OVERVIEW
GOVERNANCE OVERVIEW
Conceptually, identity governance can be defined as the rule of the rulers. In the business world, governance is the process by which authority is conferred on management, by which they make the rules, and, those rules are enforced and modified. Thus, understanding governance requires an identification of both the rulers and the rules, as well as the various processes by which they are selected, defined, and linked together within an organization.
Good governance is in general participatory, transparent and accountable. It is also effective and equitable and promotes the rule of law. Good governance ensures that priorities are based on broad consensus within the enterprise to meet the needs of all parties including consumers, customers, regulators, shareholders, and auditors fairly, effectively, and efficiently.
IDENTITY GOVERNANCE OVERVIEW
Identity governance is an organization’s overarching set of rules which proposes a management decision making process and accountability for achieving business goals while managing identity risks.
IDENTITY GOVERNANCE FRAMEWORK
Identity governance framework refers to the organization’s proposed governance lifecycle designed to support the organization’s identity governance efforts including governing bodies and their responsibilities, rules, and processes for managing identity data and related risks.
OBJECTIVES
Good governance is concerned with the highest level of structure for decision making, control, and accountability. It directs and controls management actions to ensure everyone in the organization follows a standard and transparent decision-making process in the interest of all parties involved. Identity governance supports the security objectives of the organization and the privacy rights of users.
The following is a list of governance objectives:
- 1. Improve decision making to achieve business goals
- 2. Streamline processes (automate, centralize, etc.)
- 3. Standardize (efficiency, consistency, error reduction)
Course Outline ::CIGE::
- 4. Reduce cost
- 5. Identify and mitigate risks
- 6. Increase enterprise value
- 7. Meet internal and external requirements
- 8. Empower management and staff
- 9. Ensure security, privacy, and compliance
- 10. Maintain identity data integrity
DOMAINS™
The following Critical Risk Domains (CRDs) define the specific knowledge areas and skills that CIGE professionals need to become certified:
- 1. Governance
- 2. Identity and Access Management Lifecycle
- 3. Strategy, Roadmap, Framework, and Planning
- 4. Roles, Responsibilities, and Accountability
- 5. Program, Policies, and Procedures
- 6. Risk Management and Internal Controls
- 7. Funding, Resource Allocation, and ROI
- 8. Independent Audits, Monitoring, and, Performance Measurement
- 9. Compliance
- 10. Technology
Certification Process
For CIGE eligibility, application process, costs and certification maintenance, please visit the CIGE page on the IMI
Programme scope, delivery arrangements and suitability are confirmed during enquiry.