Identity and Access Management (IAM)
The framework of policies and technologies used to ensure the right individuals have the right access to the right resources.
Identity and access management (IAM) is the framework of policies, processes, and technologies an organization uses to ensure the right individuals have the right access to the right resources at the right time, and nothing more. It covers everything from creating and managing user accounts to authenticating logins and enforcing permissions.
A mature IAM program typically combines single sign-on, multi-factor authentication↗, and the principle of least privilege↗ to reduce risk while keeping access convenient for legitimate users. Weak IAM practices are a leading cause of breaches, since excessive or poorly managed access gives attackers more to exploit↗.