Cybersecurity and IAM: Challenges, Connections and Solutions

An Increasingly Fragmented Identity Ecosystem

With the widespread adoption of cloud computing (various servers accessible via the Internet), remote work, and hybrid architectures (environments combining distinct private and public cloud infrastructures, for example), identity management has become increasingly complex. Previously centralised in internal systems, identity data is now scattered across multiple systems, databases, and SaaS applications. A SaaS application (Software as a Service) is software hosted in the cloud and accessible via the Internet without local installation, such as Google Workspace, Microsoft Office 365, or Salesforce.

"Identities are no longer static; they continuously evolve within distributed environments. Without clear governance, we end up with identity silos that weaken overall security," says Cyril GOLLAIN, Managing Director EMEA at Radiant Logic. This fragmentation makes it challenging to ensure consistent access control and increases risks in case of security flaws. In response, it is crucial to unify and structure user information to ensure controlled and secure access. The goal is to grant employees, partners, and machines only the rights strictly necessary for their roles, nothing more, nothing less. This approach, known as the "principle of least privilege" mitigates risks by limiting exposure to sensitive resources.

Data Hygiene and Reduction of Attack Surfaces

Another major challenge concerns user account management. When an employee leaves the company or a contractor completes their assignment, their access must be revoked immediately. However, in many organisations, these accounts remain active for months or even years, creating potential entry points for cyberattacks. "Each unmanaged account is a potential open door. The first reflex should be to identify and remove obsolete access to minimise risks," adds Cyril GOLLAIN.

This rigor is part of the "Zero Trust" approach, a cybersecurity model based on a simple idea: never grant access by default, always verify the identity and context of an access request before allowing it. In practice, this means that even within the company's network, every connection is controlled and monitored. For example, a user connecting from an unusual device or location may be subject to additional verification. This approach significantly reduces the risks associated with compromised identities or distorted access.

IAM Evolution towards Proactive Cybersecurity

IAM (Identity and Access Management) is a set of technologies, processes, and policies designed to manage users and their access rights to an organisation's resources. Its goal is to ensure that only authorised individuals or systems can access the appropriate data and applications, while ensuring security and compliance. IAM includes features such as authentication, authorisation, identity management, and access monitoring. The rise in cyber threats has led to the emergence of new solutions that combine IAM and cybersecurity. Two key concepts at the heart of expert discussions: Identity Threat Detection & Response (ITDR) and Identity Security Posture Management (ISPM).

ITDR (Identity Threat Detection & Response) focuses on detecting suspicious behavior related to identities. It helps identify abnormal activities, such as an employee attempting to access sensitive files he has never interacted with before. "We are no longer just talking about identity management, but about identity cybersecurity". This system continuously analyses user actions and alerts in the event of a potential threat. On the other hand, ISPM (Identity Security Posture Management) aims to strengthen the security posture of identities by identifying vulnerabilities and poor practices in advance. For example, it can spot accounts with excessive privileges or overly permissive access configurations. By applying strict controls and optimising rights management, ISPM helps minimise risks even before a threat arises.