CIP - Identity and Endpoint Cybersecurity
Access control, identity management and endpoint protection under the Zero Trust approach: the main modern attack vector.
Domain Description
Domain focused on access control, digital identity management and endpoint device protection. It covers the complete identity inventory, multi-factor authentication (MFA), role-based authorization (RBAC, ABAC, PBAC), user provisioning and deprovisioning, as well as the inventory and hardening of endpoints. It promotes the Zero Trust strategy as its guiding principle, prioritizing the management of 100% cloud identities and integration with Single Sign-On (SSO). It's considered the organization's most relevant initial protection pillar, since identity represents the main attack vector in modern environments.
CIP Controls
Access control, identity management, authentication and advanced endpoint device protection.
CIP-1
CIP-2
CIP-3
CIP-4
CIP-5
CIP-6
Common problems in companies
Running two identity management systems, one on-premises and one in the cloud.
Effectively replicating cybersecurity policies.
Access management in third-party applications not integrated with the company's identity manager.
ROI (Return on Investment)
For companies
Budget optimization in license management across multiple systems.
Zero Trust strategy principles. Dynamic access management, so you aren't constantly adjusting roles.
Employees' access is defined from the moment they're created.
For cybersecurity professionals
Identify improvements in enterprise identity management.
Effectively implement RBAC, ABAC and PBAC.
Implementation of the Zero Trust strategy