Sitemap
Cloud Security

Cybersecurity Attacks and Defenses. New blog: teriradichel.substack.com

Member-only story

Okta

4 min readFeb 24, 2023

--

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

⚙️ Check out my series on Automating Cybersecurity Metrics. The Code.

🔒 Related Stories: IAM | Data Breaches | Cybersecurity

💻 Free Content on Jobs in Cybersecurity | ✉️ Sign up for the Email List

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Press enter or click to view image in full size

As noted in the posts below I am working through an assessment of Okta, but I do not have full visibility into the things I would ask or inspect in a full assessment. I do not have visibility into internal Okta development practices, developer permissions, IAM segregation of duties, data access, source control security(!), and network segmentation, support processes and access, for example, other than what is described in their architectural document and the CSA questionnaire which I cover in a post below.

I have no affiliation with Okta, nor am I getting paid — I am paying them for services. I am interested in this product for security architecture reasons and testing out various integrations to determine how to best segregate duties and protect credentials used on cloud platforms. The idea is to centralize authentication and separate it from the cloud platforms themselves, while the cloud platforms…

--

--

Teri Radichel
Teri Radichel

Written by Teri Radichel⁠

CEO 2nd Sight Lab | Pentesting | Research | AWS Security Hero | Masters of Infosec & Masters Software Engineering | GSE | IANS | SANS Difference Makers Award