Identity Management Blog and Articles

Identity Management (IdM) System Implementation Considerations

This article explores important considerations for implementing IdM systems such as implementation processes, role-based access management model, and existing IAM services for processing and managing user access.

Identity Management Use Cases

Identity and access management architects can benefit from the following identity management use cases to improve Identity, Credential, and Access Management (ICAM) practices within their organizations.

Self-Sovereign Identity

In a rapidly evolving digital world where blockchain technology is being adopted to redefine identity and access management, self-sovereign identity is no longer a distant dream to ensure privacy and consumer protection.

IAM Certification Courses – Identity Management Blog

IAM courses are among the most popular courses in cybersecurity due to heightened awareness about the importance of identity and access management in enterprise security. Learn more.

The Evolution of Authentication

The increasing complexity of systems is leading to a need for more secure authentication methods. Although passwords are a ubiquitous form of verification, allowing users to access applications and perform actions within a system, there have always been problems with this method which raise the password-less solutions.

10 Popular Email and Phishing Scams

This article is published to list the 10 popular email and phishing scams that are used to scam consumers and businesses.

Lessons Learned from the SolarWinds Hack

There are many lessons learned from the SolarWinds hack that companies can embrace to prevent future attacks and protect they systems.

Identity and Access Management Threat Predictions for 2021

To stay ahead of the market and manage the evolving threats, both businesses and IAM professionals need to understand the changes that will occur in 2021.

Hacked Cybersecurity Systems and Stolen Security Data Risks

A stunning cyber attack on FireEye security tools makes cybersecurity experts assess the impact and risks of hacked security systems and stolen security data.

Customer Identification and Identity Verification Methods

There are legal requirements for customer identity verification that businesses must comply with their “know your customer” and customer identification programs.

Selecting Identity and Access Management Software

Selecting identity and access management software can be challenging. Learn to properly assess your needs and techniques to engage vendors and select software.

Managing the Advanced Persistent Threat (APT) Lifecycle

Managing the Advanced Persistent Threat (APT) lifecycle begins with knowing the typical APT lifecycle and applying the right mitigation strategies at each phase.

Improving Identity Management With Advanced Threat Protection (ATP)

Improving identity and access management is an important goal of Advanced Threat Protection (ATP) because most data breaches occur due to unauthorized access.

Privacy Implications of Using Facial Recognition Systems

While facial recognition systems offer clear benefits to businesses and government agencies, they present one of the biggest threats to consumer privacy.

The Cybersecurity Risks of Outsourcing to Third Parties

Outsourcing to third party service providers presents serious cybersecurity risks which must be managed properly to avoid the consequences of data breach.

Blackmailing With Stolen Private Information

Blackmailing with stolen private information is common. Use these tips to avoid being blackmailed and properly respond to blackmail and extortion threats.

Importance of Layered Security in Cyber Defense

Layered security recognizes that there is no single point in a computer system that can ever be fully secure. Therefore, layered security seeks to implement multiple mitigating layers of protection so that intruders have to break through many security measures at the same time.

Authentication in an Internet Banking Environment

Authentication in an Internet Banking Environment is only one of many safeguards that have been introduced to protect the clients of financial institutions.

Data Loss Prevention (DLP) Best Practices

Data Loss Prevention encompasses various approaches, processes, and tools to protect sensitive data from unauthorized changes, destruction, sharing, theft, and loss.

Security Risks of Distributed Blockchain Applications and Data Storage

With the introduction of distributed blockchain applications or dApps and distributed cloud data storage, the cybersecurity and data breach risks may evolve.

Technical Identity and Access Management Practitioner Duties

Technical identity and access management practitioners are in high demand as the IAM industry grows. This identity management blog article covers the IAM practitioner job duties.

Identity and Access Management in Decentralized Finance

Best practices in identity and access management are critical in decentralized finance to protect the crypto wallet credentials and DeFi financial transactions.

Cryptocurrency Wallet Scams – Identity Management Blog

Cryptocurrency wallet scams are on the rise and hackers are targeting individuals and wallet providers. Consider these important points to minimize risks.

Identity and Access Management Job Descriptions and Salaries

Identity and access management is a growing field and offers many job opportunities. This identity management blog article describes some of the most common IAM jobs and salaries.

Identity and Access Management Job Interview Questions

If you are preparing for an identity and access management job interview, this identity management blog article covers the common IAM job interview questions that IAM candidates face.

Privileged Account Management Best Practices

Privileged accounts pose a great security threat and must be managed differently than other accounts to prevent data breach and unauthorized transactions.

Dealing With Ransom Demands By Hackers

Cyber criminals steal files and demand a ransom for the decryption key in ransomware attacks. How should organizations deal with the ransom demands by hackers?

Cybersecurity and Data Protection Considerations for Remote Workers

As organizations increasingly allow their employees to work remotely, This identity management blog article lists cybersecurity and data protection considerations for remote workers.

Global Cybersecurity Expert Shortages

It is estimated that global cybersecurity expert shortage is around 1.5 million in 2020 and more than 3.5 million cybersecurity jobs will be unfilled by 2021.

Building a Robust Identity and Access Management Team

There is a need for identity and access management teams and experts. Identity Management Institute helps identity management professionals get certified and companies get the talent they need to build robust IAM teams.

Is Identity and Access Management Part of IT or Cybersecurity?

As organizations increasingly establish IAM teams, many IAM experts question whether the Identity and Access Management function is part of IT or Cybersecurity.

Cloud Access Security Broker (CASB) For Cloud Security

Cloud Access Security Broker (CASB) is a cloud security solution that helps organizations control access, reinforce policies, and protect data in the cloud.

Biometric Authentication for Better Security

Many companies transition to biometric authentication for better security as it helps to keep hackers at bay and users happy when they access systems.

Why to Switch to Fast Identity Online (FIDO) Authentication

The Fast Identity Online or FIDO standard is a joint development by the world’s leading technology companies which try to strengthen the security of systems, mobile devices and applications through strong password-less authentication.

Cyber Attack Methods on Internet Availability

Although the prospect of “bringing down the whole Internet” is enticing, hackers shifted tactics toward crashing networks of businesses and governmental entities.

Zero Day Security Vulnerability Management and Exploit Prevention

Zero day attacks take advantage of security flaws in a program that developers either don’t know about or have not yet addressed. Learn about zero day attack prevention and incident response.

Internet Infrastructure and Disruption Causes

An imminent cyberattack on the Internet and online communications is one of the causes for internet shutdown which can lead to disruption to communications, and system damage.

Facing the Unique Challenges of Customer IAM

Companies dealing with consumers face challenges in the area of identity management which requires a balanced approach on data security and user experience.

Managing Insider Threats with a Zero Trust Access Model

Insiders pose a greater security risk to an organization’s systems and data. Insider threats can be managed with a zero trust model and multi-layer security.

Privileged Account Management (PAM)

As the number of systems, users, and data grows, the need for a robust identity and access management solutions and experts becomes even more important to manage accounts and their access. Specifically, privileged accounts which offer the highest level of access to a system are prime hacking targets.

5 Identity and Access Management Best Practices

Identity and access management (IAM) is a critical component of a successful protocol and requires the implementation of best practices to maintain the integrity of user and device identities.

Global Internet Interruption will Cause Worst Economic Crisis

An extended global Internet interruption will cause even a bigger economic crisis than Corona virus leading to financial sector meltdown, business bankruptcies, mass layoffs and unemployment, and many other unforeseen consequences never witnessed before.

Technology Project Management Best Practices, Challenges, Styles, and Skills

Project managers in the technology industry must use and adopt best practices in project management and have the skills to overcome project challenges.

The California Consumer Protection Act (CCPA): 2020 Business Guide

California Consumer Privacy Act (CCPA) regulation applies to companies and organizations doing business in California that meet certain data management criteria.

Cloud Security and Access Management Concepts

As more data and applications move to the cloud from traditional systems, it becomes paramount for businesses and their management to secure their data from threats and attacks as they store, process, and access their data in the cloud.

KAGE Data Protection Framework

KAGE is a data protection framework developed by Identity Management Institute to offer a simplified information security framework for the CDP® certification.

CARTA, Zero Trust and the Future of Adaptive Risk Management

Extensive networks with diverse user bases require identity management and access control measures capable of executing adaptive responses to dynamic user interactions. The CARTA framework introduced by Gartner offers one such solution.

Dealing with Ransomware Pirates

Recent study suggests that ransomware attacks are on the rise and ransomware victims must carefully decide how to proceed when dealing with ransomware pirates.

Ransomware Attack Prevention and Response Solutions

The security tips discussed in this identity management blog article offer ransomware attack prevention and response solutions to help organizations keep their information assets safe.

Understanding and Using Hyperledger for Blockchain Identity Management

The Hyperledger project offers businesses many powerful identity and access management tools and features with granular user access and data privacy controls.

Identity of Things Challenges in IoT Identity Management

For Internet of Things, we must be prepared to address IoT identity management needs for self-service, identification, ownership, access rights, and tasks.

From IAM to Customer IAM: 7 Basic Tenets of CIAM

These seven core Customer Identity and Access Management – CIAM principles serve as guides for businesses seeking the best customer system security solutions.

Identity and Access Management Purpose and Objectives

The identity and access management purpose is to support the overall cybersecurity objectives of an organization. As such, identity and access management objectives are to ensure confidentiality, integrity, and availability of systems and data.

Using IAM to Support Regulatory Compliance in Cybersecurity

Using identity and access management for cybersecurity regulatory compliance requires a solid framework for managing user identity and controlling data access. Learn about 5 regulations which can be supported by identity and access management for compliance.

Polymorphic Malware: Best Practices for Responding to a Growing Threat

Known as polymorphic malware, these malicious programs must be detected and eradicated to prevent widespread data compromise. Learn about polymorphic malware security and protection best practices.

What Impact is COVID-19 Having on Cybersecurity?

With increased remote workforce due to Coronavirus, businesses face continued challenges associated with COVID-19 which is having an impact on cybersecurity.

Shortcomings in Cybersecurity Risk Management

Every company concerned with protecting its systems and information must also be concerned with shortcomings in its cybersecurity risk management efforts. Learn about these shortcomings.

Integrating Cyber and Physical Security For Better Access Management

Integrating cyber and physical security is necessary for better access management and requires actionable plans for policy enforcement to address access risks.

Access Control Types and Models

Access control types and models are designed to allow, deny, limit, and revoke access to resources through identification, authentication, and authorization. Learn more about these concepts.

Executive Assistant Superpowers

Executive assistant superpowers should not be underestimated when considering the level of access that some executives have and share with their assistants.

Cybersecurity Considerations for Remote Workers

Adopting a remote work policy requires careful considerations of cybersecurity implications for remote workers to avoid placing your business at a disadvantage.

Why Some Executives Abuse Power and Override Security Policies

Corporate executives have in general more power than others in an organization and some of them abuse their power and override security controls with or without malicious intention.

Identity and Access Management Challenges

There are many identity and access management challenges facing organizations and their staff which are introduced by changes in our way of life, technology and threat landscape.

Information Security Outsourcing Risks and Solutions

Information security outsourcing presents certain risks that companies must manage. As more companies decide to outsource certain aspects of their identity management and security services, they must take responsibility for managing their security service providers.

Should You Consider IAM Certification?

Pursuing identity and access management or IAM certification has the potential to improve your career as an IT specialist or cybersecurity professional.

Identity Management and Cybersecurity News Update

From Coronavirus cyber threats to ransomware blackmail, blockchain identity management and zero trust, this identity management article lists the latest IAM and cybersecurity news.

Identity Theft Red Flags Rule Examination Procedures Checklist

These identity theft audit procedures will be followed by government examiners to ensure compliance with the Red Flags Rule and can be used by companies as a checklist to assess their compliance level and preparedness for an eventual audit.

26 Red Flags for Preventing Identity Theft

The US government has identified 5 categories of identity theft red flags and a total of 26 specific red flags as part of the Red Flags Rule regulation that businesses must use to develop an identity theft prevention program.

Are Biometric Data Breaches a Real Security Threat?

With growing adoption of biometric technology, there is a growing concern that biometric data can be stolen and used to gain access to data with far more permanence than a password.

Business Outsourcing Myths and Risks

There are certain business outsourcing risks and myths around the benefits when companies decide to let another company take care of their business operations.

Key Characteristics of Identity and Access Management Solutions [Business Guide]

Identity management is an essential component of modern enterprise security. Check out these key characteristics of identity and access management solutions.

Blockchain Identity Management for Security and Privacy

There are clear signs that future business solutions for security and privacy will include blockchain identity management but new challenges must be addressed.

Information Security Program Implementation Guide

This identity management article summarizes the government information security program implementation guide under NIST 800-100 and the minimum security requirements per NIST 800-53.

Artificial Intelligence Has its Perks, But it’s Not a Panacea

Sophisticated artificial intelligence solutions can be used to improve security but companies must mitigate artificial intelligence threats and security issues.

Enterprise Cybersecurity Best Practices: Creating an Information Security Policy

Security should be a priority for companies and cybersecurity policy best practices must be considered in security management including clear instructions.

Mergers, Breach Protection and Government Cybersecurity

In response to changing cybersecurity trends, businesses and government cybersecurity still struggle to protect their systems from hackers or insider threats.

Strategic Access Management Protects Smart Buildings From Siegeware

Updated and adequate access management policies and practices can help protect smart buildings from siegeware attacks and prevent ransomware and financial loss.

Third Party Security Risk Management Best Practices

The complex inter-connectivity between enterprises and their vendors requires diligence and application of third party security risk management best practices.

Is Adaptive Authentication the Solution for Modern Identity Management?

Adaptive Authentication is a risk-based authentication method used to grant entities access based on various risk factors such as user role and behavior.

2019 Cybersecurity Roundup and 2020 Predictions

Kick off the new year by taking stock of the 2019 cybersecurity events and preparing for new challenges by considering identity management predictions for 2020.

Onboarding Best Practices to Mitigate Insider Threats

The lack of user awareness places companies at significant risk for breaches resulting from ignorance and errors. Proper onboarding techniques are necessary to educate employees and reduce the likelihood of insider threats from day one.

Digital Identity Transformation – Identity Management Blog

Identity Management Institute has introduced a framework for “Digital Identity Transformation” which is the holistic assessment and improvement of business processes, people, and technologies to achieve the identity management excellence, system security, data privacy, and regulatory compliance objectives of an organization.

Is Your Enterprise Making These Critical Identity Management Mistakes?

92% of IT and security professionals face “at least one challenge” which can lead to making critical identity management mistakes and data breach incidents.

Insider Threats to System and Data Security

The best approach to manage insider threats to system and data security is for companies to incorporate as many concepts and best practices described in this identity management blog article into their overall cybersecurity strategy.

Smart Homes, Smart Buildings, Smart Cities

With the number of connected devices projected to increase, smart homes, smart buildings and smart cities add to IAM challenges in the modern IoT landscape.

Exploring Authentication Options for Better Security

The increasing complexity of the cybersecurity landscape has rendered traditional passwords all but useless, and a nuanced approach to access management is necessary to protect against emerging threats.

Dangers of Security Policy Override and Violations

Executives and management team members like all other employees should not be exempt from following any of the company’s security policies and procedures in order to ensure continued protection of company assets including confidential information.

Security Challenges and the Future of the IAM Market

The digital landscape is always changing, and projections suggest identity and access management (IAM), cloud services and updated security models will be key considerations for 2020.

Improving Identity Theft Prevention with Machine Learning

Making Machine Learning a primary tool in identity theft prevention helps safeguard businesses against inevitable attacks and preserve the identities of all users with network access.

IAM Certification Types and Benefits

Identity Management Institute offers various types of IAM certifications to its members and customers in order to confirm certain assertions and qualifications.

6 Tips for Selecting an IDaaS Solution

These six questions can guide enterprises to evaluate security, functionality and adaptability for selecting an IDaaS vendor for diverse access requirements.

Reasons Why You Need to Upgrade Your IAM Systems

In light of changing access needs and the complexity of modern threats, IT teams must examine existing systems for signs of obsolescence and take steps to implement solutions with features designed to support modern access needs.

Why Identity and Access Management is Important

This identity management blog article lists a few reasons to demonstrate why identity and access management is important to the cybersecurity, data protection, and privacy industries.

Artificial Intelligence For Data Breach Prevention

Leveraging artificial intelligence for data breach prevention requires a detailed security plan, tools and the help of a qualified IT team to execute the plan.

Overview of Identity Theft Companies

As consumers look for identity theft help, they must assess and select the best service provider. This identity management article provides an overview of some identity theft companies and how companies can differentiate themselves from the crowd with a product certification.

How Artificial Intelligence and Machine Learning are Transforming IAM

Companies are turning to artificial intelligence and machine learning for IAM transformation and improved identity and access management practices and security.

LDAP Authentication Management Best Practices

The Lightweight Directory Access Protocol (LDAP) provides database access control but can present security problems if proper administration is not followed.

Identity Theft Company Certification

Identity theft companies are encouraged to undergo a voluntary product certification process in order to showcase their services and the “Certified Product” badge. The certification report will answers many of consumers’ questions upfront and help gain their trust.

Improving Security to Future-Proof Enterprise Cloud Environments

Monitoring the trends in cloud security can guide enterprises to best practices for protecting users, identities and data in the cloud. Preparing in advance for changes in cloud use and technology equips businesses to handle attacks and avoid catastrophic breaches.

IAM Best Practices in Changing Environments

When planning for the future, identity management professionals must consider continuing changes in data privacy and security regulations and take into account the evolving nature of enterprise systems.

Complex Cyberattacks Require Improved Security

In light of frequent and complex cyberattacks, predictions for the coming years suggest an aggressive and proactive approach to security is necessary to manage network access.

Security and Privacy Risks of Biometric Authentication

Businesses considering biometric authentication as part of their strategy must consider the potential security and privacy risks of biometric authentication. What can businesses do to protect biometric data going into 2020?

Brazilian General Data Protection Law

Organizations need to understand the impact of the Brazilian General Data Protection Law or LGPD which is Lei Geral de Proteção de Dados in Portuguese in the context of current data protection regulations for compliance.

6 Reasons Why Data Privacy is Dead – Identity Management Blog

Privacy has diminished due to the emergence of new technologies, users’ irresponsible attitudes, frequent data breaches, companies’ willingness to profit from data sharing, and government spying.

7 Password Attack Methods Hackers Use

In many cases, passwords can be guessed using common phrases such as “password”, other times, hackers may rely on one of the attack methods in this identity management blog article.

2019 Could Be the “Worst Year” For Data Breaches – Can New IAM Trends Help?