.svg)
ISO 27001Identity and Access ManagementPrivileged Access Management
Filter by Tag
ISO 27001 A.5.18: Access Rights
ISO 27001 A.5.18 requires that access rights to information and systems are provisioned, reviewed, modified, and removed across the whole lifecycle,...
ISO 27001 A.8.3: Information Access Restriction
ISO 27001 A.8.3 requires that access to information and application functions is restricted in line with the access control policy, enforced at the...
ISO 27001 A.8.5: Secure Authentication
ISO 27001 A.8.5 requires that secure authentication technologies and procedures are implemented based on how sensitive the information and system...
ISO 27001 A.5.15: Access Control
ISO 27001 A.5.15 requires an organization to establish and maintain an access control policy that governs who may reach information and systems,...
Designing Centralized Identity Across Hybrid Environments: A Security Architecture Walkthrough
Centralizing identity across cloud and on-prem environments is a security architecture problem before it is a tool-selection problem. You start by...
SOC 2 CC6.3: Role-Based Access, Least Privilege, and Segregation of Duties
SOC 2 CC6.3 is where role design meets audit evidence: it requires that access to protected information assets is authorized, modified, or removed...