Archie Reed’s Secure Observations Blog -

NIST RBAC - What goes around...

...comes around. In Sep 2006 I sat on a panel at Digital ID World titled "Are NIST Based Roles the Right Answer?”. I blogged about the session and issues discussed here... I can even point to my 2001 book "The Definitive Guide to Identity Management"...

Published 07-11-2008 12:27 AM by ArchieReed

Filed under: NIST RBAC Identity Management burton group

Digital ID World Sept 2006: Are NIST Based Roles the Right Answer? #1

Phil and Eric had asked me to sit in on a panel titled “Are NIST Based Roles the Right Answer?” along with Thomas Raeuchle (Prodigen) and Chris Sullivan (Courion). Phil set the premise that he had heard through all his conversations “that in the process...

Published 09-21-2006 1:02 PM by ArchieReed

Why does the world need a Federation Router?

In my previous post on Federation, I noted that HP releases game changing "Federation Router" in Select Federation 7.0 . The question then is: Who needs it? In this entry I wanted to take a further look at the challenges that drove this development. In...

Published 10-30-2007 2:51 AM by ArchieReed

Specifications for Linking Digital Identity Management to Consumer Devices

You should have caught a recent announcement from the Liberty Alliance on the release of specifications for "Linking Digital Identity Management to Consumer Devices ". HP takes a wide view of this standard, seeing it as part of a much larger opportunity...

Published 03-22-2007 12:32 PM by ArchieReed

Jon Oltsik writes HP Focuses on Security Strategy not security products

I've not had the opportunity to talk to Jon Oltsik of the Enterprise Strategy Group for a few months, but Chris Whitener, Chief Security Strategist for HP's Enterprise Storage and Servers has. Jon picked up HP's approach to security, and HP's " strategy...

Published 09-18-2007 4:07 PM by ArchieReed

Interop 2008 Las Vegas - Disconnects with the NAC Interop Lab

I spent time at Interop Las Vegas (Apr 27 – May 2) a couple weeks ago, including attending the NAC day on the Monday which I’ll comment on separately. One thing strikes me is that NAC is still a jumbled market with this being an obvious hook for many...

Published 05-15-2008 1:54 PM by ArchieReed

Digital ID World Sept 2006: Bob Blakely on Privacy

As I’ve focused on several times, privacy is a hot topic for me, and Bob Blakley (who recently joined the Burton Group from IBM), gave an interesting and existentialist session titled "What is Privacy, Really?” Lots of quotes including the following:...

Published 09-19-2006 9:30 PM by ArchieReed

California's Anti-Phishing Law vs. Bad People doing Bad Things...

While the Senate Bill 355 ( California Anti-Phishing Law) was announced on Oct 4 , I've spent a little time getting some discussion around how useful the new California Anti-Phishing Law will be. SB 355, the Anti-Phishing Act of 2005 , makes the practice...

Published 10-21-2005 3:26 PM by ArchieReed

Sherlock Holmes and the Mystery of the Twisted Conclusion

Ever read an article (perhaps even one of mine...), where you're right there with the author, everything makes sense, they know what they're talking about, the stars align? Then, without a by your leave, they conclude with an almost non-sequitor that...

Published 03-06-2006 7:36 PM by ArchieReed

Security and Best Practices - Human Behaviour affects all conclusions...

Welcome back… I've been absent from the blog for a short time as I've been researching the IT Infrastructure Library (ITIL ) and IT Service Management (ITSM) in relation to Security and Identity for a while - as well as reviewing the CISSP exam. ITIL...

Published 04-23-2006 2:22 PM by ArchieReed

"Just say no to 'GRC'" - say what?

Unfortunately due to a last minutes change in plans I did not make it to this years Catalyst Conference, so I am working my way through the slides online and chatting with those who did attend. One thing that caught my eye was Bob Blakley's Thursday...

Published 07-11-2008 4:48 PM by ArchieReed

Filed under: GRC identity management

HP releases game changing "Federation Router" in Select Federation 7.0

Most enterprise level technologies face the issue of scalability at some point. Most vendors try to support more and more protocols and similarly, more and more features, without changing the way in which their tool is managed, creating a significant...

Published 10-05-2007 7:22 PM by ArchieReed

Virtualization - Rethink Virtualization in Business Terms

I've been spending a fair amount of time over the last few months looking into the field of virtual computing, with a focus on secure virtualization. It's a huge field with a great deal of market(ing) opportunity, AND a great deal of expectation...

Published 09-03-2008 7:58 PM by ArchieReed

Virtualization: Five Steps to Safer Virtual Servers

Chris Whitener is HP's Security Strategist. Last month Chris wrote an article in CIO magazine titled Virtualization How-To: Five Steps to Safer Virtual Servers . This was based on a lot of our insights drawn from our customer engagements, our research...

Published 09-03-2008 8:15 PM by ArchieReed

Filed under: virtualization virtual computing security

Dana Gardner BriefingsDirect - Changing business landscape makes identity and access management key to IT security

Yes- Archie Reed is still looking at security and identity... Last month I spent some time with Dana Gardner as part of the ZDNet BriefingsDirect. Alongside me were Dan Rueckert , worldwide practice director for security and risk management in HP’s Consulting...

Published 12-09-2008 8:09 PM by ArchieReed

Archie Reed’s Secure Observations Blog

Syndication

Recent Posts

Tags