.svg)
ISO 27001Identity and Access ManagementPrivileged Access Management
ISO 27001 A.5.18: Access Rights
ISO 27001 A.5.18 requires that access rights to information and systems are provisioned, reviewed, modified, and removed across the whole lifecycle,...
ISO 27001 A.8.3: Information Access Restriction
ISO 27001 A.8.3 requires that access to information and application functions is restricted in line with the access control policy, enforced at the...
ISO 27001 A.8.5: Secure Authentication
ISO 27001 A.8.5 requires that secure authentication technologies and procedures are implemented based on how sensitive the information and system...
ISO 27001 A.5.15: Access Control
ISO 27001 A.5.15 requires an organization to establish and maintain an access control policy that governs who may reach information and systems,...
Hybrid Identity Management: How to Centralize IGA
It's tempting to centralize identity by buying a platform, but I leave the platform for last. Below is my approach to solutioning centralized...
SOC 2 CC6.3: Role-Based Access, Least Privilege, and Segregation of Duties
SOC 2 CC6.3 is where role design meets audit evidence: it requires that access to protected information assets is authorized, modified, or removed...