Digital Identity Managers

A digital identity is used to identify an individual or organization in the digital world. It can consist of a person’s name, date of birth, e-mail address, and other personal information; passwords; vendor codes and other unique identification numbers; cryptographic keys; Internet protocol address; biometric attributes; software digital identifiers; and trusted platform module chips that are installed in enterprise computers that store cryptographic keys and certificates. Examples of personal digital identities include an employee identification (ID), e-banking ID, or online shopping ID. Digital identities protect computer systems and users from fraud, identity theft, and other unauthorized activities.

Digital identity managers perform a wide range of duties. At smaller organizations, they are more likely to be involved in hands-on activities in digital identity creation, authentication, authorization, and identity governance. At large companies, they oversee a team of workers who are responsible for these tasks. Here are some common job duties for managers.

Digital identity lifecycle management: Managers create, maintain, and delete (when necessary) user accounts and access rights.

Authentication and authorization: Digital identity managers implement vigorous authentication techniques (including multi-factor authentication) to create extra layers of security in addition to passwords. They also create systems that review the credentials of those seeking to access data and/or a system. These systems only authorize those who meet specific criteria. They also track what each user does in a system.

Identity governance: Managers establish and enforce rules that control who can access specific data, what changes they can make, and for what purpose.

Incident analysis: Managers oversee the investigation and resolution of access-related incidents and breaches. They author incident reports and meet with executives to discuss and address these issues.

Compliance: Digital identity managers must ensure that their company follows all government and organization regulations regarding how personal and sensitive information is managed. “Ignoring these regulations could cause hefty fines, mistrust, and reputational damage,” according to the Identity Management Institute.

Strategic planning: Managers regularly review and audit their organization’s digital identity systems and security protocols to ensure that they are effective. If necessary, they revise short- and long-term operational strategies. Managers also stay abreast of emerging technologies that can either be useful in digital identity management or place data at risk. Managers work with the chief information security officer and other executives to improve their organization’s cybersecurity measures.