No Identity, No Recovery: Cyber Resilience Starts With IAM
Analyst says identity resilience is essential to recover operations after ransomware and outages.
Enterprise Strategy Group analyst Todd Thiemann argues that identity resilience is a prerequisite for cyber recovery, because backed-up data and apps are useless if teams cannot authenticate. He recalls the 2017 NotPetya attack, which wiped or disabled nearly all of Maersk's Active Directory domain controllers and disrupted global shipping until one offline controller was used to rebuild. Omdia research cited in the column says a typical enterprise uses about 1,200 applications, increasingly reached through cloud identity providers rather than on-premises Active Directory.
- Identity access is required to restore operations after ransomware or outages.
- NotPetya wiped nearly all of Maersk's Active Directory domain controllers in 2017.
- Omdia research puts a typical enterprise at about 1,200 applications.
- Cloud identity providers complicate traditional on-premises Active Directory recovery plans.
- Vendors
- Microsoft
- Products
- Active Directory
- Malware
- NotPetya
- Victims
- Maersk
- Organizations
- Enterprise Strategy GroupOmdiaMaersk
Indicators of compromise
auto-extracted · verify before use · export allAll| Type | Indicator | Context |
|---|---|---|
| md5 | 21b825d74e7c4683dd09d788c7fc31aa | /apple-patch-policy-ai#recipe=similar-items&sourcecontentid=21b825d74e7c4683dd09d788c7fc31aa) Apple Reverses Age-Old Patch Policy to Keep Up With AI by |
| md5 | 362b8b6db1ce493c4eee55479e5eaafa | over-to-private-sector#recipe=similar-items&sourcecontentid=362b8b6db1ce493c4eee55479e5eaafa) Hand CVE Over to the Private Sector by Brian Martin Jan 2 |
| md5 | 3e902b4f0859291fd322f90ebc26a2b7 | poses-ai-security-gaps#recipe=similar-items&sourcecontentid=3e902b4f0859291fd322f90ebc26a2b7) Europe's Multilingual Reality Exposes AI Security Gaps by |
| md5 | 72c338b2deafd2cb61496d84135508f8 | overnment-cyberattacks#recipe=similar-items&sourcecontentid=72c338b2deafd2cb61496d84135508f8) Shutdown Sparks 85% Increase in US Government Cyberattack |
From the original article
7 min read at darkreading.com
The proliferation of enterprise apps and the centrality of cloud identity providers requires an identity security rethink.
By Todd Thiemann · darkreading.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.