Identity and access management (IAM) is the set of policies and systems that control who or what can access which resources. It spans login, roles, permission reviews and offboarding.
Least privilege is the principle of giving every user, service and process only the access its job needs. It limits how far a mistake or a compromised account can spread.
Role-based access control (RBAC) is an access model in which permissions attach to roles rather than people. Users and services get access by being assigned one or more roles.
Single sign-on (SSO) lets users sign in once with a central identity provider and then reach many applications. Each app trusts the provider instead of keeping its own password.
Zero trust is a security model that never grants trust based on network location. Every user, device and request is verified before receiving the least access it needs.
An audit trail is a chronological, tamper-resistant record of who did what, when and to which data or system. It lets organisations reconstruct events, prove compliance and investigate errors, fraud or security incidents.
HIPAA (Health Insurance Portability and Accountability Act) is a US law protecting the privacy and security of health information. It applies to healthcare organisations and the businesses that handle that data for them.
A clear proven process, that delivers
You've seen our ideas - now go deeper.
Discover more insights, guides, and engineering practice.