Red Cross overhauls ID management

Red Cross overhauls ID management

By Taylor Armerding, CSO | Feb 1, 2012

The Red Cross is a longtime leader in the human security business. It organizes disaster response, supplies nearly half the nation's blood supply, teaches life-saving skills, provides international humanitarian aid and supports military service members and their families.
 
But it hadn't been so much at the cutting edge of information and identity security until last March, when it was named the first recipient of the CourionCare Program for Non-Profits.
 
Courion, the Westborough, Mass.-based vendor of access governance, compliance and provisioning technology, donated enterprise software licenses for the company's Access Assurance Suite, which enables automated password reset and synchronization capabilities for the charity's mix of thousands of staff and volunteers.
 
"It was really a game changer for us," says Red Cross CISO Suzanne Hall. "I've got to manage 70,000 identities on a given day, and when I first came, we didn't have ability to invest in automated management tool sets. All our procedures were manual."
 
That not only made it difficult to deliver IT services to a very mobile and dispersed work force. "It also gave us trouble passing audits," she says. "The risks of unmanaged identities can be huge."
 
That program helped the agency reduce the risk of security and compliance breaches by automatically eliminating system access when a user changed responsibilities or left the organization.
 
So this past week, the Red Cross announced it is going a step further, with Courion's new Access Risk Management Suite, to help streamline its transition to the Microsoft Office 365 cloud computing platform.
 
 

Add comment

Post a Comment

The content of this field is kept private and will not be shown publicly.
Verification Code
This question is for testing whether you are a human visitor and to prevent automated spam submissions.
 

knowledge_central_tab

 
 
Knowledge Central
Trusted Mobility Index
The mobile ecosystem of devices, services and networks is at a critical inflection point.While the mobile revolution is unleashing massive opportunities in both emerging and mature economies, it is also increasing in complexity and confusion. The reality is the lightning-fast adoption of powerful, smart devices is outpacing society’s ability to secure them. Today, trust in mobility hangs in the balance.
The state of the Internet, Q4, 2011
Geography appears to play a role in frequency of observed attacks on specific ports. For example, Port 23 (Telnet) is a favorite target for attacks observed to be originating from South Korea and Turkey, where it accounted for more than five times the number of attacks targeting the next most popular port (445 in both countries). Other instances of geography-based port targeting include observed attacks centered on Port 1433 (Microsoft SQL Server) in China and on Port 80 (WWW/HTTP) in Indonesia.
 
 
 
HID Global deploys a centralized, web-based IP access control solution at Fuxi Power Plant
Unable to meet the needs for real-time monitoring with its traditional patrol system, China's Fuxi Power Plant has deployed HID Global's VertX V2000.
StubHub: How to spot fraud before it happens
Whenever a list of log-on credentials is dumped onto the Web, retailers get hit with waves of automated attacks. Here's how ticket marketplace StubHub fights the threat.