New Bachelor lecture on authorisation management
This winter semester, the lecture Authorisation Management will be offered for the first time. Stefan Knipl and Norbert Elsässer from KPMG Cyber Security will use practical examples to explain what to look out for in Identity & Access Management in a company.
First, the basics of authorisation management will be explained (what are identities and accounts, authorisations, roles, etc.). Subsequently, typical processes in authorisation management are highlighted, background information on the regulatory requirements for authorisation management is provided, internal company regulations (responsibilities, guidelines, ...), the handling of privileged accounts is explained, the most sensible combination of authorisations is discussed, risks due to toxic authorisation combinations are considered and some other related topics are highlighted and, to a large extent, understood by the students by means of a practical example in the form of an internship.