The Identity Cornerstone

Identity requires a much more comprehensive understanding of how the business works than traditional technology services. One of the most important criteria for a successful identity program is to have an Identity Governance group that meets regularly. This group should be made up of business owners and include representatives from HR, Legal, Risk, Privacy, and IT. This group should define owners of identity and ensure that the identity program objectives are aligned to business priorities. The cornerstone of any cloud security strategy is identity. The Identity Defined Security Alliance (IDSA) has a framework of the seven components of a digital system that consume identity. The seven IDSA components are: Identity, Device, Network, Compute, Application, Storage, and Data. For all protect surfaces, the complete end‐to‐end authentication process for how identity is consumed should be detailed in the data flow mapping stage of the Zero Trust methodology.