Home  ·  Contents

Reference

What this defends against and what it does not, why the insider framing is both overstated and damaging, and the residual risk list that makes every coverage claim believable.

4 notes

The Threat Model, Stated Honestly

What privileged access management defends against, what it does not, and why the insider framing is both overstated and damaging.

Analysis

Where the Requirements Come From

Privileged access appears in most security frameworks and in several regulatory regimes. A general orientation to what is commonly required.

Reference

What the Programme Cannot Do

Questions routinely asked of a PAM programme that it cannot answer, and what to use for each instead.

Reference

Glossary

Terms used across these notes, defined once, including several the industry uses to mean different things.

Reference