Solutions: Manage Outsourcing Risk
Manage Outsourcing Risk"Effective outsourcing management has become a necessary core competency for every IT organization. Most IT leaders have come to accept its reality and have begun to develop a mature process for managing service delivery through partners." — Gartner Group |
 |
|
|
|
|
|
At the beginning of the outsourcing trend in the late 1990s, many companies chose to farm out whole back-office departments – often including IT operations and application development – to capitalize on opportunities for cost reduction and increased service levels. Today, as many of those initial outsourcing contracts come up for renewal, companies are demanding that their outsourcing vendors deliver a security framework that includes not only access, but the controls and validation of these controls to satisfy internal security and external compliance requirements. How can an organization capitalize on the efficiencies provided by outsourcing without compromising security for this high-risk user group?
How can an organization capitalize on the efficiencies provided by outsourcing without compromising security for this high-risk user group?
The Xceedium Entitlement Management Solution
The answer is Xceedium's GateKeeper, a comprehensive Entitlement Management solution that enables the enterprise or government agency to:
- Control access to critical IT infrastructure by outsourced technical users;
- Enforce granular controls and contain users to authorized areas only;
- Monitor all user activities and alert for violations;
- Record all user events,
- Deliver easy-to-produce reports for testing of controls
In short, Xceedium provides an Entitlement Management solution that reduces the complexity and cost of managing outsourced users, and is easy to install and maintain.
Xceedium GateKeeper is a hardened appliance that delivers a unique access methodology that provides granular compartmentalization. Once users are granted access to their authorized areas, the difficult challenge is keeping them contained there. Xceedium's patent-pending Leap Frog Prevention™ technology works at the socket layer using white lists and black lists to keep them contained within authorized areas only. Alerting and remediation capabilities are easy to implement, and ensure visibility to violations and proof of control. All user activities are tracked and logged; Xceedium delivers complete keystroke and patent-pending session recording capabilities that seamlessly provide complete visibility into what the user is doing, even at the command line level. Essential historical data is recorded, and centralized reports enable internal and external compliance auditors to easily test controls.