Misconfigured identities are the leading cause of cyber incidents. Organizations are investing significant resources to address these vulnerabilities, but these investments often prioritize meeting compliance requirements set by regulators. However, the controls and monitoring systems implemented are not designed for real-time threat detection and risk mitigation. Consequently, organizations often resort to purchasing multiple expensive vendor products, which then require extensive reconfiguration due to the varied identity landscapes of each organization.

In this book, we explore how individuals can construct their own identity analytics solution from scratch. We provide starter code to facilitate understanding, catering to beginners. This knowledge can also serve as guidance for those considering vendor products. The book commences with general principles and progresses to cover specific use cases, accompanied by sample code for each.

Much of the available material originates from vendors, which tends to focus more on marketing rather than addressing systemic issues. Alternatively, materials may solely concentrate on Identity and Access Management (IAM) processes and governance without delving deeply into the topics discussed here.

What You Will Learn:

• The relationship between IAM and Identity Analytics.
• Statistical methods, data curation processes, and risk scoring that contribute to effective IAM strategies.
• How to utilize advanced ML/AI techniques for implementing impactful IAM programs, including various use cases that demonstrate their effectiveness.