Join IDSA
Join IDSA

Tag Archives: access management

  1. The State of Identity Governance in 2026: Why Boards Think Access Is Under Control When It Isn’t

    February 11th, 2026 by Paul Hunter | Posted in News, Perspective, Research |

    Tags: , , , ,

    In many organizations, identity governance appears healthy at the executive level. Provisioning SLAs are met. Access reviews complete on time. Audit findings are addressed. Yet identity-related failures continue to surface in breach investigations, audit reports, and post-incident reviews. The issue is not that identity governance processes are inactive. It is that boards are typically shown…

  2. Outnumbered and Underprotected: The Hidden Risk of Non-Human Identities

    October 2nd, 2025 by Paul Hunter | Posted in News, Perspective, Research |

    Tags: , , , , , , , , , , , ,

    Most security teams have focused their identity governance efforts on managing human access. You’ve got SSO in place. MFA is enforced. There’s a reasonably consistent process for onboarding and offboarding employees. You probably run access reviews on a quarterly basis and, if you’re further along, maybe you’ve deployed a PAM solution to protect privileged user…

  3. Identity Blind Spots on the Network Layer

    September 25th, 2025 by Paul Hunter | Posted in Perspective, Research, Security Outcomes |

    Tags: , , , , , , , , , , , ,

    Webinar Title: Zero Trust Falls Short Without Network Identity: Lessons from Salt Typhoon Date: October 1, 2025 Registration: Save your spot here Abstract Identity for users, applications, servers, and cloud has matured. Network devices are often the exception. Shared device accounts, SSH key sprawl, limited per-command authorization, and weak session evidence create a gap that…

  4. Salt Typhoon: How Network Admin Paths Became Attack Paths

    September 23rd, 2025 by Paul Hunter | Posted in News, Perspective, Security Outcomes |

    Tags: , , , , , , , , ,

    Webinar Title: Zero Trust Falls Short Without Network Identity: Lessons from Salt Typhoon Date: October 1, 2025 Registration: Save your spot here Abstract Salt Typhoon highlights how valid credentials and built in tools can turn network administration into an attacker highway. This post walks a likely attack chain in plain language and shows where identity…

  5. The Impact of Security Breaches on Educational Institutions

    June 11th, 2025 by Paul Hunter | Posted in Best Practices, Perspective |

    Tags: , , , ,

    This blog was originally published by Bravura here.   Educational institutions oversee hundreds or thousands of students and faculty members daily. Therefore, it’s no surprise they deal with large volumes of valuable data, like: Student and educator login information. Home addresses. Birthdays. Full names. Social security numbers. Credit card information and other financial records. Education…

Background

READY TO MAKE AN IMPACT?

Let's work together to help everyone become more secure.
Join the IDSA