Identity and Access Management

Abstract

Identity and Access Management (IAM) is a broad area within information security, comprising both the technical and business process aspects of controlling access by providing the right access at the right time to the right person. In many ways, identity—and a reasonably well-run identity management program—is the key to success with a Zero Trust program. Zero Trust at its heart provides an identity-centric approach to security, and therefore understanding and managing identity is an incredibly important factor in any Zero Trust program. And yet, organizations should not and cannot hold themselves to an unreasonable standard, or require perfection from their identity teams and systems before embarking on their Zero Trust journey.