Skip to content

Identity and Access Management (IAM)

What is Identity and Access Management (IAM)?

A framework of policies, processes, and technologies for managing digital identities and controlling user access to critical information within an organisation. IAM ensures the right individuals have appropriate access at the right times.

Information Security

Terms that appear alongside identity and access management (iam)

Each of these is named in at least one of the same controls as identity and access management (iam). The number is how many controls name both.

Frameworks that govern identity and access management (iam)

ISO 27001:2022View framework →NIST SP 800-53 Rev 5View framework →

What the standards actually require on identity and access management (iam)

Requirements naming identity and access management (iam) across 4 standards, quoted from the control text.

ITU-T X.805 - Security Architecture for End-to-End Communications1 control

Security Dimension 1 Access Control per X.805 Clause 6.1: Access Control protects against unauthorized use of network resources. Access Control ensures that only authorized personnel or devices are allowed access to network elements + stored information + info...

X805-Dim1-Access-Control-RBAC-Authorization-Resources-Network-Elements-Services-Applications · ITU-T X.805 Security Dimension 1 - Access Control + Role-Based Access Control (RBAC) + Authorization + Resources + Network Elements + Services + Applications + Access Limitations + Authorized Personnel + Discretionary + Mandatory Access Control →
Japan FSA Cybersecurity Guidelines for Financial Institutions1 control

Identity and Access Management (IAM) is a critical control area per FSA Cybersecurity Guidelines + intersects with FISC Security Guidelines + Japan Banking Customer Authentication Standards + APPI access control.

JP-FSA-CYB-Identity-Access-Management-Privileged-Access-MFA-Zero-Trust-Just-In-Time-Banking-Customer-Authentication · Japan FSA Cybersecurity Identity and Access Management + Privileged Access + MFA + Zero Trust + Just-In-Time + Banking Customer Authentication + Risk-Based Authentication + Out-of-Band + Biometric + FIDO2 + Internet Banking Security →
Lloyd's Minimum Standards - Cyber Security1 control

Lloyds MS11.4 Access Control and Privileged Access Management - identity and access management (IAM) per industry best practice (ISO 27001 A.9 + NIST SP 800-53 AC family) + role-based access control (RBAC) + least privilege + segregation of duties + identity l...

LLOYDS-MS11-Access-Control-Privileged-MFA-Vulnerability-Patch-Management-MS11-4-5-PRA-Senior-Managers-Regime · Lloyds MS11 Access Control + Privileged + MFA + Vulnerability + Patch + MS11.4-5 →
MTCS (Singapore)1 control

Implement Asset Management + Identity and Access Management + Cryptography per MTCS SS 584. Asset Management (ISO 27001 Annex A.8 alignment) - asset inventory (hardware + software + data + virtual + container + serverless) + asset classification + asset owners...

MTCS-Asset-IAM-Cryptography-Multi-Tier-Asset-Inventory-RBAC-MFA-PAM-FIPS-HSM-Quantum-Safe · MTCS Asset Mgmt + IAM + Cryptography + Asset Inventory + RBAC + MFA + PAM + FIPS + HSM + Quantum-Safe →

Questions people ask about identity and access management (iam)

What is Identity and Access Management (IAM)?
A framework of policies, processes, and technologies for managing digital identities and controlling user access to critical information within an organisation. IAM ensures the right individuals have appropriate access at the right times.
Why is Identity and Access Management (IAM) important for compliance?
Identity and Access Management (IAM) is a key concept in Information Security. Understanding identity and access management (iam) helps organizations meet regulatory requirements, reduce risk, and demonstrate due diligence during audits. Our compliance platform maps 686 frameworks with 311K cross-framework control mappings.
Which compliance frameworks address Identity and Access Management (IAM)?
Identity and Access Management (IAM) appears in the requirement text of ITU-T X.805 - Security Architecture for End-to-End Communications, Japan FSA Cybersecurity Guidelines for Financial Institutions, Lloyd's Minimum Standards - Cyber Security, MTCS (Singapore). Across these standards we have identified 4 controls that name it directly, each linked to the control text on the compliance platform.
Where can I learn more about Identity and Access Management (IAM)?
Explore our compliance framework pages to see how identity and access management (iam) applies across different standards and regulations. Our implementation guides provide step-by-step guidance, and the compliance platform offers AI-powered analysis of how this concept maps across 686 frameworks.

See how Identity and Access Management (IAM) applies across compliance frameworks

Our platform maps 686 frameworks with 311K cross-framework control mappings. Explore how this concept is addressed across standards.

Explore on Platform
Written and maintained by Gerard Blokdyk, The Art of Service.