Security News > 2024 > May > The importance of access controls in incident response
The worst time to find out your company doesn't have adequate access controls is when everything is on fire.
That's why having adequate identity access management policies in place - which include both authorization and authentication - is especially critical when it comes to your incident management tooling.
Once someone is verified and inside, what are they allowed to do? Are they cooks who should be allowed in the kitchen? Are they patrons who should only be allowed at the tables? Are they live band members and should have access to the green room? Just because someone is accepted into the party it doesn't mean that it's appropriate for them to have complete access to every part of the venue.
It's the role of security teams to work together with platform teams to ensure that the appropriate access controls are in place.
You don't want to be in a situation where access is granted off the cuff or where someone should already have access and doesn't.
Whatever incident management solution you choose, you need to ensure that it offers the ability to manage permissions at scale so you can control who accesses incident information and when they access it.
News URL
https://www.helpnetsecurity.com/2024/05/17/incident-response-access-controls/