Trends, developments, and current topics: We keep you informed about IT security, Identity & Access Management, and OEDIV SecuSys.
With the introduction of BCS, OEDIV SecuSys has not only established a new, shared foundation for its project work, but has also reduced the workload of its IT administration and implemented a powerful ticketing system. In the future, the solution…
Read more →Shadow AI often emerges where employees need to move faster than IT can respond. Find out why clear governance is more effective than a blanket AI ban – and how organizations can maintain control without slowing down innovation.
Read more →A digital lifecycle never ends with onboarding, which is why a comprehensive identity and access strategy forms the foundation of modern corporate security.
Read more →Find out why expired certificates can pose a business risk, what challenges shorter certificate validity periods present, and how professional certificate management helps to prevent outages, reduce security risks and reliably automate renewals.
Read more →Current topics relating to Identity & Access Management.
With the introduction of BCS, OEDIV SecuSys has not only established a new, shared foundation for its project work, but has also reduced the workload of its IT administration and implemented a powerful ticketing system. In the future, the solution…
Read more →Shadow AI often emerges where employees need to move faster than IT can respond. Find out why clear governance is more effective than a blanket AI ban – and how organizations can maintain control without slowing down innovation.
Read more →A digital lifecycle never ends with onboarding, which is why a comprehensive identity and access strategy forms the foundation of modern corporate security.
Read more →Find out why expired certificates can pose a business risk, what challenges shorter certificate validity periods present, and how professional certificate management helps to prevent outages, reduce security risks and reliably automate renewals.
Read more →Learn what Segregation of Duties (SoD) is, how SoD conflicts arise, and how organizations can identify critical access conflicts early, meet compliance requirements, and sustainably reduce security risks through effective controls.
Read more →Learn how Privileged Access Management (PAM) protects privileged accounts, reduces cyber risk, and helps organizations securely manage sensitive systems while meeting regulatory requirements.
Read more →Subscribe to our newsletter to receive regular insights into Identity & Access Management.
Here you’ll find answers to the most frequently asked questions about our services,
solutions, and the latest topics in Identity & Access Management.
Segregation of Duties (SoD), known in German as Funktionstrennung, means distributing critical tasks among multiple people so that no individual can control an entire business process alone — for example, creating a supplier and approving the associated payment. In Identity & Access Management, SoD rules are configured as conflicting pairs of access rights. The IGA system blocks requests that create conflicts or requires a documented exception. Auditors and ISO 27001 assessors regularly review these controls. |
An AI agent is a program that is given a goal and independently decides which steps to take to achieve it: retrieving data, interacting with systems, sending messages, or commissioning other agents. To do this, it needs access rights — and that is precisely where the risk lies. An agent with excessive privileges can cause damage within seconds that a human might not notice for hours. An agent using shared credentials cannot be clearly identified as the source of an action in audit logs. That is why every agent should be subject to the same processes as other identities: its own identity, least-privilege access, an accountable owner, logging, and human approval at critical points. |
Authentication verifies who someone is, using a password, passkey, certificate, or biometric authentication. Authorization determines what that person is allowed to do, based on roles, groups, and policies. Single Sign-On and Multi-Factor Authentication are part of authentication; role models, regular access reviews, and least privilege are part of authorization. Many security incidents are caused not by inadequate authentication, but by overly broad authorization. |
Our blog publishes expert articles on Identity & Access Management, Identity Governance, Privileged Access, machine identities, certificate management, and regulatory developments such as NIS2, DORA, and eIDAS 2.0. New articles are published here on this page. |
Let’s assess together how resilient and future-ready your Identity & Access Management really is.
