Organizations will spend nearly $4 Billion on Identity and Access Management (IAM) software this year to implement controls and enforce compliance. Too often, these projects fail to deliver expected results within the expected time. They fall short for two reasons:

• IAM technologies cannot provide a 360-degree view of user activity, because these systems are simply not connected to the majority of things a user touches during the workday. For example, IAM is not connected to file shares or USB ports and cannot report on which confidential files a user opened or saved. As a result of having only limited user activity data, IAM can only provide a limited report on user activity and controls.
  
  
• Second, successful IAM projects require well-defined user roles and rights. Top-down role modeling can take many months. Even worse, once these roles are defined, they may soon become outdated as the business changes. As a result, IAM projects often stall at the role definition stage.

ArcSight IdentityView is a specialized solution module, built on the ArcSight SIEM Platform, designed to enhance the value of IAM technologies. It combines the broad activity collection and correlation of SIEM with the user and role management of IAM. As a result, organizations realize the value of their IAM investment more quickly, get a complete picture of user activity, and can pass compliance audits with confidence.

ArcSight IdentityView includes:

• Pre-built connectors to leading IAM systems, to import users and roles easily
• Specialized reports for activity-based role modeling, access violations, and enterprise-wide separation-of-duties tracking
• “Unique ID” mapping to tie all of a user’s activity to a single identity
• Activity profiling to determine combinations of actions that raise a warning. For example, IdentityView can scan the activities of the last 50 terminated employees to see which actions might serve as early warnings about future at-risk employees
• Automatic watch-list creation and escalation of users to different severity levels
• Out-of-the-box rules for fraud detection, unauthorized actions, etc.

ArcSight IdentityView gives nearly any IAM customer a better understanding of who is on the network, what data they are seeing, and which actions they are taking with that data. The result is greater security, better compliance, and easier audits.