In order to meet increasingly stringent compliance and security requirements, organizations need to enforce policy-based access controls across IT tiers, from the presentation layer to the business and database layers. Historically, each of these tiers has maintained silos of entitlement policies governing who can access what with no common place from which to administer, audit or remediate these policies. Securent’s Entitlement Management Solution provides the capability to define and reuse policies across these tiers while also enabling data-level policies that enforce fine-grain enforcement of who has access to specific rows, columns, or fields in a database table.
Enterprises that collect and store sensitive information such as customer identity, credit card numbers, patient records, intellectual property, classified documents, or other confidential information often struggle to effectively secure the database – from both external and internal attacks. A common approach to protecting the information in corporate databases is to code or configure security policies into each individual application that is connecting to the database. This approach is complex and costly to maintain because any change in security policy governing the data must be applied to each individual application. Furthermore, meeting compliance requirements is difficult, if not impossible, to achieve with this piecemeal approach due to the lack of centralized visibility over security policies and access activity.
With Securent’s database solution, organizations can apply and enforce fine-grained entitlement policies at the database itself, eliminating the need to filter data in each individual application. By dynamically appending SQL statements with a predicate, Securent limits access to data at the row, column, or field level and ensures only the right information is exposed to users and applications. The key benefits of the Securent database solution include:
- Policy-based fine grained access control at the data source
- On-demand compliance audits and remediation
- Comprehensive security from the consistent application of entitlements across the web, application, and data tiers
