Identity and Access Management
What is Identity and Access Management?
A framework of policies, processes, and technologies for managing digital identities and controlling user access to organizational resources.
Terms that appear alongside identity and access management
Each of these is named in at least one of the same controls as identity and access management. The number is how many controls name both.
- access management 25 shared controls
- authentication 18 shared controls
- multi factor authentication 15 shared controls
- nist 10 shared controls
- access control 10 shared controls
- privileged access management 9 shared controls
- audit 8 shared controls
- least privilege 7 shared controls
Frameworks that govern identity and access management
What the standards actually require on identity and access management
Requirements naming identity and access management across 6 standards, quoted from the control text.
Management implements identity and access management across people, processes and technology to authenticate users and grant or deny access to data and system resources, considers enhanced authentication especially for privileged access, addresses the access c...
ffiec-it-examination-handbook::AIO-VI.A.3 · VI.A.3 Identity and Access Management (Architecture, Infrastructure, and Operations) →Cybersecurity requirements for identity and access management are identified, documented and approved.
saudi-nca-ecc::2-2-1 · 2-2-1 Identity and access management requirements defined and approved →Detect identity and access threats by monitoring user and application sign-in and access anomalies, alerting on patterns such as excessive failed logins and deprecated accounts.
ASBv3-LT-2 · Enable threat detection for identity and access management →Ensures that users and IT components can reach only the IT resources and information they need for their work and are authorised for, and that unauthorised users and components are denied access, through the requirements with which institutions build a secure...
bsi-it-grundschutz::ORP.4 · ORP.4 Identitäts- und Berechtigungsmanagement (Identity and Access Management) →Keep approved procedures and policies for IAM (identity and access management), put them into effect, and review them at least annually.
CCM-IAM-01 · Identity and Access Management Policy and Procedures →Keep approved, communicated and enforced policies and procedures governing identity and access management, put into practice, and keep them reviewed every year and again whenever a significant change occurs.
cloud-security-alliance-cloud-controls-matrix-ccm-v4-1::IAM-01 · Identity and Access Management Policy and Procedures →Questions people ask about identity and access management
What is Identity and Access Management?
Why is Identity and Access Management important for compliance?
Which compliance frameworks address Identity and Access Management?
Where can I learn more about Identity and Access Management?
See how Identity and Access Management applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.