1 1 00:00:00,180 --> 00:00:01,500 In this section of the course, 2 2 00:00:01,500 --> 00:00:04,680 we're going to cover identity and access management solutions. 3 3 00:00:04,680 --> 00:00:06,480 Now, as we go through this section of the course, 4 4 00:00:06,480 --> 00:00:08,460 we're going to go all the way back to domain one, 5 5 00:00:08,460 --> 00:00:12,000 security operations by focusing on objective 1.1. 6 6 00:00:12,000 --> 00:00:13,590 Objective 1.1 states 7 7 00:00:13,590 --> 00:00:15,840 that you must be able to explain the importance of system 8 8 00:00:15,840 --> 00:00:19,050 and network architecture concepts in security operations 9 9 00:00:19,050 --> 00:00:21,240 but our focus is going to be on identity 10 10 00:00:21,240 --> 00:00:23,310 and access management concepts that are covered 11 11 00:00:23,310 --> 00:00:25,590 underneath objective 1.1. 12 12 00:00:25,590 --> 00:00:27,180 Now, as we move through this section, 13 13 00:00:27,180 --> 00:00:29,010 we're going to start out by discussing the concepts 14 14 00:00:29,010 --> 00:00:32,520 of identity and access management, which is known as IAM. 15 15 00:00:32,520 --> 00:00:35,040 Next, we're going to cover the use of password policies 16 16 00:00:35,040 --> 00:00:37,680 for the security of your systems and networks. 17 17 00:00:37,680 --> 00:00:41,430 Then we'll talk about SSO, which is known as single sign-on 18 18 00:00:41,430 --> 00:00:44,490 and MFA, which is known as multifactor authentication 19 19 00:00:44,490 --> 00:00:47,460 and how both of these can supplement our password policies 20 20 00:00:47,460 --> 00:00:49,140 in order for us to increase the security 21 21 00:00:49,140 --> 00:00:51,810 of our networks and its associated systems. 22 22 00:00:51,810 --> 00:00:53,250 Next, we're going to start out 23 23 00:00:53,250 --> 00:00:55,710 by discussing the concept of certificate management 24 24 00:00:55,710 --> 00:00:57,180 and then we'll jump into the concept 25 25 00:00:57,180 --> 00:01:01,620 of federation within an SSO or single sign-on architecture. 26 26 00:01:01,620 --> 00:01:03,870 Next, we're going to discuss privilege management 27 27 00:01:03,870 --> 00:01:07,020 with a focus on the use of RBAC, ABAC, and MAC 28 28 00:01:07,020 --> 00:01:09,270 as well as the use of manual reviews. 29 29 00:01:09,270 --> 00:01:10,890 Then we're going to begin our coverage 30 30 00:01:10,890 --> 00:01:13,470 of IAM auditing, monitoring, logging 31 31 00:01:13,470 --> 00:01:15,600 and how we can perform all these different functions 32 32 00:01:15,600 --> 00:01:18,450 and features inside of our organizations. 33 33 00:01:18,450 --> 00:01:20,550 Next, we're going to cover the use of policies, 34 34 00:01:20,550 --> 00:01:22,380 such as the acceptable use policies 35 35 00:01:22,380 --> 00:01:24,000 to help enforce the proper conduct 36 36 00:01:24,000 --> 00:01:26,220 and use of our systems and networks. 37 37 00:01:26,220 --> 00:01:28,740 After that, we're going to demonstrate how to conduct account 38 38 00:01:28,740 --> 00:01:30,600 and permission audits on a system. 39 39 00:01:30,600 --> 00:01:33,630 That way you can verify the correct IAM posture is occurring 40 40 00:01:33,630 --> 00:01:35,280 within your organization. 41 41 00:01:35,280 --> 00:01:37,290 And finally, we're going to take a short quiz 42 42 00:01:37,290 --> 00:01:38,970 to see what you learned during this section 43 43 00:01:38,970 --> 00:01:41,340 and we'll review each of those quiz questions fully 44 44 00:01:41,340 --> 00:01:42,173 to ensure you can explain 45 45 00:01:42,173 --> 00:01:43,860 why the right answers were correct. 46 46 00:01:43,860 --> 00:01:45,510 So let's go ahead and get started 47 47 00:01:45,510 --> 00:01:46,770 with our coverage of identity 48 48 00:01:46,770 --> 00:01:49,370 and access management in this section of the course.