Sun announced a Governance, Risk and Compliance (GRC) strategy that will not only include the recently released Sun Role Manager, but an expanded portfolio of new technologies and features across the entire identity management suite over the next 12 months. The comprehensive portfolio is expected to address access management, federation, web services security and auditing. The company did not disclose specific details about forthcoming products.

A key component of the company's GRC platform will be Sun's enterprise role management and identity management technologies, which Sun just strengthen with its acquisition of Vaau, an enterprise role management (ERM) and identity compliance solutions provider.

"Enterprise role management is critical to establishing access control compliance and is a big part of GRC," said Nick Crown, director of Risk Management and Compliance Products at Sun. "It allows people to understand the level of access users have and more importantly it also provides an interface in order to define and manage roles."

The company reports its GRC strategy brings IT and business executives closer together to create organizations that are agile and able to respond to threats quickly.

"Governance, risk and compliance are no longer just IT issues. GRC is also a boardroom issue," said Mark Herring, vice president of marketing, Software Infrastructure, Sun. "With the growing number of applications available to employees and the constant adjustment of employee roles, companies are spending increasing amounts of resources dealing with the mismanagement of access control and compliance and taking on huge business risks. Today, Sun is addressing GRC requirements in a cost-effective, sustainable framework across the entire enterprise, offering our customers a solid foundation to extend the reach of their enterprises, while reducing the associated risks."

With Sun, companies will be given strong management of their data assets and be able to support an increased number of users and information securely, the company reports. Its GRC strategy is designed for companies that operate in dynamic environments, where customers, vendors and partners collaborate, transact and share information 24 hours, 7 days a week.

To deliver a strong identity management portfolio built on open source technologies and address customer challenges in GRC, Sun does boast an extensive global network of alliances including Accenture, Deloitte & Touche LLP and PricewaterhouseCoopers LLP. These organizations participate with Sun in solutions development and offer a full range of services, from consulting and deployment to support.

Sun states its GRC offerings help enterprises better manage and enforce access to applications based on employees' roles and entitlements. In addition, Sun's GRC offerings automate access certification, helping companies create efficiencies around compliance reporting.

Tune in to Identity Management Buzz TV which is hosting a few brief webcasts covering GRC, role management, and the Vaau acquisition.

• Crown talks to Julio Tapia, director of Identity Management Strategy, about what GRC is and the strategy around it. (5:10)

• Kevin Gallagher, Director of Compliance Strategy, joins Crown to discuss the role management methodology developed and pioneered by Vaau along with a couple of customer case studies where that methodology was put into place. (7:52)

• Crown also hosts a discussion on role management with Vaau Founder Sachin Nayyar. (8:11)

• In a separate piece, Crown and Nayyar review Sun's acquisition of Vaau, the market-leading enterprise role management company. (6:42)

• Tapia also discusses Sun's identity management strategy with Liz Matthews, Sun's senior director of Software Marketing. (4:46)

For more on Sun Role Manager, visit http://www.sun.com/software/products/rolemanager/index.jsp [...read more...]

		fullsource
Print Email Current Profile Archive Blog Generate newsletter