Deutsch

English

Peak Solution GmbH

We like to advise you!
go to contact form

Decision-making basis for security concepts

Nuremberg, 25th January 2012 – Based on tried-and-tested analysis methods in the fields of identity and security management, Peak Solution developed the reference model CMMI for IAM. CMMI for IAM is a CMMI (Capability Maturity Model Integration) application and implements the process model requirements defined by the standard ISO/IEC 15504. With CMMI for IAM, Peak Solution uses this de facto standard for maturity analyses in the field of identity and access management (IAM) as well as for furnishing objective expert opinions and creating management templates for security concepts.

Access control, authorization management, IT resources access and issuing ID cards – the security needs of different companies and organizations are diverse and require well-defined processes. The objective of identity and access management is to standardize these processes on a company-wide scale and make them transparent and efficient. “From several years of experience, we know that proliferation of safety installations and a lack of transparency in identification and authorization systems are the biggest obstacles to overcome when establishing an efficient company-wide security management,” explains Ga-Lam Chang, head of the ISM department at Peak Solution GmbH. “With CMMI for IAM, we have developed a method for the creation of completely vendor-independent analyses and expert opinions. The result is a structured situational picture of the IAM processes, which can be used as a basis for the management to prioritize and implement concrete measures and projects.”

Maturity level model reveals need for action

The advantage of CMMI for IAM: With this method, company specific driving forces and reasons for IAM needs are systematically identified and a targeted analysis of the current maturity level of the respective processes is performed. This way, weak points become visible and requirements can be specified independent of individual products. The potential for process improvements is illustrated in an easy-to-understand and well-structured way.

Decision-makers are provided with a common basis for understanding IAM and its contribution to their company's success. CMMI for IAM helps to identify the actual need for setting specific targets as well as to derive recommendations for action. Investment decisions become comprehensible and solid. Additionally, the analysis results generated can be utilized as a basis for the planning and performance measurement of optimization projects.

Reference model based on best practices

CMMI for IAM is characterized by a high level of practical relevance as well as easy handling and usability. The maturity level analysis is performed using ready-made templates. This method is also suitable for evaluating existing IAM implementations in terms of their development potential. The result of a CMMI for IAM evaluation is an objective and neutral benchmark on the status of a company’s identity and access management and the basis for the improvement of existing solutions, for example in the area of single sign-on or multifunctional smart cards for staff identification.