01/27/2019
LOL
When the first two decisions related to cybersecurity are incorrect, every subsequent decision is either incorrect or tainted. Mitigation is a band-aid that introduced new attack vectors compounding the problem. In a binary environment, the only solution is to make the other choice.
Without exception, after defining what to secure (or not), the next two decisions every organization made are incorrect:
Who should have access to “secure” services; authorized entities or the general public? The decision has been to place secure services in a public environment. Then blaming “human error” for uncontrolled access.
Next, should identification and authentication be performed by direct or indirect assertion of identity? Again, the wrong decision was made. Indirect assertion uses complex data to guess identity. This is why identity monitoring is necessary!
Existence-based access creates a serialized private portal to secure services eliminating the need for public access. Existence is direct assertion of identity. “If I’m not present, it’s not me!”
Existence-based access, Not slick marketing, it’s valid science.
