okta functionality in other applications.
Security Incident Response helps to monitor the investigation of security incidents: from identifying and briefly analyzing the problem to fixing it. When integrating SIR with Okta, security analysts have access to additional information on a single user without leaving the ServiceNow environment. Data on recent user activity, the device being used, and the application are automatically imported and “linked” to the corresponding incident.
Also, Okta Identity Cloud allows security specialists to automatically reset passwords, change access rights and stop suspicious user sessions. Such measures reduce the time the company remains vulnerable to cyber attacks.
Note that this is not the first time Okta and ServiceNow have announced a partnership. Companies have already worked together on other identity management projects. Among them is the single sign-on (SSO) technology for the ServiceNow Express platform. The Okta service in this case allows users to synchronize account data so as not to enter them every time they connect to Express. You can read about other joint projects ServiceNow and Okta here .
5 additional materials from the IT Guild blog:
In this regard, ServiceNow has teamed up with Okta to create an application that will allow cloud service customers to identify security holes related to their identification data and quickly close them. The details of this solution will be discussed below.
/ Flickr / gnuckx / PD
')
Okta is an independent service provider for managing user credentials. It works with more than 5 thousand organizations, including Western Union, 20th Century Fox, LinkedIn, Dish Networks and Adobe. ServiceNow is also a partner of Okta: for example, on January 18 of this year, a specialized application was released that was developed for customers using the ServiceNow and Okta services.
The Okta Identity Cloud solution allows administrators to monitor compliance with corporate policies and provide each employee with access only to those IT systems and applications that they need to perform their duties.
Why did you need a solution from Okta
The cause of most hacking systems organizations become compromised logins and passwords of employees. When a person is dismissed or transferred to another department, his identification data may create additional security risks if they do not change access rights accordingly. Here, it is often not the employee who acts as an attacker, but the one who managed to get his data. According to Accenture, 70% of companies were attacked from accounts of laid-off workers.
As noted in the Ponemon Institute, to close the "gap" organizations need about 66 days. To help the security services of the client companies reduce the time it takes to detect the source of a leak, ServiceNow turned to the Okta solution.
As Frederic Kerrest, co-founder of Okta, Okta Identity Cloud for Security Operations, will help protect the critical components of a modern cloud infrastructure, help prevent potential cyber threats and save time for security personnel when identifying compromised credentials.
Features Okta Identity Cloud
Okta Identity Cloud is an extension to the ServiceNow Security Incident Response (SIR) application, uses the Okta Integration Network, and includes a set of APIs for embedding Okta functionality in other applications.
Security Incident Response helps to monitor the investigation of security incidents: from identifying and briefly analyzing the problem to fixing it. When integrating SIR with Okta, security analysts have access to additional information on a single user without leaving the ServiceNow environment. Data on recent user activity, the device being used, and the application are automatically imported and “linked” to the corresponding incident.
Also, Okta Identity Cloud allows security specialists to automatically reset passwords, change access rights and stop suspicious user sessions. Such measures reduce the time the company remains vulnerable to cyber attacks.
Note that this is not the first time Okta and ServiceNow have announced a partnership. Companies have already worked together on other identity management projects. Among them is the single sign-on (SSO) technology for the ServiceNow Express platform. The Okta service in this case allows users to synchronize account data so as not to enter them every time they connect to Express. You can read about other joint projects ServiceNow and Okta here .
5 additional materials from the IT Guild blog:
- How to make ITSM in your company more simple
- How to collect infrastructure information using the Discovery ServiceNow module
- Why the cloud ITSM system is ideal for medium and large companies
- 5 human resources for successful implementation of ServiceNow
- ServiceNow Artificial Intelligence: Classifying Queries
Source: https://habr.com/ru/post/345624/
All Articles