data. 93H defines “personal” May be integrated MassIT sets protection levels according to data type and client. For AD, no specific into Q#4 below. standards apply. No articulated separation of data standards apply at present. However, it is important to note that compliance issues are likely to be significant, depending on MassIT & DOR Legal opinion and guidance once data types and object interrelationships are clarified and documented. Cloud Services / None; anticipated. Federated Cloud(s): Microsoft Premium AD in last year Risk Assessment: Exchange in past 3 years Identify Access MassIT also has ISIM/ISAM; however, within AD, only manage MassIT use is not – Management: widespread throughout forest. SSO is IAM, Products in use include: 1. IBM Security Access Manager 8.x 2. IBM Security Identity Manager 6.x 3. Tivoli Access Manager 6.x 4. Tivoli Identity Manager 5.x 5. PingFederate 7.3 (Identity Federation) Group Policy Same. Management: Encryption: None yet. Schema MS only Exchange, SharePoint and Lync. – Extensions: Rights None Management:
May be integrated into Q#4 below. 93H defines “personal” data. MassIT sets protection levels according to data type and client. For AD, no specific standards apply. No articulated separation of data standards apply at present. However, it is important to note that compliance issues are likely to be significant, depending on MassIT & DOR Legal opinion and guidance once data types and object interrelationships are clarified and documented. Cloud Services / Federated Cloud(s): None; anticipated. Microsoft Premium Risk Assessment: AD in last year Exchange in past 3 years Identify Access Management: MassIT also has ISIM/ISAM; however, within AD, only manage MassIT – use is not widespread throughout forest. SSO is IAM, Products in use include: 1. IBM Security Access Manager 8.x 2. IBM Security Identity Manager 6.x 3. Tivoli Access Manager 6.x 4. Tivoli Identity Manager 5.x 5. PingFederate 7.3 (Identity Federation) Group Policy Management: Same. Encryption: None yet. Schema Extensions: MS only – Exchange, SharePoint and Lync. Rights Management: None
377208184.docx