Identity Security
Identity security is the practice of protecting digital identities and their entitlements across an organisation, bringing together identity and access management, privileged access management and identity governance.
What is Identity Security?
Definition
Identity Security is the practice of protecting digital identities and the entitlements attached to them, bringing identity and access management, privileged access management and identity governance under one objective. The reason for treating them together is practical: an attacker does not care which product owns an account, only that it exists, still works, and carries more rights than anyone remembers granting. In cybersecurity terms it asks a different question from access management — not who may log in, but which identities and permissions in this organisation are currently exploitable.
Role in cybersecurity
Identity Security plays an important role in building organizational resilience against cyber threats. Implementing appropriate mechanisms in this area is required by regulations such as NIS2, DORA and ISO 27001.