Identity Privacy 537982

Embed Size (px)

Citation preview

  • 7/25/2019 Identity Privacy 537982

    1/6

    Identity Privacy Risks

    Perspective Performance

    Computer protection 66.96%

    Identity information structure 43.75%

    Process efficiency 44.70%

    taff effectiveness 5!.39%

    "inancia# Perspective 6!.!!%

    Total Performance 53.58%

    Scorecard includes 5 categories, 16 indicators

    Help

    $ ou can c&an'e t&e va#ues in ()ei'&t( co#umn* t&e va#ue must +e +et)een 0 and !0,

    (!0( va#ue means t&at t&e perspective or 'oa# is t&e most va#ua+#e

    $ ou can c&an'e t&e va#ues in (Performance( co#umn,

    Strategy tree and scorecard details :

    Perspective Goal Description

    Computer protection ! 66.96%

    ! 60%

    ! -5%

    ota# Performance in 'roup Computer protection 66.96%

    Identity information structure ! 43.75%

    ! -%

    ecured o+/ects ! 40%

    ! 30%

    re#ated risks

    Weigt!" of #$

    Performance!%

    ystemcomp#iance

    um+er of users and net)ork devices t&atare security po#icy comp#iant* divided +yt&e tota# num+er of users1devices on t&enet)ork* mu#tip#ied +y !00

    Incident"orensics

    &e num+er of incidents attri+uta+#e topo#icy fai#ures divided +y t&e tota# num+erof incidents* mu#tip#ied +y !00

    Identityrepository si2e

    &e tota# num+er of accounts* 'roups* andot&er o+/ects of interest c#ustered +y t&eidentity provider or re#yin' party

    &e num+er of accounts* 'roups* and ot&er

    o+/ectsof interest )it& a sufficient #eve# of securitydivided +y t&e tota# num+er of accounts*'roups* and ot&er o+/ects of interestc#ustered +y t&e identity provider or re#yin'party* mu#tip#ied +y !00

    Provisionin'processcovera'e

    &e num+er of identity repositories andsu+/ects t&e provisionin' system 'overns*divided +y t&e tota# num+er of repositoriesinc#udin' repositories t&at re#y on customor ad &oc provisionin' processes*mu#tip#ied +y !00

  • 7/25/2019 Identity Privacy 537982

    2/6

    ! 70%

    ota# Performance in 'roup &dentity information structure '(.)*%

    Process efficiency ! 44.70%

    ! 40%

    ! 30%

    ensitive c#aims ! -0%

    ! 30%

    ota# Performance in 'roup Process efficiency ''.)$%

    Staff effectieness ! 5!.39%

    ! 300%

    ! !%

    ! 60%

    ! 40%

    ota# Performance in 'roup Staff effectiveness *#.(9%

    !inancial Perspectie ! 6!.!!%

    ! 60%

    ! -%

    ota# Performance in 'roup +inancial Perspective 6#.##%

    ota# Performance in &dentity Privacy ,is-s 53.5%

    Identityassurance

    &e num+er of identity repositories t&atuse proven* standards$+asedaut&entication and aut&ori2ation protoco#sdivided +y t&e tota# num+er of repositoriesinc#udin' repositories t&at re#y on custom$coded access contro# mec&anisms*mu#tip#ied +y !00

    Provisionin'processefficiency

    &e #en't& of time from t&e initia# reuestto t&e time t&e su+/ect isprovisioned or terminated in t&e identityrepository* compared )it& t&e industry +estpractices

    ut&ori2ationc#aims

    &e num+er of re/ected c#aims foraut&ori2ation* divided +y t&e tota# num+erof aut&ori2ation c#aims* mu#tip#ied +y !00

    &e num+er of c#aims )&ose re#ease)ou#d in/ure t&e su+/ect* identity provider*or re#yin' party* divided +y t&e tota# num+erof aut&ori2ation c#aims* mu#tip#ied +y !00

    Provisionin''eodesics

    &e #en't&s a di'ita# identity c#aimtraverses to comp#ete processes suc& asaccount creation* re'istration* andprovisionin'* compared )it& t&e industry+est practices

    8ser accountstatistics

    &e num+er of accounts associated )it& a##

    users* divided +y t&e tota# num+er of users*mu#tip#ied +y !00

    Identity proofin'stren't&

    &e stren't& of secrets used for eac& useraut&entication

    udit systemusa'e

    &e num+er of successfu# useraut&entication events* divided +y t&e tota#num+er of aut&entication events* mu#tip#ied+y !00

    Po#icycomp#iance

    &e num+er of users comp#iant )it& eac&e#ement of t&e security po#icy divided +yt&e tota# num+er of users* mu#tip#ied +y !00

    Return onecurityInvestment

    &e financia# +enefit of security investmentdivided +y t&e cost of t&e investment*mu#tip#ed +y !00

    Co##atera#dama'epotentia# CP

    &e uantification of potentia# dama'e inp&ysica# assets* property as a resu#t of asecurity +reac&

  • 7/25/2019 Identity Privacy 537982

    3/6

    Po)ered +y :a#anced corecard esi'ner

  • 7/25/2019 Identity Privacy 537982

    4/6

    90% 0.0! 0.006-5 !0%

    5% 0.0! 0.007!4-57! 75%

    0.0- 0.0!339-57!

    3% !$sma##* -$medium* 0.0! 0.005 !%

    !00% 0.0! 0.0033333333 !0%

    90% 0.0! 0.00-5 !0%

    arget/alues

    0a"Performance

    ,ealPerformance

  • 7/25/2019 Identity Privacy 537982

    5/6

    !00% 0.0! 0.0066666667 !0%

    0.04 0.0!75

    !-0% 0.0! 0.00-7-7-7-7 !0%

    0% 0.0! 0.006 75%

    0% 0.0! 0.0073333333 75%

    !-0% 0.0! 0.00!!!! !0%

    0.04 0.0!77779

    !50% 0.0! 0.0066666667 600%

    -% 0$#o)* !$medium* - 0.0! 0.005 0%

    !00% 0.0! 0.0055555556 !0%

    !00% 0.0! 0.0033333333 !0%

    0.04 0.0-05555556

    !00% 0.0! 0.0055555556 !0%

    3% 0$one* !$#o)* -$ 0.0! 0.0066666667 0%

    0.0- 0.0!--------

  • 7/25/2019 Identity Privacy 537982

    6/6