Strategically Designing and Implementing Identity Security, Second Edition
Buch, Englisch, 340 Seiten, Format (B × H): 178 mm x 254 mm, Gewicht: 612 g
ISBN: 979-8-8688-0232-4
Verlag: Apress
Today, it’s easier for threat actors to simply log in versus hack in. As cyberattacks continue to increase in volume and sophistication, it’s not a matter of if, but when, your organization will have an incident. Threat actors target accounts, users, and their associated identities—whether human or machine, to initiate or progress their attack. Detecting and defending against these malicious activities should be the basis of all modern cybersecurity initiatives.
This book details the risks associated with poor identity security hygiene, the techniques that external and internal threat actors leverage, and the operational best practices that organizations should adopt to protect against identity theft, account compromises, and to develop an effective identity and access security strategy. As a solution to these challenges, Identity Security has emerged as a cornerstone of modern Identity and Access Management (IAM) initiatives. Managing accounts, credentials, roles, entitlements, certifications, and attestation reporting for all identities is now a security and regulatory compliance requirement.
In this book, you will discover how inadequate identity and privileged access controls can be exploited to compromise accounts and credentials within an organization. You will understand the modern identity threat landscape and learn how role-based identity assignments, entitlements, and auditing strategies can be used to mitigate the threats across an organization’s entire Identity Fabric.
What You Will Learn
- Understand the concepts behind an identity and how its associated credentials and accounts can be leveraged as an attack vector
- Implement an effective identity security strategy to manage identities and accounts based on roles and entitlements, including the most sensitive privileged accounts
- Know the role that identity security controls play in the cyber kill chain and how privileges should be managed as a potential weak link
- Build upon industry standards and strategies such as Zero Trust to integrate key identity security technologies into a corporate ecosystem
- Plan for a successful identity and access security deployment; create an implementation scope and measurable risk reduction; design auditing, discovery, and regulatory reporting; and develop oversight based on real-world strategies to prevent identity attack vectors
Who This Book Is For
Management and implementers in IT operations, security, and auditing looking to understand and implement an Identity and Access Management (IAM) program and manage privileges in these environments
Zielgruppe
Professional/practitioner
Autoren/Hrsg.
Weitere Infos & Material
Chapter 1: Biography
Chapter 2: Foreword
Chapter 3: Introduction – “The Machine”
Chapter 4: Introduction – “The Human”
Chapter 5: An Identity Crisis
Chapter 6: Identity as a Business Function
Chapter 7: Identity Access DefinedChapter 8: Understanding Enterprise Identity
Chapter 9. Identity and Access Management
Chapter 10. Indicators of Compromise
Chapter 11. Identity Attack Vectors
Chapter 12. The Identity Cyber Kill Chain
Chapter 13. Identity Protection Strategies
Chapter 14. Identity Threat Detection and Response
Chapter 15. Privileged Access Management
Chapter 16. Six Steps Identity Security
Chapter 17. Emerging Identity Security
Chapter 18. Identity Technical Debt
Chapter 19. Identity Digital Transformations
Chapter 20. Identity and Access Evolution
Chapter 21. Just-In-Time Access Management
Chapter 22. Zero Trust
Chapter 23. Identity ObfuscationChapter 24. Ransomware
Chapter 25. Regulatory Compliance
Chapter 26. Key Take Aways
Chapter 27. Conclusion
