[Instructor] In this lesson, we're going to discuss
identity and access management.
Identity and access management, also known as IAM
is a critical component of any enterprise security plan
as it is linked to both the cybersecurity
and productivity of an organization.
IAM refers to the systems and processes
used to manage access to information
and the organization to ensure
that the right individuals have access
to the right resources
at the right times for the right reasons.
Identity and access management evolves
around the four main processes of identification,
authentication, authorization, and accounting.
First, we have identification.
Identification is the process where a user
claims an identity to a system.
Typically using a unique identifier
like a username or an email.
For example, when you log into any computer,
the user will typically enter their username
as identification by either creating an account
or an ID that uniquely represents that user,
device or process on the network.
Identification also ensures
that your users are considered legitimate by the system.
For example, when operating an e-commerce website,
you might need to ensure that the billing
and delivery addresses match what the user has stated
that they are, so that the user does not try to use
a fraudulent payment method.
Next up, we have authentication.
Authentication is the process of verifying
the identity of a user, device or system,
and this often involves validating the credentials provided
by the user against a database of authorized users.
For example, after entering a username,
a user will be prompted to enter their password
or other form of authentication
like biometric characteristics or the combination
of multifactors during the authentication process.
Third, we have authorization.
Now, once the user's authenticated,
the authorization process determines what permissions
or levels of access the user has.
For example, an employee in a human resources department
should have access to personnel files while an employee
in finance might only have access to financial data.
Fourth, we have accounting. Accounting, also known
as auditing is a process of tracking
and recording these user activities.
Accounting can include logging when a user is logging in
and out, what actions they perform while they're
using the system, and any changes they might make
on the system or the network.
Accounting helps organizations to detect potential security
incidents, find vulnerabilities, and provide evidence
in the case of a security breach.
Now that we have the understanding of the basic four steps
of the identity and access management process
of identification, authentication, authorization,
and accounting, we need to look at some other IAM concepts
including the provisioning and deprovisioning
of user accounts, identity proofing, interoperability
and attestation.
First up, let's discuss provisioning and deprovisioning
of user accounts.
Provisioning is a process of creating new user accounts,
assigning them with appropriate permissions
and providing users with access to system.
For example, if you just hired a new employee
at the organization, that employee's account
must be created and provisioned with an email account,
access to the company's internal network and other systems
that they need to perform their job functions.
Deprovisioning, on the other hand, is the process
of removing an individual's access rights
when they no longer need them
such as when the employee leaves the company.
This is crucial to prevent unauthorized access
to sensitive information or to prevent revenge
by an ex-employee who has now turned
into an insider threat against your company.
Second, we have identity proofing.
Identity proofing is a process of verifying the identity
of a user before the account is created.
This can involve checking the user's personal details
against a trusted source of data
or asking the user to provide some form of identification
like a driver's license or a passport.
Third, we need to cover interoperability.
Interoperability refers to the ability of different systems,
devices and applications to work together
and share information.
When it comes to identity and access management,
interoperability can involve using standards like SAML
or OpenID Connect to allow for secure, seamless
authentication and authorization between different systems.
Fourth and finally, we have attestation.
in a world of identity and access management,
attestation is a process of validating that user accounts
and access rights are correct and up-to-date.
This typically involves regular reviews
and audits of user accounts and their access rights
to ensure that users have the minimal access
that is necessary to complete their role or job functions.
So remember, identity and access management
is a critical component of information security
and an essential for managing risk related to the use,
processing, storage and transmission of information.
Identity and access management involves
four main processes: identification, authentication,
authorization, and accounting.
Other important IAM concepts include provisioning
and deprovisioning of user accounts,
identity proofing, interoperability, and attestation.
Each of these elements plays a crucial role
in ensuring that only the right individuals
have access to your organization's resources.