Identity management framework : an appropriate approach for Sri Lankan organisations

Abstract

Information is the lifeblood of any organisation and it is imperative that it's secured through implementing a better Identity Management framework, which consists of Authentication, Authorisation, Provisioning/ de-provisioning, Security Policies, Risk Analysis and Controls. The Information Systems have dealt with identity issues for many years, but only recently the technologists started to pursue a wide-ranging approach to Identity Management, which supports to meet the key security management requirements, that most companies have today. The solutions of Identity Management helps to increase the Information Security and minimise the risk of Identity Theft, by helping to manage the life cycle of a single identity and mapping that identit1'''acrosS'' multiple systems;' , principally to reduce the complexity and cost. Due to the recognised importance of Identity Management, this research project investigates the factors that affects the implementation process of an Identity Management solution, through a study among thirty two companies in Sri Lankan financial, telecommunication and software industries. Finally, conclusions are presented together with a reference to the research limitations and some management implications. Some of the main findings of this study is that the level of identity management implementation is associated with the user knowledge and awareness in the concept of Identity Management, management readiness and user training programmes to create awareness. It is also found that there is a positive correlation between the level of Identity Management implementation and management commitment and participation. These, findings are important to improve the quality of implementation methodology when companies start to implement a new Identity Management infrastructure or updating their existing IT security infrastructure.