Forget identity – access management is about recognition

The scope and scale of data breaches, like the Target debacle and more recently Home Depot, have shocked many. Some question why it took Home Depot five months to detect a malware intrusion. While others talk about how Target might have handled card data differently and kept it out of the hackers’ hands.

The debate centres around case-specific vulnerabilities and the challenge of detecting an intrusion. Rarely, if ever, do we consider that maybe our concept of identity is flawed – that we might have done more to stop a person accessing an account they were not supposed to in the first place. Identity is not enough

Read more at – Forget identity – access management is about recognition