iamaccess review
Stale access is the breach you already have
Most incidents do not begin with a novel exploit. They begin with an account that should have been disabled eleven months ago.
Writing
Insights from the field
Notes on identity, access and the parts of security programmes that quietly fail.
zero trustarchitecture
Zero Trust without the rebuild
You do not need a greenfield architecture to stop trusting the network. You need a sequence that survives contact with the business.
compliancerisk
Compliance is a floor, not a ceiling
Passing the audit and being defensible are different achievements. Here is where the gap usually opens.