Menu
Home
People
Places
Arts
History
Plants & Animals
Science
Life & Culture
Technology
Reference.org
Identity threat detection and response
open-in-new
<p>Identity threat detection and response (ITDR) is a <a href="/facts/Cybersecurity/7E5dIy7G">cybersecurity</a> discipline that includes tools and best practices to protect <a href="/facts/Identity_management/D4Ukft0T">identity management</a> infrastructure from attacks. ITDR can block and detect <a href="/facts/Cyber_threats/6PSQzq7y">threats</a>, verify administrator credentials, respond to various attacks, and restore normal operations. Common identity threats include <a href="/facts/Phishing/hvgfz4U8">phishing</a>, stolen credentials, <a href="/facts/Insider_threat/DlGQDUlP">insider threats</a>, and <a href="/facts/Ransomware/muT4jcxj">ransomware</a>. </p><p>ITDR adds an extra layer of security to <a href="/facts/Identity_and_access_management/D4Ukft0T">identity and access management</a> (IAM) systems. It helps secure accounts, permissions, and the identity infrastructure itself from compromise. With attackers targeting identity tools directly, ITDR is becoming more important in 2023 : according to <a href="/facts/Gartner/9hd9zakC">Gartner</a>, established IAM hygiene practices like <a href="/facts/Privileged_access_management/rcMh6wMU">privileged access management</a> and identity governance are no longer enough. </p><p>ITDR can be part of a <a href="/facts/Zero_trust_security_model/hvdUCFWl">zero trust security model</a>. ITDR is especially relevant for <a href="/facts/Multicloud/p96yDNd2">multicloud</a> infrastructures, which have gaps between cloud providers' distinct IAM implementations. Closing these gaps and orchestrating identity across clouds is an ITDR focus. </p>