Insider and outsider threats are starting to look the same - hackers are stealing identities or logged in sessions. Our approach to a solution? A pragmatic least privilege maturity curve.

Thoughts on ChatGPT, AI, and the long ranging security impacts - especially to phishing and social engineering based attacks.

Learn how organizations using Okta can supercharge their IAM security strategy and achieve least privilege access with ConductorOne

Your first SOC2 audit can seem daunting. Use this checklist to build a strong security strategy that will put you on the right path to compliance.

Birthright access is an anti-pattern for secure, least privilege access control.

Modern security teams are automating traditional compliance controls to reduce the risk posture for an organization – what we're calling security-led governance.

As one of the core tenants of zero trust, least privilege access is probably the least understood and the hardest to reach today. At the highest level, think of least privilege access as providing people – or identities more generally – the access they need to do a job, and for no longer than they need it.

IT, Security, and GRC teams have long held a love-hate relationship with directory groups. Groups enabled companies to scale permissions for a time, but the proliferation of directory groups is now causing major headaches for security.