The Learning Lab experience is supported by both asynchronous and synchronous components. Each part includes a set of resources, an asynchronous discussion, and an interactive live session, all of which culminate in the development of a project to apply learning to local and specific contexts in support of the learning objectives.
Schedule
Part 1: Identity and Access Management (IAM) in Higher Education
December 4, 2024, 3:00–4:30 p.m. ET
In Part 1, we’ll introduce the IAM Learning Lab, review the Canvas site, and outline the requirements for earning the microcredential. Active participation and discussion are encouraged throughout the lab. We’ll begin by getting to know each other and sharing our interests in IAM.
We’ll focus on the core concept of Identity and Access Management (IAM) and its critical role in safeguarding the valuable knowledge and resources created, stored, and managed within higher education institutions.
Participants will:
- Examine the concept of Identity.
- Understand how IAM serves as a critical component in securing higher education’s assets in a world of cloud technologies and mobile computing.
- Explore the concepts of account administration and life cycle.
- Review relevant terminology.
Part 2: Passwords, PassPhrases, Password Managers, and More
December 9, 2024, 3:00–4:30 p.m. ET
Did you know that Steve Jobs predicted the end of passwords as far back as 2004? What insight did he have that we’re still wrestling with nearly 20 years later?
In Part 2, we’ll dive into the evolution of passwords and examine common attacks that exploit their vulnerabilities. This interactive session will invite participants to share their experiences and insights as we explore the ongoing challenges of password security.
Participants will:
- Build upon the knowledge of Identity from Part 1.
- Explore passwords and the evolution toward password-less designs.
- Learn about common exploits and attacks.
- Discuss mitigation techniques.
- Understanding the Super User and best practices.
- Examine Multifactor Authentication and Biometrics.
Part 3: A Deeper Look into Access Management
December 12, 2024, 3:00–4:30 p.m. ET
In Part 3, we’ll shift the focus from authentication to authorization, examining the design and implications of access controls. This segment will explore key considerations, including which resources an individual should have access to, in what capacity, and for how long, emphasizing the critical role of effective access management in securing institutional data.
Participants will:
- Understand role-based design.
- Learn about the primary types of access control.
- Discuss ABAC and RBAC.
- Review strengths and weaknesses of access controls.
- Consider best practices.
Part 4: Looking to the Future: Advanced IAM Strategies and Future Trends
December 18, 2024, 3:00–4:30 p.m. ET
In Part 4, we’ll explore emerging trends in IAM and their potential impact on higher education and research institutions. We’ll provide guidance on creating strategic IAM roadmaps tailored to the specific needs of each participant’s institution, with a focus on governance and future scalability.
Additionally, participants will have the opportunity to share their reflections and observations from the course and discuss actionable next steps for advancing their IAM strategic roadmaps within their organizations.
Participants will learn:
- approaches to crafting IAM Strategic Roadmaps;
- techniques for establishing governance;
- importance of stakeholders;
- policy, Standards, Guidelines and Procedures development;
- logging and auditing best practices;
- assessment of effectiveness of the IAM program; and
- emerging trends and technologies that could impact IAM programs.
Lab Project/Assignments
After each session, participants will apply key concepts to develop a tailored, strategic IAM plan for their institution. This plan will outline the institution’s current IAM state, identify gaps and opportunities, and prioritize actionable next steps aligned with the institution’s strategic goals. Participants will also analyze how future trends shaped their recommendations and establish metrics to measure the success of their IAM plan, including a timeline for evaluation and progress tracking.