Darran directs the continued development and communication of SailPoint’s technology strategy and vision. Previously, he was a member of the CTO’s office at Sun Microsystems and led strategic technology and industry standards initiatives at Waveset Technologies. A respected contributor to several international XML standards initiatives, he served as Chair of the OASIS Provisioning Services Technical Committee and in that capacity led a two-year industry effort to develop the Service Provisioning Markup Language (SPML) Specification. Prior to Waveset, Darran served in senior technical leadership positions at enterprise software companies including IBM/Tivoli, PointOne Telecommunications and DBMX.
Biography: Tariq Jan
Tariq Jan is the Global Programme Manager for Identity & Access Management at JPMorganChase, Investment Bank. Tariq is responsible for leading the Global JPMC Investment Bank initiative in the selection and implementation of an identity and governance solution. The role requires Tariq to be the point of contact and SME for internal and external Audit and control teams to ensure program goals/ objectives are aligned with the firm’s commitments and regulatory expectations. This hugely successful programme has led to adoption and roll-out of the selected Sailpoint IIQ tool across the firm.
Tariq received his BSc (Hons) and MSc (Hons) in Mathematics and Management in 1995 and since graduation has undertaken a variety of roles primarily defining and delivering high value / visibility programmes and driving operational efficiency / change to the Investment Bank, Telecoms, Petrochemical & Construction amongst other verticals.
Abstract:
A Governance-based Approach to Identity Management & Provisioning
A new generation of identity management & provisioning solutions is emerging, built on an identity governance framework and designed to address the compliance and governance challenges that first generation solutions could not. In this session, SailPoint CTO Darran Rolls will outline the evolving business requirements that have changed the nature of identity management, outline the business and technical issues that have made traditional identity management & provisioning solutions too complex and difficult to implement, and then detail a new, governance-based approach. In the second part of this presentation Rolls will be joined by JPMC Program Manager Tariq Juan who will describe a large scale project within the bank to address compliance and governance for identity. Jan will discuss the business challenges and key success criteria for their project. Topic map: Darran (SailPoint CTO)
Outline IAM challenges – increased regulatory pressure and failed projects
Describe why Identity sits at the center of security
Outline that Identity management has to move from IT to the business
Describe why understanding the “security model” is key
Introduce the “Three Steps to Identity & Access Governance”
Current state checkpoint – Certs and UAR
Build a governance model – Roles & policies
Streamline change mgmt – Access request and provisioning