Identity and Access Management

Identity and access management (IAM) is fundamental to information security. Controlling access to resources requires the ability to identify and validate the entities requesting access and to hold them accountable for the action they take. Entities in information systems can include users, systems, applications or processes. And IAM is comprised of four fundamental components namely identification, authentication, authorization and accountability (IAAA). Furthermore, controlling physical and logical access to assets typically starts with creating unique identities and providing entities with credentials.