NEWSLETTERS
 

CIO.com updates, insights and advice on technology, management and your career.

 Advice and Opinion

 CIO Consumer IT

 CIO Leader

 CIO Enterprise

 CIO Insider

 

RSS Feeds »

 
 
LEADERSHIP
 

CIO Executive Programs

The Leader in Face-to-Face Education for Senior Executives

Offering regional and national programs, CIO (and CSO) events bring together some of the most respected names and thought leaders in information technology and security. Presented by CIOs and other senior level executives, these invitation-only programs offer timely topics and strong networking. Learn More »

 

CIO Executive Council

Public Teleconferences

Join CIO Executive Council members and participate in the following live teleconferences:

* Planning for Succession:
Models for IT Leadership Development, June 23
* Youth in IT: How CIOs Can Engage the Next Generation
June 10
* Change Leadership at General Growth Properties: A
Pathways Leadership Development Seminar, June 25

More / Register »

Learn more about the CIO Executive Council »



 
 
RESOURCE CENTER
 
 
 
SUBSCRIBE TO CIO
 

Are you involved in setting the direction for your company's IT budget or strategy?


Apply today for a FREE subscription to CIO Magazine!

Subscription Services »

Reprints »

 
 

Feature

 

Five IT Projects That Need Your Attention Right Now

You have only so much funding and time, so don't waste either of them. These projects can make you a hero or at least can save you from one of those terrible "learning experiences."
 

October 05, 2007CIO — There's always too much to do. If you had an infinite budget and project schedule, or at least more resources than you have now, you could accomplish impressive things for your company. Performing triage means you need to pick IT projects that can deliver the most bang for the buck. Accordingly, we discuss five projects that deserve a CIO's immediate attention. We chose these projects because they have a measurable impact, contain elements with a relatively fast ROI, and enhance both network security and manageability.

To start with, we discuss identity and access management, to ensure that the right people can get to the right resources. Next is Linux integration. Linux is here to stay, and it's time that you integrate it into your infrastructure. We follow with discussions on patch and change management, both integral pieces in terms of reliability and security for your network. Finally, we talk about incident management, a hot topic for any organization wishing to control costs and keep users content, whether they're behind a desktop or are business partners.

Manage Identities

Account management has been IT's forgotten stepchild, but today's network complexity highlights its importance. IT managers are now faced with an incredibly varied mix of directory services, platforms and applications. Ensuring that accounts are properly provisioned and, when needed, terminated, has become an onerous task.

For example, a small network can have several Windows servers running in Active Directory (AD), several Linux servers using local accounts, and one or two network applications that maintain accounts in an Oracle database. In even this small setting, managing accounts, password resets and access rights is a significant task in itself. Now imagine an enterprise environment, particularly one with legacy applications and Big Iron. Ensuring that users have accounts and the required access in this environment can be both a security and a support nightmare—that is, unless there is a well-defined solution for managing those accounts and access rights.

The Solution

Commit to an identity and access management (IAM) process, which manages account provisioning, password resets, and access rights for accounts on the network and within applications.

Where to Start

There are several approaches to implementing IAM. Some focus on using enterprise directories to house accounts and access rights, but, frankly, this is a very limited approach that does not reach far enough into the enterprise, particularly in terms of legacy applications. Even Microsoft, which touts AD as an identity solution, understands the limitations of an enterprise directory; the company released Microsoft Identity Integration Service (MIIS) to support the broader IAM needs of the enterprise. Keep in mind, however, that an enterprise directory is still a critical element of IAM.

That said, begin by implementing an IAM product, such as those offered by CA, IBM, Novell, Microsoft or Sun, and use it first to manage your enterprise directory. This will give you a very quick win, and it will also give you time to learn both the complexities of the IAM product as well as the overall IAM process. Next, build and implement connectors to specific platforms and applications within your network. Fortunately, many IAM products come with built-in connectors for enterprise applications (for example, PeopleSoft, Exchange), which allow you to progress from simpler to more complex implementations over time.

 
 
 
 
 
 
Loading...
 
 
ABCs
 

How To Do Nearly Anything

Just the basics, please. Sometimes we all need a refresher or we need to make sure our team and our colleagues are all on the same page.

Over 25 tutorials on everything from business intelligence to virtualization.

 
 
FEATURED SPONSORS
 
 
 
SPONSORED LINKS
 

Enterprise Service Bus: A Definition

Symantec State of the Data Center Report

Top 10 Reasons to Go Green in IT

Rethinking the Corporate Help Desk: Learn how to deliver anywhere, anytime incident response

Business Value of Performance IDC Whitepaper

Case Study: Bay State Health reduced the timeframe for recovering critical patient data

The Forrester Wave & Trade: Enterprise Open Systems Virtual Tape Libraries

Bringing Order and Security to your Mobile Workforce: Corporate Mobility Policy and Device Management

Webcast: What does a next generation workplace solution look like in action?

An Executive Guide to Understanding Hosted and Managed Messaging

IT Service Management: Metrics That Matter

What you need to know abou the Power of Pen Computing

Learn about the Power of Pen Computing

Keys to a smooth and successful Office 2007 rollout, before, during and after!

EVALUATING THE BUSINESS IMPACT OF ORACLE ON DEMAND

Gain Profitable Innovation Through Product Lifecycle Management

Unified IT Strategy Playbook - A Must Have!

Extending the Enterprise Network Through Mobility

A CIO's View of Server Virtualization

Let's Get Virtual: A Look at Today's Server Virtualization Architectures

How Office 2007 Exposed Bill Gates

How to simplify mobility and reduce the cost of supporting mobile workers

Helping IT Become a Service Provider White Paper

Extending PCI Compliance to the Mobile Workforce

A proven approach to WAN optimization

Increase conversions on your site with the help of EV SSL.

Shift your ERP investments into high gear and join the leaders!

Gene Kim's Practical Steps to Mitigate Virtualization Security Risks

Business Transaction Management: The Evolution of IT Management

5 Steps to Successful IT Consolidation

TCO Comparison Report: Reducing Costs in the Data Center

Top 10 Questions to Ask when Choosing a Secure File Transfer Solution

Webcast: Learn how Accenture, Avanade and Microsoft are helping organizations overcome productivity declines

2008 Annual Google Communications Intelligence Report

Secure your virtual and physical environments with the same software.

Research Report: The State of Data Protection in Today's Enterprise

Fujitsu Case Study - Thomson Learning

Building Compliance and Security into an Application Delivery Framework

Witness Oracle's Commitment to On Demand Customers

How to Support Your IT Environment - Important Factors

Identity Management Webcast: Compliance and Beyond

Webcast - Secrets to PMO Success: Maximize Value for Your Business

Five things the legacy ERP vendors don't want you to know about on-demand ERP

Survival of the Fittest: Disaster Recovery Design for the Data Center

Windows Server 2008: To Upgrade or Not to Upgrade?

Get Control of Mobile Data (and More)

Data Loss Prevention Starts at the Endpoint

Building a Foundation for Pragmatic Service Management White Paper

Performance Brief: Mobile Application Acceleration

Strategies for centralizing data backup