Photo by Vadim Bogulov on Unsplash

The Most Important Area of Cybersecurity? Perhaps Identity and Access Management?

Meet Microsoft Entra

--

Which area of cybersecurity is often not talked about, but it is actually one of the largest areas of development, and is at the core of the security for users and organisations? It’s identity and access management. Overall, it is the basic process of proving our identity and then mapping it to our rights on a system — and which is at the core of organisational security. Unfortunately, our world of authentication is still based on the world of mainframe computers and where we had simple login identifiers and passwords.

A changing digital world

Our digital world is now a whole lot more complex than just logging into a single computer system or a locally networked system … we now (typically) integrate with multiple clouds, link with distributed services, and use multiple identities. Unfortunately, in the past, we have been sloppy (aka lazy!) with the rights we assign to users. But, this will change with the rise of zero trust, and where we do not trust anything (users, resources and services) — until they provide the required proof of identity and rights — zero trust. And, finally, no single identity system fits every application, and we much match the challenge levels to the risks that we face. A low-level…

--

--

Prof Bill Buchanan OBE FRSE

Professor of Cryptography. Serial innovator. Believer in fairness, justice & freedom. Based in Edinburgh. Old World Breaker. New World Creator. Building trust.