Defense-in-depth encourages a review of all tools in place, ultimately defining a strategy to use everything available to create a layered security approach between users (or potential attackers) and applications/microservices in use.

Current cloud deployments pose significant risks that could be mitigated with minor changes to infrastructure procurement and access.

The most common “new project” in identity nowadays is in Zero Trust. This concept has been evolving for years, and is building controls around an interesting premise: the idea that every resource will one day be internet-facing.

Shifting to the cloud can be a radical but necessary change. There’s no denying the transition can be time consuming and costly upfront.