Thoughts About Application Breach Detection and Response

“Identity is about establishing trust, while insider risk is what happens when the trust chain is broken. That trust chain might be someone to whom you have willingly given credentials or a trusted employee who has shared credentials or, worse, an impersonator who has stolen credentials.”