The Opel Zoo in Kronberg/Germany, originally known as the “Georg von Opel Outdoor Enclosure for Animal Studies,” provides expansive compounds and enclosures for around 1,500 animals spread across 27 hectares. There are more than 200 species being kept at the zoo, and many of them are endangered. Located on the southern slopes of the Taunus mountain range and offering fantastic views of the Kronberg old town and the Rhine-Main region behind it, the Opel Zoo is one of the most popular leisure and culture destinations in the state of Hesse, attracting around 650,000 visitors per year. One of the zoo’s main draws is its generous new enclosure for African elephants – the only one of its kind in Hesse.

The new elephant enclosure

The new elephant enclosure, which was completed in the fall of 2013, is the zoo’s most ambitious construction project to date. The new elephant house provides its residents with large individual pens. In addition, an indoor run of more than 800 square meters gives the smaller elephants plenty of space to get out of the way of the more dominant ones. Combined with the three outside sections that have a total area of 8,000 square meters, this gives the four residing elephants ample opportunity to both converge and avoid each other when so desired.

Better vantage for critical areas

“During the planning of the enclosure, we focused on both the welfare of the elephants and on the safety of the premises,” explains Dr. Thomas Kauffels, the director of Opel Zoo. “It’s very important to know at any given time where each animal is located, which gates are open and which need to be closed.” The initial plan made during construction was to install a set of pan/tilt cameras in the elephant enclosure. When it came to the implementation of these, however, the camera concept turned out to have several flaws, and Opel Zoo contracted Encom Consulting from Saarwellingen to remedy the situation.

"During the planning of the enclosure, we focused on both the welfare of the elephants and on the safety of the premises"

Encom Consulting had already worked for the zoo for several years, among others for the installation of multipath transmission systems. A specialist for security solutions and risk management, the company had also installed the zoo’s first high-resolution webcams, which among others monitored and documented the construction of the elephant enclosure. The webcam feeds could also be viewed online on the zoo’s website. When assessing the original camera concept, Encom realised that the planned pan/tilt cameras would not be able to fulfil many of the requirements.

Cost was another important factor. The pan/tilt cameras would have required a large number of expensive optical fibre cables. Optical fibre was particularly needed in the high voltage area to avoid interference. The original concept also entailed a much larger number of cameras in order to cover all the required areas; the new concept required significantly fewer units. For cables in the proximity of high voltage systems, Encom developed a pulse interference elimination process that made it possible to do without optical fibre. Due to the differences in cost and also in quality of security provision, the management at Opel Zoo decided to abandon their original camera concept and instead contracted Encom to implement the network and install the MOBOTIX cameras they had recommended. With these, the hardware costs alone were decreased by almost 30 percent – not counting the significant follow-up cost reductions, among others resulting from lower power consumption and the MOBOTIX solution’s much lower maintenance requirements.

MOBOTIX’s FlexMount cameras

For example, the semi-circular elephant corridor only needed three of MOBOTIX’s FlexMount cameras. The FlexMount is a very versatile model featuring two hemispheric lens units, each of which is connected to the camera processor via a one to two-meter cable. With its twin sensor modules, the camera can look ‘around the corner’; this enables it to monitor a fully hemispheric area. The camera processor outputs two undistorted, high-resolution 180-degree panoramic video feeds.

The current resolution is 3.1 megapixels, which is set to be increased to 6 megapixels in the future. With the installed cameras, the entire elephant corridor can be monitored seamlessly. All it takes is three cameras to simultaneously show all twelve viewing angles on-screen. Each of the cameras features one day and one night sensor covering the same physical area. The cameras automatically select the best camera module to suit the light level, and similarly, the software automatically uses the most suitable exposure settings.

MOBOTIX day/night cameras used at Opel Zoo
The semi-circular elephant corridor only needed three of MOBOTIX’s FlexMount cameras

All of the cameras feature highly specialised video sensors for both day and night mode. In the rare event that panning and zooming is needed, this is performed electronically within the video feed. Thanks to the high megapixel resolution, this is usually possible without requiring any degrading interpolation. The zookeepers are thus provided with detail views and other image sections without any mechanical movement of the lens, i.e., the sensor, and therefore without any wear and tear. Because there are no movements, there is no need for a motor, which means there is no risk of mechanical failure and no need for costly maintenance. Before entering the elephant corridor, the keepers can always tell if there are any elephants inside the connecting corridor. This information is provided via a laterally-mounted, fully dustproof MxDisplay.

The same applies for the elephant house’s indoor run. Here, a number of FlexMount and AllroundDual cameras are installed as well. These provide the zoo with a full view of the indoor run right up to the visitor platform, all on the same screen.

Mobotix AllroundDual cameras

As well as the high-up AllroundDual cameras, the outside area also features a number of FlexMount cameras. Thanks to their very small image sensors and up to two meters of distance to connect to the separately-housed camera processor, these could be positioned very discreetly. This is of crucial importance in an elephant enclosure. With other systems, the cameras would have to be installed well outside of the elephant trunks’ reach, which usually means a height of at least six meters.

“Elephants are very inquisitive, and they like to inspect things thoroughly. An elephant’s trunk can weigh up to 200 kilograms, which means the cameras need to be installed in a way that they won’t be damaged by a strong slap,” says Jasper Jasperson. “With this system, the video image sensors were integrated very inconspicuously into our molded rock surfaces. We can now record footage at a comparatively low elevation of just three meters above the ground. For the first time, we can view the elephants ‘eye to eye.’ At the same time, being closer to the ground gives us a more faithful perspective on objects in the distance.”

In designing the cable layout, Encom also paid attention to the zoo’s special requirements, with top priority given to failsafe operation

Priority to failsafe operation

In designing the cable layout, Encom also paid attention to the zoo’s special requirements, with top priority given to failsafe operation. Because of this, the number of active devices in the field was reduced to the barest minimum. Optical fibre is only used where absolutely necessary, i.e., where extreme distances need to be covered; this isn’t only for cost reasons but also to keep down maintenance.

Ultimately, only two optical fibre cables were needed, both of which are used outside to connect to the watering spots 400 and 500 meters away. All of the other camera locations are connected using direct wide-range copper cables. These cables also supply the MOBOTIX cameras with power (three to five watts). According to the specifications of the originally proposed system, each camera was going to consume 55 watts – that’s more than ten times the amount of power. Even when there is a power failure, the MOBOTIX cameras continue to be supplied from a UPS, ensuring the security feed is never interrupted.

A single 360-degree camera provides a fixed view of the entire outside area of the elephant compound, offering a panorama over 5,500 square meters. This main view is supplemented by further 90-degree cameras for a separate lower section. This way, the keepers can always see where each animal is currently located. As well as for safety and security, Opel Zoo also uses its cameras to research animal behaviour.

In order to minimise intrusive external factors while still providing around-the-clock visual data of the animals, Encom Consulting again recommended the use of hemispheric MOBOTIX cameras. These make it possible to see exactly how the elephants traverse the compound, which routes they take and when they interact. With its special lens, the FlexMount camera provides a full view of almost the entire area, recording uninterrupted footage over many months. Thanks to the hemispheric system, this is possible using just a single camera – with the originally planned pan/tilt cameras, six to eight individual cameras plus ongoing manual repositioning would have been necessary.

For each camera not installed, Opel Zoo is saving four-digit amounts in acquisition, cable, and maintenance costs; this adds up to a substantial difference. Having fewer cameras also means there are less feeds to take up screen space, and resultantly, the remaining camera feeds can be displayed at a much bigger size. In a similar vein, the FlexMount also offers another important advantage: With a multi-camera system, the animals constantly move from one viewing area to the next, whereas with a single hemispheric panorama camera, they remain within the one 360-degree view. They never disappear from the video feed, nor do they double up in overlapping viewing areas. And when the sun is low, all the animals remain fully visible despite the strong backlight. This is only possible because the MOBOTIX camera – in contrast to other designs – does not use an iris.

MOBOTIX cameras in use at Opel Zoo, Germany
The widescreen panoramic image provides roughly twice the resolution of a standard video image

The patented MOBOTIX high-tech image processing algorithms inside the camera calculate and correct the complex pixel array, eliminating the need for an iris and its inherent susceptibility to backlight.

The widescreen panoramic image has the same number of lines as a standard video image but provides roughly twice the resolution. The camera-integrated motion analysis software makes it possible to trigger recording in response to predefined events – such as an elephant entering or exiting an area. This greatly speeds up research later on, saving the zoo both employee time and data storage space.

“The free-of-charge MOBOTIX software is so easy to use that our team could start analysing the images almost immediately, producing valuable findings for our daily interactions with the animals, as well as supplying great image material for documenting the animals,” says Uwe Böhme, administration manager at Opel Zoo.

Researching the behaviour of the Rothschild Giraffes

Another set of cameras is installed in the zoo’s enclosure of Rothschild giraffes. In this instance, the focus is less on security and safety than on research, such as the projects being conducted by the Opel Zoo-sponsored Chair in Zoology at Frankfurt’s Goethe University. Endowed Professor Paul Dierkes and his team are making excellent use of modern image-gathering methods in their research, which is focused on the animals’ wellbeing and relies on unobtrusive research equipment.

In this enclosure, six FlexMount S15 and AllroundDual M15 cameras are in use. Both of these models have a resolution of five megapixels. Thanks to the sensors used in these cameras, the zoo’s research team can benefit from outstanding light sensitivity. Additionally, the sensor technology offers a frame rate of up to 30 frames per second, as well as extreme zooming. Not only does this produce sharper images, it also allows for the cameras to be positioned further away from the areas to be monitored. Accordingly, it was possible to install the cameras well out of the giraffes’ sight. The M15 is a day-and-night camera; depending on the configuration, both day and night recordings can be made simultaneously, which is particularly valuable in poor lighting conditions or in complete darkness. Encom is also testing specially-designed animal camouflage housings with optical shutters – despite fully blending in, they still output a high-quality colour image. This is making it possible to capture footage that was previously either impossible to get or would have required a lot more effort.

Thanks to the sensors used in these cameras, the zoo’s research team can benefit from outstanding light sensitivity

Mobotix cameras with thermal sensors

For testing purposes, the newly-developed MOBOTIX cameras with thermal sensors are being deployed in both the elephant and giraffe enclosures. With the thermal sensors, the animals’ body heat can be traced visually. The cameras can therefore detect movements from distances of up to 400 meters very precisely, even under challenging lighting and weather conditions. The future of thermographic cameras in animal research looks very promising. For example, they can be used to display images of animals living in caves or nesting without intruding on them at all. There are also interesting possibilities in the area of preventive veterinarian diagnoses.

Cost effective with enhanced safety

As well as the animal enclosures, the zoo shop and ticketing area are also being secured using MOBOTIX cameras. “We’re very happy with our camera systems, particularly with how Encom managed to adapt the complex camera programming to our needs. The same applies to the excellent MOBOTIX cameras, which are wonderfully sturdy,” says Uwe Böhme. As well as the increased safety and security provided by the new camera concept, the zoo also benefits from having significantly fewer power cables than originally planned for, and power consumption has been reduced to a mere tenth.

Similarly, the risk of cameras failing has also been reduced by a factor of ten. “Compared to our original pan/tilt camera concept, we’ve now got a better set of features and still managed to save around 30 percent on hardware and software,” says Böhme. “That doesn’t even include follow-up costs, such as the maintenance that would have been needed over the years; with the MOBOTIX cameras, this isn’t needed at all. We’ve already started planning for further camera systems around the zoo.” One of the next projects is to test further motion analyses for the colour-based display of animal routes through their compounds.

Download PDF version

In case you missed it

Adapting servers for IP video surveillance systems: Why manufacturers struggle
Adapting servers for IP video surveillance systems: Why manufacturers struggle

Security integrators are often tasked with a multitude of responsibilities which could include a variety of installation, integration or design tasks made up of sprinkler systems, fire alarms, access control, HVAC, video surveillance systems and networks; and then pile on maintenance, training and analytics. Traditionally, most security integrators have installation backgrounds but are now expected to be IT savvy, too. Even the most proficient IT professionals may not fully grasp the complexity of adapting computer servers for use with video systems. It’s not the area of expertise of security integrators as the complexities between IT data and video data are significant. Therefore, security integrators depend on system builders to provide solutions to meet the needs of video systems expertly and with few hassles. It’s a simple enough ask, but not so easy to deliver. Tom Larson, Chief Technology Officer, BCDVideo, lists some of the challenges: The gap between reality and customer expectations End users should expect a security integrator to provide services and a wide product line to ensure the right equipment for any size job Sometimes there is a gap between what a security integrator expects from a video surveillance solution (in terms of validation testing, dependability, technical support) and the performance of available choices, especially in the case of low-cost or generic equipment. Extra service and support are needed to bridge the gap. Unfortunately, some manufacturers entering the market have failed to deliver, and integrators (and their end user customers) have paid a price. The network is often overlooked Security integrators should pay special attention to engineering the network and calculating the bandwidth and storage needed for video projects, especially given how technology evolves so quickly. Security is an appliance-driven business, and integrators who just want to add another server to expand storage or functionality without configuring the network run the risk of i/o bottlenecks and other system failures. End users should expect a security integrator to provide services and a wide product line to ensure the right equipment for any size job. Unfortunately, traditional IT resellers are often married to a singular solution limiting their knowledge of a good fit for the job. Buying a video server based on a low price aggravates the problem, as “Frankensteined” or generic servers tend to generate additional costs over time Servers are mistakenly considered a one-time expense One mistake purchasing agents make and security integrators have a hard time quantifying is viewing video storage as a capital expense (as one more component of a security system) rather than considering ongoing operating expenses. Buying a video server based on a low price aggravates the problem. “Frankensteined” or generic servers tend to generate additional costs over time, such as firmware or supply chain issues, and some systems builders have failed to provide support to offset those costs. In fact, the high costs over time of supporting inexpensive servers have been unsustainable for some system builders, who have left integrators and end users holding the bag, and in some cases, the liability. Adapting to sustainable strategies “Systems builders to the video surveillance market must adapt and invest to meet the demands of security integrators’ expectations, and they need a business model that enables them to provide a substantial level of support and commitment,” says Larson. “Working with high-quality manufacturers and providing tried-and-tested, certified equipment upfront ensures manageable costs over the life of the system. Products that are fully tested and contain no firmware bugs ensure smoother installations. By providing adequate technical support to the security integrator and managing IT variables over the life of the system, the systems builder makes it possible for a security integrator to specify and install a video server as easily as any other system component.” Keeping IT professionals on staff to deal with server issues is cost-prohibitive for security integrators Taking a longer-term view and considering total cost of ownership is a more sustainable strategy for integrators, says Larson. Investing upfront in a higher-quality server is rewarded by dependability and lower service costs over the life of the system. And the lower costs of supporting a higher-quality server create a more sustainable business model for the integrator, thus ensuring the integrator and end user will have ongoing support. Adapting server technology to video applications Security integrators deliver a different skill set than IT integrators, who tend to be more hands-on in terms of updating firmware and providing maintenance. Keeping IT professionals on staff to deal with server issues is cost-prohibitive for security integrators, who therefore depend on systems builders to provide that expertise. They develop a long-term relationship with a systems builder they can depend on to meet their needs for each job. Larson says the best scenario for a security integrator is a combination of a high-quality server systems builder that understands the specific needs of the security integrator market. Adapting server technology to video applications requires knowledge of both disciplines. Dependable technology adapted to the needs of the video channel ensures successful installations and happy, long-term customers.

New Year’s Resolutions to counter web and mobile application security breaches in 2019
New Year’s Resolutions to counter web and mobile application security breaches in 2019

With the coming of a New Year, we know these things to be certain: death, taxes, and… security breaches. No doubt, some of you are making personal resolutions to improve your physical and financial health. But what about your organisation’s web and mobile application security? Any set of New Year’s resolutions is incomplete without plans for protecting some of the most important customer touch points you have — web and mobile apps. Every year, data breaches grow in scope and impact. Security professionals have largely accepted the inevitability of a breach and are shifting their defense-in-depth strategy by including a goal to reduce their time-to-detect and time-to-respond to an attack. Despite these efforts, we haven’t seen the end of headline-grabbing data breaches like recent ones affecting brands such as Marriott, Air Canada, British Airways and Ticketmaster. App-level threats The apps that control or drive these new innovations have become today’s endpoint The truth of the matter is that the complexity of an organisation’s IT environment is dynamic and growing. As new technologies and products go from production into the real world, there will invariably be some areas that are less protected than others. The apps that control or drive these new innovations have become today’s endpoint — they are the first customer touch point for many organisations. Bad actors have realised that apps contain a treasure trove of information, and because they are often left unprotected, offer attackers easier access to data directly from the app or via attacks directed at back office systems. That’s why it’s imperative that security organisations protect their apps and ensure they are capable of detecting and responding to app-level threats as quickly as they arise. It’s imperative that security organisations protect their apps and ensure they are capable of detecting and responding to app-level threats as quickly as they arise In-progress attack detection Unfortunately, the capability to detect in-progress attacks at the app level is an area that IT and security teams have yet to address. This became painfully obvious in light of the recent Magecart attacks leveraged against British Airways and Ticketmaster, among others. Thanks to research by RiskIQ and Volexity, we know that the Magecart attacks target the web app client-side. During a Magecart attack, the transaction processes are otherwise undisturbed Attackers gained write access to app code, either by compromising or using stolen credentials, and then inserted a digital card skimmer into the web app. When customers visited the infected web sites and completed a payment form, the digital card skimmer was activated where it intercepted payment card data and transmitted it to the attacker(s). Data exfiltration detection During a Magecart attack, the transaction processes are otherwise undisturbed. The target companies receive payment, and customers receive the services or goods they purchased. As a result, no one is wise to a breach — until some 380,000 customers are impacted, as in the case of the attack against British Airways. The target companies’ web application firewalls and data loss prevention systems didn’t detect the data exfiltration because those controls don’t monitor or protect front-end code. Instead, they watch traffic going to and from servers. In the case of the Magecart attacks, the organisation was compromised and data was stolen before it even got to the network or servers. Today’s proven obfuscation techniques can help prevent application reverse engineering, deter tampering, and protect personal identifiable information and API communications Best practice resolutions The Magecart attacks highlight the need to apply the same vigilance and best practices to web and mobile application source code that organisations apply to their networks—which brings us to this year’s New Year’s resolutions for protecting your app source code in 2019: Alert The key to success is quickly understanding when and how an app is being attacked First, organisations must obtain real-time visibility into their application threat landscape given they are operating in a zero-trust environment. Similar to how your organisation monitors the network and the systems connected to it, you must be able to monitor your apps. This will allow you to see what users are doing with your code so that you can customise protection to counter attacks your app faces. Throughout the app’s lifecycle, you can respond to malicious behavior early, quarantine suspicious accounts, and make continuous code modifications to stay a step ahead of new attacks. Protect Next, informed by threat analytics, adapt your application source code protection. Deter attackers from analysing or reverse engineering application code through obfuscation. Today’s proven obfuscation techniques can help prevent application reverse engineering, deter tampering, and protect personal identifiable information and API communications. If an attacker tries to understand app operation though the use of a debugger or in the unlikely event an attacker manages to get past obfuscation, threat analytics will alert you to the malicious activity while your app begins to self-repair attacked source code or disable portions of the affected web app. The key to success is quickly understanding when and how an app is being attacked and taking rapid action to limit the risk of data theft and exfiltration. Protecting encryption keys is often overlooked but should be considered a best practice as you forge into the new year with a renewed commitment to app security to ensure your organisation’s health and well-being in 2019 Encrypt Finally, access to local digital content and data, as well as communications with back office systems, should be protected by encryption as a second line of defense, after implementing app protection to guard against piracy and theft. However, the single point of failure remains the instance at which the decryption key is used. Effective encryption requires a sophisticated implementation of White-Box Cryptography This point is easily identifiable through signature patterns and cryptographic routines. Once found, an attacker can easily navigate to where the keys are constructed in memory and exploit them. Effective encryption requires a sophisticated implementation of White-Box Cryptography. One that combines a mathematical algorithm with data and code obfuscation techniques transforming cryptographic keys and related operations into indecipherable text strings. Protecting encryption keys is often overlooked but should be considered a best practice as you forge into the new year with a renewed commitment to app security to ensure your organisation’s health and well-being in 2019. Protecting applications against data breach According to the most recent Cost of a Data Breach Study by the Ponemon Institute, a single breach costs an average of $3.86 million, not to mention the disruption to productivity across the organisation. In 2019, we can count on seeing more breaches and ever-escalating costs. It seems that setting—and fulfilling—New Year’s resolutions to protect your applications has the potential to impact more than just your risk of a data breach. It can protect your company’s financial and corporate health as well. So, what are you waiting for?

How organisations can secure user credentials from data breaches and password hacks
How organisations can secure user credentials from data breaches and password hacks

In the age of massive data breaches, phishing attacks and password hacks, user credentials are increasingly unsafe. So how can organisations secure accounts without making life more difficult for users? Marc Vanmaele, CEO of TrustBuilder, explains. User credentials give us a sense of security. Users select their password, it's personal and memorable to them, and it's likely that it includes special characters and numbers for added security. Sadly, this sense is most likely false. If it's anything like the 5.4 billion user IDs on haveibeenpwned.com, their login has already been compromised. If it's not listed, it could be soon. Recent estimates state that 8 million more credentials are compromised every day. Ensuring safe access Data breaches, ransomware and phishing campaigns are increasingly easy to pull off. Cyber criminals can easily find the tools they need on Google with little to no technical knowledge. Breached passwords are readily available to cyber criminals on the internet. Those that haven’t been breached can also be guessed, phished or cracked using one of the many “brute-force” tools available on the internet. It's becoming clear that login credentials are no longer enough to secure your users' accounts. Meanwhile, organisations have a responsibility and an ever-stricter legal obligation to protect their users’ sensitive data. This makes ensuring safe access to the services they need challenging, particularly when trying to provide a user experience that won’t cause frustration – or worse, lose your customers’ interest. After GDPR was implemented across the European Union, organisations could face a fine of up to €20 million, or 4% annual global turnover Importance of data protection So how can businesses ensure their users can safely and simply access the services they need while keeping intruders out, and why is it so important to strike that balance? After GDPR was implemented across the European Union, organisations could face a fine of up to €20 million, or 4% annual global turnover – whichever is higher, should they seriously fail to comply with their data protection obligations. This alone was enough to prompt many organisations to get serious about their user’s security. Still, not every business followed suit. Cloud security risks Breaches were most commonly identified in organisations using cloud computing or where staff use personal devices According to a recent survey conducted at Infosecurity Europe, more than a quarter of organisations did not feel ready to comply with GDPR in August 2018 – three months after the compliance deadline. Meanwhile, according to the UK Government’s 2018 Cyber Security Breaches survey, 45% of businesses reported breaches or attacks in the last 12 months. According to the report, logins are less secure when accessing services in the cloud where they aren't protected by enterprise firewalls and security systems. Moreover, breaches were most commonly identified in organisations using cloud computing or where staff use personal devices (known as BYOD). According to the survey, 61% of UK organisations use cloud-based services. The figure is higher in banking and finance (74%), IT and communications (81%) and education (75%). Additionally, 45% of businesses have BYOD. This indicates a precarious situation. The majority of businesses hold personal data on users electronically and may be placing users at risk if their IT environments are not adequately protected. Hackers have developed a wide range of tools to crack passwords, and these are readily available within a couple of clicks on a search engine Hacking methodology In a recent exposé on LifeHacker, Internet standards expert John Pozadzides revealed multiple methods hackers use to bypass even the most secure passwords. According to John’s revelations, 20% of passwords are simple enough to guess using easily accessible information. But that doesn’t leave the remaining 80% safe. Hackers have developed a wide range of tools to crack passwords, and these are readily available within a couple of clicks on a search engine. Brute force attacks are one of the easiest methods, but criminals also use increasingly sophisticated phishing campaigns to fool users into handing over their passwords. Users expect organisations to protect their passwords and keep intruders out of their accounts Once a threat actor has access to one password, they can easily gain access to multiple accounts. This is because, according to Mashable, 87% of users aged 18-30 and 81% of users aged 31+ reuse the same passwords across multiple accounts. It’s becoming clear that passwords are no longer enough to keep online accounts secure. Securing data with simplicity Users expect organisations to protect their passwords and keep intruders out of their accounts. As a result of a data breach, companies will of course suffer financial losses through fines and remediation costs. Beyond the immediate financial repercussions, however, the reputational damage can be seriously costly. A recent Gemalto study showed that 44% of consumers would leave their bank in the event of a security breach, and 38% would switch to a competitor offering a better service. Simplicity is equally important, however. For example, if it’s not delivered in ecommerce, one in three customers will abandon their purchase – as a recent report by Magnetic North revealed. If a login process is confusing, staff may be tempted to help themselves access the information they need by slipping out of secure habits. They may write their passwords down, share them with other members of staff, and may be more susceptible to social engineering attacks. So how do organisations strike the right balance? For many, Identity and Access Management solutions help to deliver secure access across the entire estate. It’s important though that these enable simplicity for the organisation, as well as users. Organisations need an IAM solution that will adapt to both of these factors, providing them with the ability to apply tough access policies when and where they are needed and prioritising swift access where it’s safe to do so Flexible IAM While IAM is highly recommended, organisations should seek solutions that offer the flexibility to define their own balance between a seamless end-user journey and the need for a high level of identity assurance. Organisations’ identity management requirements will change over time. So too will their IT environments. Organisations need an IAM solution that will adapt to both of these factors, providing them with the ability to apply tough access policies when and where they are needed and prioritising swift access where it’s safe to do so. Importantly, the best solutions will be those that enable this flexibility without spending significant time and resource each time adaptations need to be made. Those that do will provide the best return on investment for organisations looking to keep intruders at bay, while enabling users to log in safely and simply.