{"id":5246,"date":"2021-02-16T17:55:37","date_gmt":"2021-02-16T21:55:37","guid":{"rendered":"https:\/\/solutionsreview.com\/identity-management\/?p=5246"},"modified":"2021-02-16T17:55:37","modified_gmt":"2021-02-16T21:55:37","slug":"gaining-trust-in-your-identity-management-the-secret-weapon-of-great-infosec","status":"publish","type":"post","link":"https:\/\/solutionsreview.com\/identity-management\/gaining-trust-in-your-identity-management-the-secret-weapon-of-great-infosec\/","title":{"rendered":"Gaining Trust in Your Identity Management: The Secret Weapon of Great InfoSec"},"content":{"rendered":"<p><img loading=\"lazy\" decoding=\"async\" class=\"alignleft size-full wp-image-4622\" src=\"https:\/\/solutionsreview.com\/identity-management\/files\/2019\/11\/Cybersecurity-Better-MOD-.jpg\" alt=\"Gaining Trust in Your Identity Management: The Secret Weapon of Great InfoSec\" width=\"800\" height=\"400\" srcset=\"https:\/\/solutionsreview.com\/identity-management\/files\/2019\/11\/Cybersecurity-Better-MOD-.jpg 800w, https:\/\/solutionsreview.com\/identity-management\/files\/2019\/11\/Cybersecurity-Better-MOD--300x150.jpg 300w, https:\/\/solutionsreview.com\/identity-management\/files\/2019\/11\/Cybersecurity-Better-MOD--768x384.jpg 768w, https:\/\/solutionsreview.com\/identity-management\/files\/2019\/11\/Cybersecurity-Better-MOD--540x270.jpg 540w, https:\/\/solutionsreview.com\/identity-management\/files\/2019\/11\/Cybersecurity-Better-MOD--162x81.jpg 162w, https:\/\/solutionsreview.com\/identity-management\/files\/2019\/11\/Cybersecurity-Better-MOD--360x180.jpg 360w\" sizes=\"(max-width: 800px) 100vw, 800px\" \/><\/p>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">How important is gaining trust in your <a href=\"https:\/\/solutionsreview.com\/identity-management\/get-a-free-identity-and-access-management-software-solutions-buyers-guide\/\" target=\"_blank\" rel=\"noopener noreferrer\">identity management<\/a> solution? Why do you need employee trust for optimal identity management? Can trust help deflect or prevent insider threats?\u00a0<\/span><\/p>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">Some IT decision-makers believe that by just buying the right solution, you can solve all of the security challenges facing businesses. This line of thinking is a holdover from the earlier period of \u201cset-it-and-forget-it\u201d cybersecurity. Unfortunately, it no longer holds true today. First, you need to ensure that you deploy your cybersecurity and identity security solutions correctly for best effectiveness.\u00a0<\/span><\/p>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">Second, you need a certain amount of buy-in and trust from the largest attack vector in your business IT environment: your employees. In fact, you can think of gaining trust in your identity management as an integration problem, akin to integrating with other solutions and tools.\u00a0<\/span><\/p>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">Here\u2019s why this matters.\u00a0<\/span><\/p>\n<br \/>Widget not in any sidebars<br \/>\n<h2 style=\"text-align: justify\"><b>Gaining Trust in Your Identity Management<\/b><\/h2>\n<h3 style=\"text-align: justify\"><b>How Employees Can Leave Your Vulnerable<\/b><\/h3>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">What do solutions, authentication portals, workflows, databases, and applications all have in common?\u00a0<\/span><\/p>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">At some point, a human is going to interact with them. And that makes them vulnerable.\u00a0<\/span><\/p>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">Humans could for example create new databases with no authentication protections whatsoever (which often leads to data leaks down the line). Alternatively, they could share their credentials with other employees, increasing the likelihood of an insider threat. Worse, employees may protect your valuable data with incredibly weak passwords hackers can easily guess or crack.\u00a0<\/span><\/p>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">Hackers learned over time how to exploit the worst instincts of ordinary employees to cause cyber-attacks. Through phishing and spear-phishing attacks, they can convince employees to simply hand over valuable data or their credentials. Through other threat probing attacks, they can find the vulnerabilities left behind through careless actions.\u00a0<\/span><\/p>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">Every behavior your employees engage in can have a ripple effect across your entire enterprise, changing your cybersecurity position.\u00a0<\/span><\/p>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">So what can you do? Use identity management as an incentive to change behaviors, thus gaining trust in your identity management.\u00a0<\/span><\/p>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">Here\u2019s how.\u00a0<\/span><\/p>\n<h3 style=\"text-align: justify\"><b>Stop Weak Passwords and Password Sharing<\/b><\/h3>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">First, you need to use identity management to encourage employees to embrace stronger passwords and discourage password sharing.\u00a0<\/span><\/p>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">Part of the problem with passwords is that employees need to remember so many accounts to complete just their basic workflows. To maintain the speed necessitated by modern businesses, they pick efficiency over security, and thus weak and repeated passwords.\u00a0<\/span><\/p>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">Incorporating a password vault into your identity management encourages employees to pick unique and strong passwords because the fear of forgetting is removed. Thus hackers have less porous digital perimeters to exploit.\u00a0<\/span><\/p>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">Additionally, employees may share credentials and other permissions with each other. Usually, this isn\u2019t malicious, but instead necessary for completing special projects or workflows. However, it can leave accounts more open to insider threats over time, or cause access creep to create whale targets for hackers.\u00a0<\/span><\/p>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">This is where <a href=\"https:\/\/solutionsreview.com\/identity-management\/identity-governance-and-administration-buyers-guide\/\" target=\"_blank\" rel=\"noopener noreferrer\">identity governance and administration (IGA)<\/a> steps in. It can help assign special, temporary permissions to accounts that automatically revoke after a set period. Additionally, it monitors accounts for unnecessary permissions to revoke them and sets each role in the IT environment with set permissions, so employees have what they need and no more.\u00a0<\/span><\/p>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">What matters most is utilizing these tools in conjunction with training and education encouraging employees to work with, not against these tools and capabilities.<\/span><\/p>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">Remember, disgruntled employees or employees confused by your identity management tools may choose to develop workarounds. In turn, these workarounds become hard-to-detect but blatant openings for external threat actors. Gaining trust in your identity management isn&#8217;t an idle activity. It\u2019s key to your survival as a business.\u00a0<\/span><\/p>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">You can learn more in our <a href=\"https:\/\/solutionsreview.com\/identity-management\/get-a-free-identity-and-access-management-software-solutions-buyers-guide\/\" target=\"_blank\" rel=\"noopener noreferrer\">Identity Management Buyer\u2019s Guide<\/a>.\u00a0<\/span><\/p>\n<br \/>Widget not in any sidebars<br \/>\n","protected":false},"excerpt":{"rendered":"<p>How important is gaining trust in your identity management solution? Why do you need employee trust for optimal identity management? Can trust help deflect or prevent insider threats?\u00a0 Some IT decision-makers believe that by just buying the right solution, you can solve all of the security challenges facing businesses. This line of thinking is a [&hellip;]<\/p>\n","protected":false},"author":41,"featured_media":4622,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[5,1],"tags":[142,125,16,1204,76,425,286,397,188,70],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v23.5 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Gaining Trust in Your Identity Management: The Secret Weapon of InfoSec<\/title>\n<meta name=\"description\" content=\"How important is gaining trust in your identity management solution? Why do you need employee trust for optimal identity management?\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/solutionsreview.com\/identity-management\/gaining-trust-in-your-identity-management-the-secret-weapon-of-great-infosec\/\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Ben Canner\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/gaining-trust-in-your-identity-management-the-secret-weapon-of-great-infosec\/\",\"url\":\"https:\/\/solutionsreview.com\/identity-management\/gaining-trust-in-your-identity-management-the-secret-weapon-of-great-infosec\/\",\"name\":\"Gaining Trust in Your Identity Management: The Secret Weapon of InfoSec\",\"isPartOf\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/gaining-trust-in-your-identity-management-the-secret-weapon-of-great-infosec\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/gaining-trust-in-your-identity-management-the-secret-weapon-of-great-infosec\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/solutionsreview.com\/identity-management\/files\/2019\/11\/Cybersecurity-Better-MOD-.jpg\",\"datePublished\":\"2021-02-16T21:55:37+00:00\",\"dateModified\":\"2021-02-16T21:55:37+00:00\",\"author\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541\"},\"description\":\"How important is gaining trust in your identity management solution? Why do you need employee trust for optimal identity management?\",\"breadcrumb\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/gaining-trust-in-your-identity-management-the-secret-weapon-of-great-infosec\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/solutionsreview.com\/identity-management\/gaining-trust-in-your-identity-management-the-secret-weapon-of-great-infosec\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/gaining-trust-in-your-identity-management-the-secret-weapon-of-great-infosec\/#primaryimage\",\"url\":\"https:\/\/solutionsreview.com\/identity-management\/files\/2019\/11\/Cybersecurity-Better-MOD-.jpg\",\"contentUrl\":\"https:\/\/solutionsreview.com\/identity-management\/files\/2019\/11\/Cybersecurity-Better-MOD-.jpg\",\"width\":800,\"height\":400,\"caption\":\"Why Identity Governance Takes on New Importance in Remote Workplaces\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/gaining-trust-in-your-identity-management-the-secret-weapon-of-great-infosec\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/solutionsreview.com\/identity-management\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Gaining Trust in Your Identity Management: The Secret Weapon of Great InfoSec\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#website\",\"url\":\"https:\/\/solutionsreview.com\/identity-management\/\",\"name\":\"Identity and Access Management Solutions | Solutions Review\",\"description\":\"Evaluating Enterprise IAM Software, Identity Governance &amp; Access Control Tools.\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/solutionsreview.com\/identity-management\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541\",\"name\":\"Ben Canner\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g\",\"caption\":\"Ben Canner\"},\"description\":\"Ben Canner is an enterprise technology writer and analyst covering Identity Management, SIEM, Endpoint Protection, and Cybersecurity writ large. He holds a Bachelor of Arts Degree in English from Clark University in Worcester, MA. He previously worked as a corporate blogger and ghost writer. You can reach him via Twitter and LinkedIn.\",\"url\":\"https:\/\/solutionsreview.com\/identity-management\/author\/bcanner\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Gaining Trust in Your Identity Management: The Secret Weapon of InfoSec","description":"How important is gaining trust in your identity management solution? Why do you need employee trust for optimal identity management?","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/solutionsreview.com\/identity-management\/gaining-trust-in-your-identity-management-the-secret-weapon-of-great-infosec\/","twitter_misc":{"Written by":"Ben Canner","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/solutionsreview.com\/identity-management\/gaining-trust-in-your-identity-management-the-secret-weapon-of-great-infosec\/","url":"https:\/\/solutionsreview.com\/identity-management\/gaining-trust-in-your-identity-management-the-secret-weapon-of-great-infosec\/","name":"Gaining Trust in Your Identity Management: The Secret Weapon of InfoSec","isPartOf":{"@id":"https:\/\/solutionsreview.com\/identity-management\/#website"},"primaryImageOfPage":{"@id":"https:\/\/solutionsreview.com\/identity-management\/gaining-trust-in-your-identity-management-the-secret-weapon-of-great-infosec\/#primaryimage"},"image":{"@id":"https:\/\/solutionsreview.com\/identity-management\/gaining-trust-in-your-identity-management-the-secret-weapon-of-great-infosec\/#primaryimage"},"thumbnailUrl":"https:\/\/solutionsreview.com\/identity-management\/files\/2019\/11\/Cybersecurity-Better-MOD-.jpg","datePublished":"2021-02-16T21:55:37+00:00","dateModified":"2021-02-16T21:55:37+00:00","author":{"@id":"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541"},"description":"How important is gaining trust in your identity management solution? Why do you need employee trust for optimal identity management?","breadcrumb":{"@id":"https:\/\/solutionsreview.com\/identity-management\/gaining-trust-in-your-identity-management-the-secret-weapon-of-great-infosec\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/solutionsreview.com\/identity-management\/gaining-trust-in-your-identity-management-the-secret-weapon-of-great-infosec\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/solutionsreview.com\/identity-management\/gaining-trust-in-your-identity-management-the-secret-weapon-of-great-infosec\/#primaryimage","url":"https:\/\/solutionsreview.com\/identity-management\/files\/2019\/11\/Cybersecurity-Better-MOD-.jpg","contentUrl":"https:\/\/solutionsreview.com\/identity-management\/files\/2019\/11\/Cybersecurity-Better-MOD-.jpg","width":800,"height":400,"caption":"Why Identity Governance Takes on New Importance in Remote Workplaces"},{"@type":"BreadcrumbList","@id":"https:\/\/solutionsreview.com\/identity-management\/gaining-trust-in-your-identity-management-the-secret-weapon-of-great-infosec\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/solutionsreview.com\/identity-management\/"},{"@type":"ListItem","position":2,"name":"Gaining Trust in Your Identity Management: The Secret Weapon of Great InfoSec"}]},{"@type":"WebSite","@id":"https:\/\/solutionsreview.com\/identity-management\/#website","url":"https:\/\/solutionsreview.com\/identity-management\/","name":"Identity and Access Management Solutions | Solutions Review","description":"Evaluating Enterprise IAM Software, Identity Governance &amp; Access Control Tools.","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/solutionsreview.com\/identity-management\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541","name":"Ben Canner","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g","caption":"Ben Canner"},"description":"Ben Canner is an enterprise technology writer and analyst covering Identity Management, SIEM, Endpoint Protection, and Cybersecurity writ large. He holds a Bachelor of Arts Degree in English from Clark University in Worcester, MA. He previously worked as a corporate blogger and ghost writer. You can reach him via Twitter and LinkedIn.","url":"https:\/\/solutionsreview.com\/identity-management\/author\/bcanner\/"}]}},"_links":{"self":[{"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/posts\/5246"}],"collection":[{"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/users\/41"}],"replies":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/comments?post=5246"}],"version-history":[{"count":0,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/posts\/5246\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/media\/4622"}],"wp:attachment":[{"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/media?parent=5246"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/categories?post=5246"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/tags?post=5246"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}