Introduction to security, compliance, and identity concepts

Share responsibility

who is accountable for which parts of the security

on-premises

Organization control entire stack

Infrastructure as a Service (laaS)

you manages everything except hardware

Platform as a Service (PaaS)

you manage app and data

Software as a service (SaaS)

You control the least, responsible for access management

Defense in depth

multiple layers of protection; if one layer fails, another layer is there to stop the attack

Distributed denial of service (DDoS)

massive traffic from many differnt sources at the same time

network segmentation

dividing the network into isolated zones so that a compromise in one zone doesn't automatically expose everything else

zero trust

trust no one verify everything

Shadow IT

tech the security team can’t see, can’t control, and can’t protect.

security information and event management (SIEM)

collect, correlates, analyzes, an alets on logs (detects)

SOAR (Security Orchestration, Automation, and Response)

automates incident response (responds)

encryption

process of making data unreadable and unusable to unauthorized viewers.

Symmetric encryption

uses the same key to both encrypt and decrypt

Asymmetric encryption

uses pair key; public and private key

data residency

govern the physical locations where data can be stored and proccessed

Data sovereignty

data is subject to the laws and regulations of the country/region where it's physically collected, held, or processed.

credentials

evidence that verifies your identity

identity provider (IdP)

the gatekeeper that proves who you are.

Security Assertion Markup Language (SAML)

sign in once, access many apps

directory

repository that stores information about objects in a network, such as users, devices, groups, policies, and applications

Active Directory

manage on-premises, domain-based networks—giving administrators a centralized way to manage users, computers, and resources across the organization

Microsoft Entra ID

cloud-based identity and access management service

federation

enables access to services across organizational or domain boundaries by establishing trust relationships between separate identity providers.