Webinar: Gaining any depth security with ABAC. A case study from the insurance industry

From March 21, 2013 16:00 until March 21, 2013 17:00 Save to calendar

At Online GoToMeeting

Categories: Webinars

 

Registration: To view a recoding of this webinar follow this link.

In this webinar, Sebastian Goodrick, head of IT Security at Swiss-based CSS Versicherung, tells us more about his experiences in two consecutive XACML deployment projects.

Insurance companies manage collaboration and information sharing in very complex processes. Online services for corporate clients and end-users, segregation of duties in claims processing, interaction with and between insurance agents and possibly the agents of the agents, secure archiving of privacy sensitive information, possibly over decades, while ensuring only authorized users gain access... insurance companies have a broad variety of use cases. Regulatory compliance adds even more complexity: legal frameworks regulate financial as well as privacy aspects.

It therefore comes as no surprise, that insurance companies increasingly are looking at the XACML standard to resolve complex authorization issues. At Axiomatics we have in recent years encountered many different interesting scenarios for which insurance companies find Attribute Based Access Control (ABAC) to be a good fit. A common denominator is that dynamic authorization techniques help insurance companies become competitive. Trust is a key value for the business. And if you trust your information systems to offer context-aware protection for secure information sharing, you can engage with customers and partner in new ways and thus enable new types of services for corporate and private clients as well as your agents and partners.

In the webinar, we focus on the specific challenges which Swiss CSS Versicherung encountered and resolved using XACML-based technology. Sebastian Goodrick has kindly offered to share some of his experiences with us in this event.

2013-03-21 16:00:00
2013-03-21 17:00:00

Search


Some background information is available in this case study

"Having tested various solutions to resolve authorization issues with their corporate document management system, CSS Insurance turned to the Axiomatics Policy Server (APS) to deliver effective Attribute Based Access Control. As the finegrained, context-aware authorization tool had already been deployed to ensure compliance with newly introduced healthcare reporting regulations, the challenge was to increase the scope of APS by onboarding new tasks. A few weeks after the project began, coding, implementation and testing were completed and the document management system was running according to plan."

Case study with CSS Versicherung, a Swiss insurance company Popular 1.0 1.44 MB 07/03/2013 Download Details View