Cloud 101CircleEventsBlog

Download Publication

Zero Trust Principles and Guidance for Identity and Access Management (IAM)
Zero Trust Principles and Guidance for Identity and Access Management (IAM)
Who it's for:
  • Technology Providers
  • Technical Directors
  • CISOs, CTOs, CIOs

Zero Trust Principles and Guidance for Identity and Access Management (IAM)

Identity and the ability to consume information about that identity as well as other Zero Trust (ZT) signals (additional attributes about an identity), is one of the key principles of zero trust architecture. A ZT approach aims to reduce the success of cyber-attacks and data breaches through risk-based access requirements, that is, by requiring authentication and authorization prior to granting access to resources (data and/or systems).

In order to meet this requirement, it is important to look at both existing and new identity, access management, and cloud solutions with a ZT lens.

ZT is a technology-agnostic guidance framework to bring controls closer to the asset being protected (the protect surface). From an identity and access management perspective, this has the potential to significantly increase the richness of the risk-based decision about granting access and eliminate the granting of access based on the binary trust of a single access control method.
Download this Resource

Bookmark
Share
Related resources
How to Design a Secure Serverless Architecture
How to Design a Secure Serverless Architecture
Data Loss Prevention in Healthcare
Data Loss Prevention in Healthcare
Machine Identity in Cybersecurity and IAM
Machine Identity in Cybersecurity and IAM
Natural Disasters: A Perfect Storm for Data Breaches
Natural Disasters: A Perfect Storm for Data Breaches
Published: 12/11/2023
Why Cloud-Forward Tech Teams Need to Abandon Traditional IAM and PAM
Why Cloud-Forward Tech Teams Need to Abandon Traditional IAM and PAM
Published: 12/11/2023
Compromising Identity Provider Federation
Compromising Identity Provider Federation
Published: 12/08/2023
11 Attacks in 13 Months: The New Generation of Supply Chain Attacks
11 Attacks in 13 Months: The New Generation of Supply Chain Attacks
Published: 12/06/2023

Acknowledgements

Shruti Kulkarni
Shruti Kulkarni
Cyber Security Architect at 6point6

Shruti Kulkarni

Cyber Security Architect at 6point6

I am a security professional with experience across various domains of security. I work in defining organisation’s security strategy, security architecture and security practices. Translating business objectives and risk management strategies into specific security processes enabled by security technologies and services. I work on gap analysis, design, implementation and...

Read more

Alon Nachmany Headshot Missing
Alon Nachmany

Alon Nachmany

This person does not have a biography listed with CSA.

Jonathan Flack Headshot Missing
Jonathan Flack

Jonathan Flack

This person does not have a biography listed with CSA.

Erik Johnson
Erik Johnson
Cloud Security Specialist & Senior Research Analyst

Erik Johnson

Cloud Security Specialist & Senior Research Analyst

Worked for the Federal Reserve for many years and volunteered with the CSA with a focus on CCM/CAIQ V4, specifically the STA domain, and developing a comprehensive framework and guidance for defining and managing the cloud shared security responsibility model (SSRM).

I recently retired from the Federal Reserve and am now consulting with the CSA as a Senior Research Analyst with a focus on Zero Trust and Financial Services.

Linke...

Read more

Paul Simmonds
Paul Simmonds
CEO at Global Identity Foundation & Board Member of CSA UK Chapter

Paul Simmonds

CEO at Global Identity Foundation & Board Member of CSA UK Chapter

Paul is the CEO of the Global Identity Foundation and formerly the global CISO of AstraZeneca, ICI and prior to that Motorola Cellular Infrastructure. He is twice listed as one of Network World’s “most powerful people in networking”. He is a director of the Cloud Security Alliance (Europe), co-founded the Jericho Forum, and sits on the advisory boards of a number of global tech companies.

Read more

Are you a research volunteer? Request to have your profile displayed on the website here.

Interested in helping develop research with CSA?

Related Certificates & Training