OozamaIT SECURITY WIKI
MC
Topic · 24 articles

Identity & access

Make sure the right people have the right access at the right time. Guidance for authentication, authorization, account lifecycle, and permissions.

Recommended starting points

Core guidance

Curated for every team

GUIDE

Multi-factor authentication (MFA)

Why MFA matters, which methods to choose, and how to roll it out without friction.

7 min read
CONTROL

Least privilege: a practical implementation guide

Reduce access risk while giving people what they need to do their jobs.

8 min read
CHECKLIST

Secure employee onboarding

A repeatable checklist for provisioning accounts, devices, and permissions.

10 steps
GUIDE

Managing the account lifecycle

Joiners, movers, and leavers: keep identity records accurate from day one.

6 min read
CONTROL

Privileged access management

Protect administrator accounts with separation, elevation, and review.

9 min read
GUIDE

Passwords, passkeys, and secure sign-in

Modern advice for authentication factors and managing credentials safely.

5 min read

Access fundamentals

01
Verify identity before granting accessUse strong authentication and trusted account recovery.
02
Grant only the access that is neededStart with a narrow role and add exceptions deliberately.
03
Review and remove access regularlyMake access reviews part of normal team operations.