Identity Attack Vectors: Implementing an Effective Identity and Access Management Solution

© Morey J. Haber, Darran Rolls 2020

M. J. Haber, D. RollsIdentity Attack Vectorshttps://doi.org/10.1007/978-1-4842-5165-2_8

8. Meeting Regulatory Compliance Mandates

Morey J. Haber¹  and Darran Rolls²

(1)

ORLANDO, FL, USA

(2)

AUSTIN, TX, USA

 

Organizations must approach regulatory compliance requirements with sustainability in mind if they are to manage their risk effectively. This is a security-driven compliance approach, and if we are compliant, we are secure. Security must be sustained in order to be secure. If you do nothing more than what’s necessary to pass a SOX or FISMA audit, you are not likely to address your logical access risks or security requirements. Effectively managing user access risk requires meaningful diligence above and beyond “checkbox” ...