Coming October 25: PeerSpot Awards will be announced! Learn more
Rony_Sklar - PeerSpot reviewer
Community Manager at PeerSpot (formerly IT Central Station)
  • 5
  • 86

Why is identity and access management (IAM) so important in preventing data breaches?

Hi peers,

What role does IAM play in preventing data breaches? What are the risks associated with not using an IAM solution?

PeerSpot user
5 Answers
Ahmad Zuhdi - PeerSpot reviewer
Solution Specialist FWP at PT. SoftwareOne Indonesia
Real User
Top 5
19 May 21

Absolutely! IAM is so important to prevent a data breach. With IAM we can make sure only the right user can access the right DATA. If there is a privilege abuse or lateral movement action, IAM will inform us and we can take an action to investigate, block or prevent it.

Amimesh Anand - PeerSpot reviewer
Senior Associate at Cognizant
Real User
Top 5Leaderboard
17 May 21

There could be 2 types of action that can be taken to measure the data breach

1) Proactive, where management decides the policy and a team implements those policies to avoid a data breach. Like DlP, Firewall along with IDAM.

2) Passive: where you take action to avoid as much data loss you can. Here the management is mostly interested in who, from where and why tried to brach data. Documentation and announcement is an important role here.

Now coming to IDAM :

IDAM makes policies, where an admin has control to implement who, when and how will access your data and at what level.

IDAM also segregates the duties of each employee so that everyone has accountability for work done.

If we look at the access part, IDAM will ensure that only authorized people have access to your application including the level of access decided by an admin.

In short, IDAM is a solution to all the actions a user or employee can take on your data and how they can view your data. it will help you to clearly divide the threat and real user( either outsider or insider)

Real User
19 May 21

Since cybercrime is on the aggressive rise, and our organizations working practices have evolved from on-premise with some VPN to full remote workers - the security perimeter around physicals buildings with firewalls has moved down the list of importance. No the security perimeter is around your individual users, and the key foundation security elements are Identity & Access Management.  To determine and confirm a user is who they say they are! Identity & Access Management feeds into all other security products which are layered on top so it's critical to have one that addresses all your needs and is somewhat future proofed - as this landscape is constantly changing.

Couple of question to ask yourself - 

What is your current security landscape related to identity?

What are your greatest security concerns related to identity?

What are your top three desired improvement areas?



rtechenthusiast85 - PeerSpot reviewer
Search Engine Optimization Specialist at LoginRadius
Top 20
24 May 22

Identity and access management (IAM) is a cybersecurity framework with several features, including verifying that users are who they say they are and preventing hackers with compromised credentials from accessing your network.

How does IAM Helps Avoid Data Breaches?

->Reduces Password Issues
->Enhanced Security
->Use Multi-factor Authentication (MFA)
->Protect Against Unauthorized Bypass
->Automate User Provisioning, Deprovisioning, and Attestation

The risks of failing to implement an Identity and Access Management system:

->Problematic data security and difficult audits
->Too much data access
->Inefficient identity lifecycle management
->Taking risks insecurity doesn’t pay
->Decentralized Privileged Access Management
->Excessive Permissions
->Lack of Visibility
->Privileged Access

The most important thing to keep in mind is that customer IAM is all about the customer experience and trust. 

Today, this includes providing self-service data management and utilizing the additional consumer data provided by a CIAM platform. Only then will you be able to improve what you give customers at almost every stage of their journey.

Iana Davis  - PeerSpot reviewer
Chief of Staff & US Technology Alliances at ILANTUS Technologies
23 May 22

Over 70% of data breaches are caused by insiders. This means that IT users of an organization, or their accounts (after being compromised by hackers), are responsible for most data breaches.

This means that Identity centric security rather than network and perimeter-based security is now the most important kind of cybersecurity for organizations.

And the BYOD and work-from-home culture that is popular today also mean that IT users access company resources from outside the corporate network.

To prevent an insider data breach, individual accounts must be secure. This means strong password policies, frequent password resets, and using Single Sign-On to reduce password fatigue. It also means adaptive multifactor authentication is critical to improving security.

Finally, accounts should follow the principle of least privilege. This means that they ought to have only the access they require for their work at any given time. If the principle of least privilege is followed, compromised accounts only give limited access to the hacker.

Identity and Access Management provides solutions to all these challenges.

A good Converged IAM product, for example, will offer Single Sign-On, Password Management, Access Request, Lifecycle Management, Adaptive Multifactor Authentication, and Access Certification. All these technologies go a long way towards preventing insider-related breaches.

Related Questions
Evgeny Belenky - PeerSpot reviewer
Director of Community at PeerSpot (formerly IT Central Station)
Aug 10, 2022
Hi infosec professionals, Based on this article, a few days ago "Twilio became aware of unauthorized access to information related to a limited number of Twilio customer accounts through a sophisticated social engineering attack designed to steal employee credentials". What could be done better to prevent this from happening in the future? Which tools, techniques and solutions could help to a...
See 1 answer
Ladislav Nyiri - PeerSpot reviewer
IDM Engineer at a tech services company with 51-200 employees
10 August 22
In case of sophisticated social engineering attack designed to steal employee credentials there is a need to pay attention regarding education of employee first and if not already in place apply Zero Trust approach by implementing OTP and using it as mandatory for all employees. Any technical solution is not good enough to avoid willing leak of employee credentials by themself.
Rony_Sklar - PeerSpot reviewer
Community Manager at PeerSpot (formerly IT Central Station)
Nov 01, 2021
What tools can be used to help make GDPR compliance easier? What are some specific features to look out for?
2 out of 5 answers
AdrianMache - PeerSpot reviewer
RSA Specialist at a computer software company with 1,001-5,000 employees
23 July 20
I would go for RSA SecurID Suite due to strong compliance and continuous fast development. There are sections with handle access certification management, access request management, data access governance and business role management. As Microsoft has been breached in 2019 and recently Oracle joined "clouds", I would avoid embracing this IAM tool.  Okta and SailPoint also have a strong position. 
Hasan Zuberi ( HZ ) - PeerSpot reviewer
Product Manager Cyber Security at a tech services company with 11-50 employees
16 June 21
We recommend Algosec
Download Free Report
Download our free Identity Management (IM) Report and find out what your peers are saying about SailPoint, One Identity, Omada, and more! Updated: September 2022.
633,184 professionals have used our research since 2012.