Identity and Access Management
What is Identity and Access Management?
A framework of policies, processes, and technologies for managing digital identities and controlling user access to organizational resources.
Terms that appear alongside identity and access management
Each of these is named in at least one of the same controls as identity and access management. The number is how many controls name both.
- access management 25 shared controls
- authentication 18 shared controls
- multi factor authentication 15 shared controls
- nist 10 shared controls
- access control 10 shared controls
- privileged access management 9 shared controls
- audit 8 shared controls
- least privilege 7 shared controls
Frameworks that govern identity and access management
What the standards actually require on identity and access management
Requirements naming identity and access management across 6 standards, quoted from the control text.
Detect identity and access threats by monitoring user and application sign-in and access anomalies, alerting on patterns such as excessive failed logins and deprecated accounts.
ASBv3-LT-2 · Enable threat detection for identity and access management →User identities, access rights and authentication mechanisms shall be managed in a structured, documented and verifiable manner.
ORP.4 · Identity and Access Management →Keep approved identity and access management policies and procedures, put them into effect, and review them at least annually.
CCM-IAM-01 · Identity and Access Management Policy and Procedures →Institution implements identity lifecycle, authentication, and authorization controls aligned with least privilege.
IS-IV.B.1 · Identity and Access Management Program →ISMAP Identity and Access Management requires comprehensive IAM controls covering customer + CSP + administrative + service-to-service identities.
ISMAP-Identity-Access-MFA-Privileged-Federation-SSO-API-Tokens-CloudIAM-PIV-PASETO · ISMAP Identity and Access Management - Cloud IAM + Multi-Factor Authentication + Privileged Access + Federation/SSO + API Security + Access Tokens + My Number Card Integration + Government IAM →Identity and Access Management (IAM) is a critical control area per FSA Cybersecurity Guidelines + intersects with FISC Security Guidelines + Japan Banking Customer Authentication Standards + APPI access control.
JP-FSA-CYB-Identity-Access-Management-Privileged-Access-MFA-Zero-Trust-Just-In-Time-Banking-Customer-Authentication · Japan FSA Cybersecurity Identity and Access Management + Privileged Access + MFA + Zero Trust + Just-In-Time + Banking Customer Authentication + Risk-Based Authentication + Out-of-Band + Biometric + FIDO2 + Internet Banking Security →Questions people ask about identity and access management
What is Identity and Access Management?
Why is Identity and Access Management important for compliance?
Which compliance frameworks address Identity and Access Management?
Where can I learn more about Identity and Access Management?
See how Identity and Access Management applies across compliance frameworks
Our platform maps 686 frameworks with 311K cross-framework control mappings. Explore how this concept is addressed across standards.