Computing Resource Inventory System for Access Rights Management
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Large organizations face challenges in managing access rights to computing resources due to frequent personnel changes and the need for periodic reviews to ensure security, which can strain resources and lead to inefficiencies in identity and access management.
Innovation Solution
A system for managing computing resources that includes a processor, memory, and a data store to maintain a computing resource list and information, updating it as resources are added or removed, and performing evaluation tasks to generate resource evaluation reports, ensuring access rights are up-to-date and compliant with security policies.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If periodic access reviews are performed manually to ensure security compliance, then access rights security is improved, but resource strain and time consumption increase significantly
Solution Approach 1:
The system performs preliminary actions by automatically updating the computing resource list and generating resource evaluation reports before manual reviews are needed. This includes continuously monitoring access rights changes and pre-evaluating resources against security policies, so that when reviews are required, the groundwork is already completed, reducing the time and effort needed for actual review activities.
Solution Approach 2:
The system implements feedback mechanisms by continuously monitoring access rights changes and automatically generating evaluation reports that feed into the review process. This creates a closed-loop system where security evaluations are continuously updated based on new information, allowing reviewers to focus only on exceptions or changes rather than reviewing everything from scratch.
2Reliability
If comprehensive access reviews cover all computing resources to ensure security, then security coverage is improved, but resource strain and processing load increase
Solution Approach 1:
The system extracts and separates the automated evaluation and monitoring functions from the manual review process. By automatically generating resource evaluation reports and maintaining up-to-date computing resource lists, the system removes the burden of comprehensive data gathering and initial analysis from reviewers, allowing them to focus only on decision-making and exception handling.
Solution Approach 2:
The system performs self-service by automatically monitoring its own computing resources, evaluating access rights changes, and generating security assessment reports without external intervention. This self-monitoring capability ensures continuous security coverage while minimizing the processing resources required from external review systems.
3Measurement precision
If manual tracking of computing resources is performed to maintain access rights information, then data accuracy is improved, but labor requirements and operational complexity increase
Solution Approach 1:
The system replaces manual mechanical tracking methods with automated electronic monitoring and evaluation processes. Computers and software automatically track computing resources, evaluate access rights, and generate reports, eliminating the need for manual data collection and reducing operational complexity while maintaining high data accuracy.
Data Source
AI summary
Systems and methods of managing computing resources of a computing system are described. A computing resource list and computing resource information may be stored at a data store. The computing resource list may identify a set of computing resources of a computing system, and the computing resource information may respectively describe the computing resources. The computing resource list may be updated in response to a new computing resource being added to the computing system or in response to an existing computing resource being removed from the computing system. Evaluation tasks for the computing resources may be performed, and a resource evaluation report may be generated during performance of at least one of the evaluation reports.