Identity Governance and Access Certification
Identity governance (Access Reviews, entitlement, cross-tenant) that prevents privilege creep and unmonitored external access.
ZT: least privilegeIGA / Access ReviewWindowsCloudIdentity
TA0008Defense Plan
Lateral Movement
Lateral movement within the network
Just-in-Time Privileged Access (PIM/JIT)
PIM that makes privileged roles eligible rather than permanent, used via approved and time-limited activation.
ZT: least privilegePIM / JITWindowsLinuxCloudIdentity
M1026Privileged Account Management
Keep the number and use of privileged accounts to a minimum: Domain Admins hygiene, LAPS, JIT/PIM.
ZT: least privilegePAM / Tiered AdminWindowsLinuxIdentityCloud
M1018User Account Management
Account lifecycle management: proper creation, assignment with least privilege, timely disabling, and periodic access reviews.
ZT: least privilegeIAM / Joiner-Mover-LeaverWindowsLinuxmacOSIdentityCloud
Zero Trust Architecture
A least-privilege architecture that rejects the assumption of a trusted internal network and verifies every access request by identity, device, and context.
ZT: verify explicitlyZero Trust / ZTNAWindowsLinuxmacOSCloudIdentity