Auditing Customer Identity and Access Management
Sushmita Podugu, Vamsi Krishna Rayapureddi, Manish Kumar Gupta · Advances in IT standards and standardization research (AISSR) book series/Advances in IT standards and standardization research series · 2023
Customer identity and access management (CAIM) is an emerging field that is a subset of traditional identity and access management. Authenticating, authorizing, and granting access to company systems to employees is the foundation of traditional IAM. Contrarily, CIAM is a specialist field that allows organizations to authenticate, authorize, and provide access to their customers/consumers for on-premises or cloud-based organizational systems. By granting customers access, it becomes necessary to control the degree of access granted to customers; as a result, auditing is a crucial component of CIAM. Auditing aids in directing businesses towards establishing control environment, assessing risk, developing, and monitoring relevant IT controls; and keeps an eye on laws that are imposed by governing authorities. The chapter begins with an introduction to audit and customer identity access management. It addresses the risks associated with CIAM, strategies for implementing security controls and the importance of implementing these controls.