Which tasks need to be accomplished during an initial meeting with the customer when reviewing
a company organizational chart?

Which is an accurate description of a highly mature company, in the area of authorization?

While reviewing the current security policies for a company, you find that a standard exists, which
dictates that information access must conform to HIPAA. Currently the customer has no
automated method to verify adherence to this policy. Which IBM Tivoli security solution should you
recommend to provide the customer with the ability to report on exceptions to this policy?

A current IBM Tivoli security customer is very satisfied with their current IBM Tivoli Identity
Manager (ITIM) and IBM Tivoli Access Manager (ITAM) implementations. The customer has
benefited greatly from the user management and provisioning, authentication, authorization and
Web single sign-on processes now in place. The customer sees the value of Web services and
wants to leverage their business partnerships to greatly expand their online services, for a
relatively small investment. They are expecting that their existing ITIM and ITAM investments can
simply be stretched to include these business-to-business (B2B) flows. IBM Tivoli Federated
Identity Manager should be added to this scenario to address which security requirement?

What is an important guideline to follow when considering security audit and security compliance
scenarios?