[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"framework:iso-27001\u002Fa-5-16":3},{"item":4,"lessons":16,"controls":34,"related":61},{"family":5,"item":6,"code":7,"title":8,"citations":9,"publisher":10,"summary_md":11,"official_text":12,"official_attribution":12,"official_url":13,"link_label":14,"note":12,"updated_at":15},"iso-27001","a-5-16","Annex A 5.16","ISO\u002FIEC 27001:2022 Annex A 5.16: Identity management",4,"International Organization for Standardization (ISO) and IEC","**What it asks for.** This control expects the full life cycle of identities to be managed. Its purpose is to allow unique identification of individuals and systems accessing information, so access rights can be assigned appropriately.\n\n**In practice.** Good practice means each person and, where relevant, each system has a unique identity, identities are created only after approval, and they are updated or disabled promptly when people change role or leave. Shared identities are allowed only where justified and controlled. Auditors look for joiner, mover and leaver processes, links between HR records and identity systems, and evidence that dormant identities are removed.\n\n**Common gaps.** Common gaps are orphaned accounts, slow disabling of leavers, unmanaged service and non-human identities and identities in SaaS tools outside central management. Identity records are also seldom reconciled against HR data.",null,"https:\u002F\u002Fwww.iso.org\u002Fstandard\u002F27001","See the standard at ISO","2026-10-18T15:18:43.664+00:00",{"total":9,"list":17},[18,22,26,30],{"slug":19,"title":20,"published_at":21},"deepfakes-shatter-trust-in-visual-identity-verification","Deepfakes Shatter Trust in Visual Identity Verification","2026-10-05T12:20:21.472+00:00",{"slug":23,"title":24,"published_at":25},"microsofts-x-account-hijacked-to-push-crypto-scam","Microsoft's X Account Hijacked to Push Crypto Scam","2026-10-02T12:20:21.468+00:00",{"slug":27,"title":28,"published_at":29},"default-passwords-on-service-accounts-fuel-microsoft-365-compromise","Default Passwords on Service Accounts Fuel Microsoft 365 Compromise","2026-09-24T10:21:44.924+00:00",{"slug":31,"title":32,"published_at":33},"ghost-credentials-dormant-non-human-identities-create-hidden-cloud-attack-paths","Ghost Credentials: Dormant Non-Human Identities Create Hidden Cloud Attack Paths","2026-07-29T00:21:05.946+00:00",[35,39,44,49,53,57],{"slug":36,"name":37,"problem":38,"stories":9},"identity-threat-detection","Identity threat detection and response (ITDR)","Attackers who log in with real, stolen credentials get noticed.",{"slug":40,"name":41,"problem":42,"stories":43},"phishing-resistant-mfa","Phishing-resistant MFA","A stolen password, or a user who taps Approve on a push prompt, is no longer enough to log in.",3,{"slug":45,"name":46,"problem":47,"stories":48},"asset-inventory","Cyber asset inventory","You cannot patch, monitor or protect the devices, cloud resources and accounts you do not know you have.",1,{"slug":50,"name":51,"problem":52,"stories":48},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",{"slug":54,"name":55,"problem":56,"stories":48},"identity-governance","Identity governance and single sign-on","People who leave or change roles lose access everywhere at once, and forgotten accounts stop piling up.",{"slug":58,"name":59,"problem":60,"stories":48},"privileged-access-management","Privileged access management (PAM)","Admin accounts stop being one stolen password away from control of everything.",[62,67,72,77,80,86,91,95],{"family":63,"item":64,"code":65,"title":66,"together":9},"cis","6","Control 6","Access Control Management",{"family":68,"item":69,"code":70,"title":71,"together":43},"gdpr","32","Article 32","Security of processing",{"family":73,"item":74,"code":75,"title":76,"together":43},"nist-800-53","ac-2","AC-2","Account Management",{"family":63,"item":78,"code":79,"title":76,"together":43},"5","Control 5",{"family":81,"item":82,"code":83,"title":84,"together":85},"nist-csf","pr-ac","PR.AC-1","Identity Management, Authentication and Access Control (CSF 1.1)",2,{"family":87,"item":88,"code":89,"title":90,"together":85},"nist-sp","800-63","SP 800-63","SP 800-63: Digital Identity Guidelines",{"family":92,"item":93,"code":94,"title":94,"together":85},"itil","overview","ITIL",{"family":63,"item":96,"code":97,"title":98,"together":48},"8","Control 8","Audit Log Management"]