Practical Advice for Reducing Identity Security Risks
Summary
The article warns that unmanaged privileged accounts and identity sprawl increase breach and lateral-movement risk, and recommends least privilege, continuous reviews, centralized visibility, and automated mitigation.
Key points
- The article cites CrowdStrike research stating that 80% of modern cyberattacks are identity-driven.
- Unmanaged or overprivileged accounts and weak oversight can expand the risk of compromise, lateral movement, and privilege escalation.
- Cloud migration, acquisitions, contractors, and organizational growth can outpace identity governance.
- Apply least privilege continuously to limit standing privileges and give accounts only the access they need.
- Use centralized visibility across on-premises, cloud, and hybrid identity environments to identify and prioritize high-risk accounts.
- Automate policy enforcement and review entitlements continuously to improve oversight and reduce identity risk.
Article Details
- Defense Focus
- Reduce identity compromise exposure through least privilege, continuous identity governance, and visibility into privileged accounts across on-premises, cloud, and hybrid environments.
- Detection Methods
- Continuously review account entitlements to identify excessive access and governance gaps that periodic audits may miss.
- Assess the identity estate for anomalies and prioritize accounts with high privilege and high exposure for remediation.
- Centralize identity visibility and control to support continuous oversight.
- Data Sources
- Identity account inventories
- Account entitlements and privilege assignments
- Defensive Actions
- Ensure each identity has only the access needed at the appropriate time and for the appropriate reason.
- Automate consistent implementation and enforcement of access policies.
- Reduce or eliminate standing privileges.
- Remediate high-risk, highly privileged, and highly exposed accounts first.
- Maintain continuous entitlement reviews rather than relying solely on manual reviews or periodic audits.
- Continuously adapt the least-privilege framework to changing security and regulatory requirements.
People
Vendors
MicrosoftAbout the Author: Andras Fekete is the Product Manager for Active Roles at One Identity. He is responsible for formulating and driving product strategy within identity security and governance for Microsoft environments.One IdentityAbout the Author: Andras Fekete is the Product Manager for Active Roles at One Identity. He is responsible for formulating and driving product strategy within identity security and governance for Microsoft environments.
Products
Active DirectoryThis substantial volume is driven by the widespread use of well-known directories such as Active Directory, and the vulnerabilities associated with compromised privileged accounts that are overprivileged or unmanaged,Active RolesAbout the Author: Andras Fekete is the Product Manager for Active Roles at One Identity. He is responsible for formulating and driving product strategy within identity security and governance for Microsoft environments.Microsoft Entra IDproducts in his portfolio. His focus is on modernizing identity governance across Active Directory, Microsoft Entra ID, and hybrid Microsoft environments, with particular focus on cloud transformation, automation, and