When employees leave a company, often all contact between the company and them does not end abruptly. Instead, there are often follow-up obligations to be fulfilled by one or both sides. Perh...
https://genericiam.blogspot.com/2023/05/what-is-your-alumni-concept.html
Why the concept of Total Workforce Management symbiotically complements the Alumni concept. Introduction Total Workforce Management (TWM) is a strategic approach to managing an organiza...
https://genericiam.blogspot.com/2023/05/on-total-workforce-management-twm.html
Roles – What we mean by the term According to a definition published by the NIST a role is a job function or employment position to which people or other system entities may be assigne...
https://genericiam.blogspot.com/2023/03/role-modelling-guidelines.html
A LIGHT-HEARTED VIEW AT SOME IDIOSYNCRASIES OF NAMING PROCESSES IN IDENTITY & ACCESS A few of you may know that process definition in general and Identity & Access processes in particular...
https://genericiam.blogspot.com/2018/12/identity-process-utopia.html
At first sight nothing – you would say, except perhaps that both of them, the General Data Protections Regulation and the change imperative digital transformation, are currently hot topics in...
https://genericiam.blogspot.com/2017/08/gdpr-digital-transformation-what-do.html
During a long professional career a lot is supposed to happen along the intricate windings of our mortal life and hence some folklore piles up to be drawn from when telling our grandchildren our...
https://genericiam.blogspot.com/2016/11/just-compliance-issues.html
In last week's contribution (From ‘oversight’ to the algorithm-driven company ) I contemplated about the necessary underpinnings of a digital transformed corporation, gave some justification...
https://genericiam.blogspot.com/2016/07/challenges-ahead-for-digital.html
In last weeks contribution (Identity & Access Governance in the age of digital transformation ) I was outlining the general picture, answering the question, what Governance is after all, what it...
https://genericiam.blogspot.com/2016/07/from-oversight-to-algorithm-driven.html
Identity & Access Governance obviously is a difficult task. Many major corporations struggle to meet their various compliance criteria, which could be expected as a natural by-product of good go...
https://genericiam.blogspot.com/2016/07/identity-access-governance-in-age-of.html
INTRODUCTION Recently, at a customer’s site, I heard an enlightening response to a simple and straightforward question. The question was: “Why do we implement our access management syst...
https://genericiam.blogspot.com/2015/10/rbac-first-abac-next-or-what.html
In the field of Identity- & Access Management terms like authentication an authorisation are well understood, frequently used and everyone knows what they mean. Really? Well, Identity Managem...
https://genericiam.blogspot.com/2014/05/authorisation-what-does-it-mean-after.html
We saw that maintenance of roles is rather simple (How to find roles ). Maintenance just consists of the CRUD (create, read, update & delete) operation on the role object. But what if a role is ...
You might remember my simple model of static objects of the corporation . Now here comes the complexity. In my nice a lean model of the static IAM objects there was one innocent and less impress...
https://genericiam.blogspot.com/2012/03/constraint-universe.html
7+1 REASONS AND MORE TO EXPECT There are several caveats to be aware of up front when starting a major IAM project. These useful hints are driven by experience from projects that went wrong du...
https://genericiam.blogspot.com/2012/02/why-iam-projects-fail.html
Lately - well it is some four months ago already - I posted a simple model of the AM maintenance processes. Not covered at that time were the processes which lead to an assignment of roles to p...
Not, many of you may have read this Blog post before here , posted at Sat. June 30th to the GenericIAM Blog . Here I made the statement that "Roles are the organization". You may read through th...
https://genericiam.blogspot.com/2011/09/how-to-find-roles.html
If we restrict our considerations to essential processes (see Modelling fundamentals ) there are mainly the identity maintenance processes to be taken into account. Only when we (later) extend o...
https://genericiam.blogspot.com/2011/06/essential-im-processes.html
Just recently I made an eye opening experience. While delivering experts advice to a customer in a large IAM project I was asked if I could confirm that the set of IAM process descriptions that ...
https://genericiam.blogspot.com/2011/06/how-to-find-iam-processes.html
Looking back to the Objects of the corporation , which I defined back in 2010-07-05, I felt the need for some minor adaptations in order to comfortably derive the elementary actions for its mani...
https://genericiam.blogspot.com/2011/06/objects-of-corporation-slightly-revised.html
This post will be essentially in German as it deals with some German language idiosyncrasies. Although I have the strong and irrefutable impression, that we do have this cognitive dissonance in ...
I once mentioned, that follow the ESSENTIAL SYSTEMS MODELING (esm) principles. As not everybody necessarily will be aware of what this term is about I feel obliged to explain it here. The ESSE...
https://genericiam.blogspot.com/2010/08/modelling-fundamentals.html
As from a purely static picture we will never be able to derive the dynamics, i.e. processes, clearly time has come for some dynamic considerations. Remembering the RBAC definition of permissi...
https://genericiam.blogspot.com/2010/08/objects-subjects-actions.html
Do you remember the company “Business Layers”? It was among the 1st who implemented a user provisioning software, called “day one”. What a perfect name for a company! Expressing their ve...
1. THE USER: IDENTITY USES A RESOURCE In many corporations digital identities first pop up as users. It is a short form of expressing that the digital identity is tied to resources: It �...
https://genericiam.blogspot.com/2010/07/objects-of-corporation.html
Summarizing the work done before I try to identify the fundamental objects which are involved in IAM processes and the derived objects which describe the relationships of these fundamental objec...