Identity and Access management is among the indispensable corner stones of any IT security infrastructure, in particular in the healthcare arena with its sensitive health data. It is an essential element of security to be able to assign the right people the right access to the right resources at the right time in order to protect data and systems and at the same time work in a productive and cost-effective manner while complying with legal regulations. This is achieved on the basis of digital, unambiguous and always up-to-date identities. The assignment and/or the withdrawal of rights require an intelligent identity und access management making use of automated processes. Where constantly more people and applications are integrated into the communication processes and increasingly different institutions must jointly access information, assigning user rights manually and maintaining them individually is neither secure nor effective.
Identity und Access Management from Siemens, based on the DirX family, provides consistent identities across all systems embedded, such as KIS, Web portals, and it stores and manages them. It automatically assigns users their rights, allowing them to immediately access resources anywhere they are entitled to. If necessary, it can withdraw all rights in one single step. Rights are assigned based on roles, such as senior consultant, ward doctor, nurse, or administration clerk. An assignment using approval workflows is possible as well.
In addition, identity and access management enables regulatory compliance, whether internal or imposed by law, and provides a means of tracing accesses.