Action Identity Blog

Sarbanes-Oxley (SOX) was signed into law back in 2002.  SOX is aimed at giving investors confidence in the financial data provided by the company.  The key part of the SOX act is in Section 404.  Section 404, titled “Management Assessment of Internal Controls” requires management to take responsibility for the integrity of their financial information.  To accomplish this, IT processes, procedures, and systems must be evaluated to provide evidence that the company has kept sensitive data secured.  While IT is not specifically addressed in the legislation, it is implied.

Read more...

I recently read an article from local, technology-focused periodical that was recruiting nominees for “Technology Entrepreneur of the Year.” As I was reviewing last year’s winner, I noticed something intriguing. The winner works for a company that takes disparate spreadsheets of information from different software providers and connects them so there is one, complete view of the information on just one screen. I was shocked to see that this software company’s CEO first wrote the program in 2001.

Read more...

Passwords and security risks are a major concern for a lot of growing businesses today, especially those who have or hold access to sensitive information such as police stations, court houses, hospitals and clinics. Many of these organizations use some sort of directory system like eDirectory or Active Directory to maintain their users’ authentication and authorization into the internal network and various databases. Each organization also maintains the password policies for their users (i.e. Expires every 45 days, Must be 7 characters, Must have one number, etc…). With a growing number of applications follows an increased number of passwords, which poses difficulties in managing.  

Read more...

Currently, if you want to run an organized business, you need a directory for your employees and perhaps your clients as well. If you’re an entrepreneur and starting a small business, you may not have the financial means for purchasing one of the big named directory services such as Active Directory or NetIQ’s eDirectory. OpenDJ is a great solution for getting your business off the ground, being that it is the most complete open source directory product. OpenDJ also provides plug-and-play installation, allowing your IT staff to set up the directory and move on to configuring your budding infrastructure. OpenDJ also runs on Java, providing multi-OS deployment, including virtualized environments.

Read more...