Providing consistent access control to these systems across the enterprise requires a control plane based on centralized enterprise identity system(s), often supplemented by network access control for older systems like operational technology (OT) devices.Įach of these planes has control of the data and workloads by virtue of their functions, creating an attractive pathway for attackers to abuse if they can gain control of either plane.įor these systems to create business value, they must be accessible to internal users, partners, and customers using their workstations or devices (often using remote access solutions) - creating user access pathways. The enterprise IT organization manages and supports the workloads and the infrastructure they are hosted on, whether it's on-premises, on Azure, or a third-party cloud provider, creating a management plane. Intellectual property in data and applications.Business processes in applications and workloads.The applications and data typically store a large percentage of an organization's: The primary stores of business value that an organization must protect are in the Data/Workload plane: This enterprise access model shows how privileged access fits into an overall enterprise access model. Privileged access strategy is part of an overall enterprise access control strategy. For implementation guidance to deploy this, see privileged access deployment

For a roadmap on how to adopt a privileged access strategy, see the rapid modernization plan (RaMP). This document describes an overall enterprise access model that includes context of how a privileged access strategy fits in.

Cs evolution condition zero