Identity is now the central security battleground, writes Carolyn Crandall, Chief Security Advocate at identity detection and response product company Attivo.

The threat of attackers exploiting user identities has become increasingly prominent as organizations invest in cloud migration and remote working capabilities. Expanding IT estates have resulted in “permission sprawl,” and “policy drift” where users tend to accrue an excessive amount of access rights, significantly increasing the risk posed by a compromised account.

To mitigate this threat, organizations need to ensure that mainstay tools such as Endpoint Detection and Response (EDR) get augmented by new measures that focus on identity security. One of the most effective new trends in this area is Identity Detection and Response (IDR), which focuses on credential theft and privilege misuse.

Read more at – Profesional Security Magazine: A different approach to identity security