David GIORGETTI

Senior Manager

Latest insights by David GIORGETTI

Redesigning your authorization model: the key issues (2 /2)
Posted on 04/01/2021
Digital Identity
In a previous article, we discussed the main motivations behind the implementation of an authorization model and answered a first set of essential questions one should think about when setting up or redesigning a model. Let’s continue ...
Redesigning your authorization model: the key issues (1/2)
Posted on 21/12/2020
Digital Identity
Introduction DAC, RBAC, OrBAC, ABAC or GraphBAC? Flagship authorization models evolve regularly and each one brings its share of challenges, promises, and complexity. Over the last twenty years or so, during which the RBAC/OrBAC models ...
ERPs: How to control permission-related risks (PART 2)
Posted on 01/07/2019
Cyberrisk Management & Strategy
As we’ve seen in the previous article, a serious consideration of “permissions” (also known as rights, authorizations, roles, and access profiles) should significantly reduce the risk of fraud and human error, and contribute ...