Processes of Identity and Access Management
Contact | Imprint | Sitemap
Home
About GenericIAM
Our approach
Members
FAQ
Calendar
Discussion
Our approach Print
Our procedure is based on the existence of sufficient IAM-processes. We start modelling when there is more than one incarnation of the same process content.
In general we perform the following steps while modelling IAM:

Process selection

The contributing enterprise decides which of the ready modelled processes it wants to submit to the standardisation process. Usually those will be processes, which are not relevant in terms of competitive advantage. Additionally there may be some evidence or at least confidence, that they contain some information of general value.
In case of large and comprehensive models, we offer to send a member of the modelling team to support the selection process. By default however, we like to point out, that all IAM related processes might be of useful for our work.

Handing over

Small Models may be handed over as compressed attachments to This e-mail address is being protected from spam bots, you need JavaScript enabled to view it . Larger Models may be stored for download from an FTP-Server or send via traditional mail on CD or DVD to the NIFIS. In special cases a NIFIS-representative may receive the results in person on an appropriate storage media. 

Modelling

The essence of our modelling process is factoring out (identify and extract) generic parts from enterprise specific models. This will be done by a small working group. Enterprise specific contents will be known to this small group only. The necessary anonymisation will be part of the next step, the generalisation. Only after theses steps have been performed, the document will be submitted for review to a broader audience of experts.

Quality assurance

Modelled Processes have to be officially signed-off to become a valid result of GenericIAM. GenericIAM members and if necessary external Experts will review the results to uncover flaws prior to publication. In the absence of any flaws the document has to be signed off. If major flaws are detected, they are rejected as they may need a major reworking.  In case of minor flaws the result is conditionally signed-off, e.g. after subsequent improvement within a given timeframe the results become valid without any further declaration. 

Publication

Once a year the Modelling results the will be published with year as a postfix to the name, e.g. GenericIAM2007. GenericIAM members will have free access to these documents. To other interested parties we will them via a Web Shop at a non-discriminating price.