When bad things happen to good credentials
-
Identity and access management (IAM) has been a fundamental security touchstone for as long as information security has been around. Unfortunately, it is not good enough anymore.
https://www.securitymagazine.com/articles/98524-when-bad-things-happen-to-good-credentials