charl...@mcn.org (Charles Mills) writes:
> Agreed. I did an HR systems evaluation a few years back (why is a
> coder evaluating HR systems? Don't ask.) and all were big on
> "self-service," by which they meant if an employee, for example,
> wanted to know how many vacation days s/he had in the bank, s/he did
> not have to call HR, s/he just signed onto the HR system with a Web
> browser (and with "role-based authority" much lower than an HR person)
> and looked.

20yrs ago it was webifying callcenter menu screens ... had to have
computerized-based authentication front-end and restricting access to
information just for the authenticated entity. it has been 20yrs of
reducing callcenter use (not having real person at the other end).

slight topic drift ... 20yrs ago, consumer dailup online banking
operations were making presentations at financial conferences on
motivation for moving to the internet; primarily development&support
costs for proprietary modem drivers (at the time >60 drivers were
typical) and dialup infrastructure, enormous support costs associated
with serial-port modems, etc ... all gets offloaded to ISP. Note at the
same time, the commercial dialup online banking operations were saying
that they would *NEVER* move to the internet because of a long list of
exploits and vulnerabilities (many that presist to this day) ... as an
aside, the commercial dialup online banking operations have subsequently
moved to the internet anyway.

self-service PCs in the past were typically associated with "kiosk",
library, etc, public PCs that anybody can walk up to (like store
machines looking for stock &/or price check) ... as opposed to the
webifying callcenter operations.

I had some number of meetings with the NIST rbac people in the 90s
http://csrc.nist.gov/groups/SNS/rbac/

at the time, it was much more oriented towards simplifying security
office handing out fine-grain access ... and codifying multi-party
operations as countermeasure to insider threats (no single person had
sufficient authority to complete any high-value operation).

-- 
virtualization experience starting Jan1968, online at home since Mar1970

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Reply via email to