• Follow us


A digital transformation how-to guide: Don’t slow your business down

The push to adopt digital transformation initiatives is prompting many organisations to accelerate their adoption of cloud technologies. That, in turn, threatens to disrupt some well-established security practices.

The situation can often put IT and security professionals at odds with developers and business execs, both groups being very eager to quickly launch new apps and devise new ways to share data.

This article looks to offer four strategies that we’ve seen proven effective in helping security professionals be more responsive to the business -- without compromising on strict security needs. The goal is to strike just the right balance between innovation and a secure, governable enterprise. 

1) Make security an integral part of digital transformation – not an afterthought 

The latest cloud application or disruptive technology is so critical to business success that it will be implemented by the business come hell or high water. That often means security is brought in as an afterthought, or worse, after the fact.

When security is forced to retrofit to projects already in flight, the result is often barriers and obstruction, which counteract the very motivation for digital transformation. Users become disgruntled, operations grind to a halt, and no one is better off.

The better approach is to have security at the table from the beginning, allowing new technologies to be deployed in a manner that is both transformative and secure. Moreover, users and the business can benefit from the new technology conveniently, without additional risk. Here are security practices that can strengthen digital transformation projects:

First seek to leverage existing secure authentication methods wherever possible rather than creating a disjointed user experience requiring multiple authentication attempts, many passwords – and spurring users to find insecure workarounds. The result is user enablement, increased operational efficiency, reduced risk, and a default to doing the right thing, i.e. remaining secure.Similarly, extending established authorisation profiles to new applications (as opposed to defining authorisation independently on each application) streamlines the user experience, minimises risk, and removes one of the major barriers to successful digital transformation – security that obstructs business objectives.Finally, implement an adaptive, risk-based approach that only requires additional security assurances when the situation warrants it. Often the kneejerk reaction to a new application is to place a barrier (such as a VPN or multi-factor authentication) in the way of user access. But this is heavy-handed and often results in disgruntled users finding ways around the security measures. Instead, use an adaptive approach that takes into account a variety of risk factors (such as location, time-of-day, behaviour patterns, and role) and secure only when needed.2) Bring Shadow IT out of the shadows

Shadow IT is so ingrained in digital transformation that the two have almost become synonymous. But it doesn’t have to be that way.

The reason line-of-business users adopt new technologies without IT’s knowledge or security’s endorsement isn’t because they don’t want them to know – it’s because they don’t want security and IT to tell them “no.”

So, the success technique here is for security professionals to switch from an attitude of denial and restriction (just say no, or sometimes maybe) to one of enablement and empowerment (let me help). This simple shift, while often easier said than done, will be welcomed by individuals who may have been acting rogue for a while.

The theme for security professional to keep in mind is that it’s all about communication and working to prove themselves as partners. Some tips:

Take more interest in the operations and objectives of a project – rather than simply focus only on a project’s vulnerabilities.Find out what the line-of-business is working on, uncover their concerns and goals, and insert yourself as an ally—rather than a killjoy there to shut them down. For example, if provisioning encompasses all systems, uses a unified authorisation, and empowers the line-of-business to do much of the work themselves (rather than having to rely on IT), “yes” becomes the default answer from security rather than the exception.3) Stay away from silos

The knee-jerk reaction to the introduction of a new technology is to look at it as an island, unrelated to the rest of the enterprise. Securing this island is easy—you implement the best authentication, iron-clad authorisation, and purpose-built administration of users and access.

However, with digital transformation often many islands should talk to (or work with) one another. Rather than islands, think of a thriving island chain in enterprise ocean.

Without that more global vision, you’ll end up with too many passwords, role-bloat, and the need for IT to get involved any time anything deviates from the norm. Nothing could be further from the essence of a digital transformation.

So, to pivot your point of view, think about ways to leverage well-known fundamentals of access and security—authentication, authorisation, and administration.

Here are some ways we’ve found to implement these for new applications or services in a manner that reduces complexity, avoids redundancy, and streamlines administrative activities. Essentially, security professionals should:

seek to provision once (and while you’re at it, let the line-of-business drive),establish a single source of the truth for roles and authorisation that applies across all applications (legacy, cloud, whatever),and automate as much as possible with orchestrated processes and a high level of self-service.

In other words, embrace the cloud, but not at the expense of legacy systems. Seek to serve both masters—it can be done.

4) Make identity your new perimeter

Digital transformation may be great for the business – but unless IT and security are invited to be involved early, these projects can extend the threat surface. With an expansion of cloud and mobile solutions, risks can be exacerbated – and that hurts business, not helps it.

But thinking about digital transformation and security as two sides of the same coin brings a win-win perspective. Security professionals must adapt to the need for speedy digital transformation projects to empower the business.  Businesses must come to grips with the idea that a cool new app, if broken into, could kill not just the project, but the company.

A major key to making this pivot in perception is thinking of identity as the new perimeter: With rock-solid authentication and a very clear view of which users should have access to what, it becomes much easier to detect bad actors and lessen the impact when the inevitable breach occurs.

When the right people, have the right access, to the right systems, in the right ways (and it’s easy for them), only then can the true potential of digital transformation can be realised. The business achieves its objectives, users are happy and productive, and it all happens without an increase in risk or decrease in security.

Todd Peterson, IAM evangelist, One IdentityImage source: Shutterstock/Wichy

Read More

Leave A Comment

More News

Latest ITProPortal news

Government and telecoms meeting up over Google's new 2019-04-22 08:30:17An encrypted version could spell trouble for some internet users.

5G will fuel server shipments next year 2019-04-22 07:35:40The new technology will force organisations to refresh their gear.

Multi-cloud and distributed computing – managing your data 2019-04-22 07:00:58Even as companies commit more to cloud, they aren’t addressing the real problems that exist around data and the cloud.

Using RPA for software testing: A “tech hack”? 2019-04-22 06:30:23RPA is not a sustainable solution for software test automation…and the modifications required to make the RPA tool sustainable for the task of

US intelligence claims Huawei funded by China state 2019-04-22 06:00:43Huawei denies the allegations, yet again.

Why SaaS companies should consider outsourcing 2019-04-22 06:00:00As SaaS increases in popularity, outsourcing can indeed be an essential component for long term success. Here are three reasons why SaaS companies sho

Possibilities beyond payments: the far-reaching potential of biometric 2019-04-22 05:30:53Whilst the payment sector is already pioneering change with fingerprint biometric innovation, there is a range of key learnings and successes that man

Pros & cons of integrating artificial intelligence in 2019-04-22 05:00:41AI has started playing a role in mobile app development, with many ride sharing, food delivery etc apps using the app to run operations.

Six skills needed to successfully roll-out Industry 4.0 2019-04-22 04:30:06The transition from initial pilot stage to the large-scale roll-out of an Industry 4.0 and digital transformation project is no easy task. Here are si

Complex transformations need analytics and intelligence 2019-04-22 04:00:48What works for simpler projects won't work for complex transformations - what needs to change?

Digitisation is only the beginning - true transformation 2019-04-19 07:00:17Too many projects begin with the right intentions but the wrong direction.

Fight your space: Multi-tenant big data clusters 2019-04-19 06:30:15Multi-tenant big data clusters are commonplace and essential to businesses, here is how to manage them.

TechRadar: Internet news

Sony's 2019 Master Series TVs get price tags New! 2019-04-23 04:34:14$70,000 for a 98-incher – and still more affordable than Samsung's 8K model.

Best smartwatch: the top smartwatches you can buy New! 2019-04-23 04:04:14Not all smartwatches are worth buying, so we've put together a list of the best choices you should consider right now.

Huawei revenue soars despite US allegations and restrictions New! 2019-04-23 03:49:38Huawei quarterly revenue soars despite US allegations and restrictions.

Best phones in Australia 2019: top 10 smartphones New! 2019-04-23 03:29:06Need a new smartphone? We've ranked the best mobiles you can currently buy Down Under.

Key features of upcoming OnePlus 7 series leaked New! 2019-04-23 02:59:23OnePlus will announce the launch date of their upcoming products later today.

Best shows on Netflix for UAE (April 2019) New! 2019-04-23 02:51:34Make sure you are getting the best out of your account with our best shows on Netflix guide.

The best noise-cancelling headphones in the UAE for New! 2019-04-23 02:45:20We've rounded up the best noise-cancelling headphones. Come take a listen.

Best TV 2019: the best TVs to buy New! 2019-04-23 02:43:49Whether you're after the best in home cinema tech, or a great value TV, here's our pick of the best 2019 televisions.

Best TV 2019: which TV should you buy New! 2019-04-23 02:43:28Whether you're after the best in home cinema tech, or a great value TV, here's our pick of the best 2019 televisions.

The best GoPro and action cameras in 2019 New! 2019-04-23 02:31:09They can capture your life like never before. We rounded up the best action cameras.

Latest Google Chrome update draws government and telecom New! 2019-04-22 23:16:19Internet safety watchdogs and intelligence agencies are growing increasingly concerned that a new encrypted version of Chrome would make the internet

Worldwide server shipments set to peak in 2020 New! 2019-04-22 22:46:34New research from DRAMeXchange has revealed that worldwide server shipments will peak in 2020.

TechCrunch » Enterprise

Google expands its container service with GKE Advanced 2019-04-16 13:06:12With its Kuberntes Engine (GKE), Google Cloud Google has long offered a managed service for running containers on its platform. Kubernetes users tend

Why it just might make sense that Salesforce.com 2019-04-16 12:18:52Yesterday, Salesforce .com announced its intent to buy its own educational/non-profit arm, Salesforce.org for $300 million. On its face, this feels li

Salesforce ‘acquires’ Salesforce.org for $300M in a wider 2019-04-16 10:38:05Salesforce yesterday announced a move to reposition how it provides software to and works with nonprofits like educational institutions and charities:

Adobe launches an Adobe XD accelerator to woo 2019-04-16 09:03:34The design world is in a state of full-fledged competition. Never in history have designers and their respective teams had so many options from which

Logistics startup Zencargo raises $20M to take on 2019-04-16 08:12:52Move over, Flexport. There is another player looking to make waves in the huge and messy business of freight logistics. Zencargo — a London star

Leapwork raises $10M for its easy process automation 2019-04-16 06:16:15Most work involving computers is highly repetitive, which is why companies regularly have developers write code to automate repetitive tasks. But that

Diving into Google Cloud Next and the future 2019-04-14 13:00:09Extra Crunch offers members the opportunity to tune into conference calls led and moderated by the TechCrunch writers you read every day. This week, T

OpenStack Stein launches with improved Kubernetes support 2019-04-12 16:41:12The OpenStack project, which powers more than 75 public and thousands of private clouds, launched the 19th version of its software this week. You&rsqu

Homeland Security warns of security flaws in enterprise 2019-04-12 11:26:32Several enterprise virtual private networking apps are vulnerable to a security bug that can allow an attacker to remotely break into a company’

Google Cloud makes some strong moves to differentiate 2019-04-11 12:23:24Google Cloud held its annual customer conference, Google Cloud Next, this week in San Francisco. It had a couple of purposes. For starters, it could i

Much to Oracle’s chagrin, Pentagon names Microsoft and 2019-04-11 10:27:09Yesterday, the Pentagon announced two finalists in the $10 billion, decade-long JEDI cloud contract process — and Oracle was not one of them. In

Rasa raises $13M led by Accel for its 2019-04-11 10:12:30Conversational AI and the use of chatbots have been through multiple cycles of hype and disillusionment in the tech world. You know the story: first y


Ahrefs Review 2019: (Overview, Features & Free Trial) 2019-04-10 03:02:09Are you wondering what Ahrefs can do for you? I have for everything covered for you in this extensive Ahrefs review. Ahrefs has been making news with

10 Best Email marketing Services & Software for 2019-04-06 05:51:25Email marketing isn’t going away this year. Despite what others say (that it’s dead), it will continue to be a powerful tool for any serio

100+ Blogging Tools For 2019, Categorized (+ Expert 2019-04-05 09:30:56Blogging is an art, and using the right blogging tools will make your art rise and shine! This is an epic list of blogging tools to which you can refe

[Deal Alert] BlueHost Hosting Coupon: Save 66% + 2019-03-31 15:23:03Bluehost Webhosting is officially recommended by WordPress hosting page, and it’s the best choice for your WordPress site. Before I share this s

How To Start A Blog & Make $4734 2019-03-29 14:31:28Want to start a blog and get paid by blogging? From last 10 years,  ShoutMeLoud has been teaching about blogging to millions of users around the

YouTube SEO 101: How To Rank Videos on 2019-03-27 21:16:11Want to know how to rank videos on YouTube? Read on to learn everything about YouTube SEO? We all know YouTube is the second largest search engine on

QuadMenu Review: Add a Mega Menu to Any 2019-03-24 03:54:03Running a blog or website isn’t just about creating great content, it’s also about making it easy for your visitors to find and navigate t

13 Easy Online Business Ideas With Minimal Or 2019-03-23 15:24:13Maybe you’re a young boy/girl who wants to start getting dirty in the entrepreneurial side of the business world. Maybe you’re a college g

How To Generate A Disavow File Using Ahrefs 2019-03-23 02:09:51Negative SEO is a real thing. Many marketers are trying to manipulate the system by sending spam backlinks to their competitor’s website. To han

The 5 Best eCommerce Platforms (Compared with Pros 2019-03-23 01:30:46Before the rise of the internet, being a business person was a costly endeavor for most people. It involved, among other things, having a large sum of

Top 14 Reasons Why People Blog 2019-03-21 15:30:22Blogs today have become an essential part and needed for most of the generation worldwide. It’s raining blogs. Life was never so tech savvy befo

How To Write SEO Friendly Content (Beginner To 2019-03-20 20:11:00Do you want to write SEO friendly content? Well, this is an art which could take your blog or your writing career to the next level. Anyone can write

Digital Trends

Geoengineering is risky and unproven, but soon it 2019-04-22 04:00:59Geoengineering is a field dedicated to purposely changing the world's climate using technology. Call it 'playing god' if you must; here's why its

How 3D printing has changed the world of 2019-04-22 04:00:52When he was 13 years old, Christophe Debard had his leg amputated. Here in 2019, Debard's Print My Leg startup helps others to create 3D-printed pros

Climeworks wants to clean the atmosphere with a 2019-04-22 04:00:51Using machines that resemble jet engines, Climeworks wants to fight climate change by extracting CO2 from thin air. The gas can then be sold to carbon

Inside the Ocean Cleanup’s ambitious plan to rid 2019-04-22 04:00:50In 2013, Boyan Slat crowdfunded $2.2 million to fund the Ocean Cleanup, a non-profit organization that builds big, floating trash collectors and sets

Burgers are just the beginning: Embracing the future 2019-04-22 04:00:22You’ve almost certainly heard of the 'farm to fork' movement, but what about 'lab to table'? Welcome to the fast-evolving world of lab-grown

The grid of the future will be powered 2019-04-22 04:00:07In order to transition to a more renewable-focused energy system, we need to scale up our grid storage capacity --- and our existing methods aren't g

Online passwords: Research confirms millions of people are 2019-04-21 22:15:43According to recent analysis of data caught up in cyber attacks, millions of people are continuing to use super-simple passwords, with 123456 topping

Weekend box office: Curse of La Llorona tops 2019-04-21 21:44:04Warner Bros. Pictures' horror film The Curse of La Llorona beat pundits' predictions and middling reviews to end the two-week reign of superhero adv

Joker in Super Smash Bros. Ultimate is freezing 2019-04-21 19:05:51There have been reports that Joker in Super Smash Bros. Ultimate is causing Nintendo Switch units to freeze. Even with the glitch, players may still t

Best new shows and movies to stream: Mid90s, 2019-04-21 19:00:35Need something to watch this weekend? Check out our list of the best new shows and movies to stream right now. On the list this week: Jonah Hill's Mi

LG reportedly files patent for triple selfie camera 2019-04-21 16:58:18LG has reportedly filed a patent for a smartphone with three front-facing cameras. However, if the patent turns out to be true, it may come down as ju

Get cooking with a Masterbuilt meat smoker, now 2019-04-21 16:46:55Warm weather means it’s time to enjoy the great outdoors, but meat lovers know that spring and summer are prime cookout time. The Masterbuilt me

Disclaimer and Notice:WorldProNews.com is not responsible of these news or any information published on this website.