TIM-8301 v5

Aboukadri, S., Ouaddah, A., & Mezrioui, A. (2023). Machine learning based identity and access management systems (ML I&AM): A taxonomy [Conference paper]. 2023 7th IEEE Congress on Information Science and Technology (CiSt), 657–662. https://doi.org/10.1109/CiSt56084.2023.10409872
This paper introduces a taxonomy of machine-learning-driven identity and access management systems, categorizing approaches based on their function, to improve security, user experience, and overall system efficiency.

Badirova, A., Dabbaghi, S., Moghaddam, F. F., Wieder, P., & Yahyapour, R. (2023). A survey on identity and access management for cross-domain dynamic users: Issues, solutions, and challenges. IEEE Access, 11, 61660–61679. https://doi.org/10.1109/ACCESS.2023.3279492
This study surveys challenges in access management in centralized and decentralized identity governance and explores traditional and futuristic methods such as blockchain and AI/ML.

Cuzzocrea, A., & Belmerabet, I. (2024). Privacy-preserving identity and access management in multiple cloud environments: Models, issues, and solutions [Conference study]. 2024 IEEE International Conference on Big Data (BigData), 6223–6229. https://doi.org/10.1109/BigData62323.2024.10826004
This study focuses on privacy-preserving identity and access management in multi-cloud environments, describing contemporaneous models and issues and providing a taxonomy of state-of-the-art research proposals.

Glöckler, J., Sedlmeir, J., Frank, M., & Fridgen, G. (2024). A systematic review of identity and access management requirements in enterprises and potential contributions of self-sovereign identity. Business & Information Systems Engineering: The International Journal of WIRTSCHAFTSINFORMATIK, 66(4), 421–440. https://doi.org/10.1007/s12599-023-00830-x
This paper systematically reviews the requirements of Identity and Access Management systems in enterprises and assesses the potential contributions of Self-Sovereign Identity.

Muppa, K. R. (2024). Enhanced identity and access management with artificial intelligence: A strategic overview. International Journal of Information Security & Cybercrime, 13(2), 9–17. https://doi.org/10.19107/ijisc.2024.02.01
This article provides an overview of integrating Artificial Intelligence with Identity and Access Management systems, including their strategic evolution, benefits, and challenges.

Nosouhi, M. R., Baig, Z., Doss, R., Gauravaram, P., Pati, D. P., Mahansaria, D., Sood, K., & Pan, L. (2024). The value of strong identity and access management for ICS/OT security [Conference paper]. 2024 21st Annual International Conference on Privacy, Security and Trust (PST), Privacy, Security and Trust (PST), 1–5. https://doi.org/10.1109/PST62714.2024.10788047
This paper examines the value of identity and access management for security in Industrial Control Systems and Operational Technology, using the MITRE ATT&CK framework to analyze attack vectors.

Pohn, D., & Hommel, W. (2023). New directions and challenges within identity and access management. IEEE Communications Standards Magazine, 7(2), 84–90. https://doi.org/10.1109/MCOMSTD.0006.2200077
This paper discusses the evolving challenges in identity and access management in web services and describes the push towards self-sovereign identity with increased privacy and usability.

Singh, A. P., Kuzminykh, I., & Ghita, B. (2024). Industry perception of security challenges with identity access management solutions [Conference study]. 2024 IEEE International Black Sea Conference on Communications and Networking (BlackSeaCom), 312–315. https://doi.org/10.1109/BlackSeaCom61746.2024.10646296
This study explores industry perceptions of security challenges with Identity and Access Management, providing a comparative analysis of on-premises and cloud-based models, revealing technical and configuration vulnerabilities.

Vegas, J., & Llamas, C. (2024). Opportunities and challenges of artificial intelligence applied to identity and access management in industrial environments. Future Internet, 16(12), 469.

(2024, April 25). ISC2 Certified Information Systems Security Professional (CISSP) (2024) Cert Prep. LinkedIn Learning. https://www.linkedin.com/learning/isc2-certified-information-systems-security-professional-cissp-2024-cert-prep/earning-your-cissp?u=99504138

Nickel, J. (2019). Mastering Identity and Access Management with Microsoft Azure (2nd ed.). Packt Publishing.

Stenbacken Stjernlof, L., & De Vries, H. (2020). Okta Administration: Up and Running. Packt Publishing.

Juma, A. H., Arman, A. A., & Hidayat, F. (2023). Cybersecurity assessment framework: A systematic review [Conference review]. 2023 10th International Conference on ICT for Smart Society (ICISS), ICT for Smart Society (ICISS), 1–6. https://doi.org/10.1109/ICISS59129.2023.10291832
This systematic literature review explores the origins, functions, assessment methods, issues, and global adoption of cybersecurity frameworks, providing insights for developing effective cybersecurity strategies.

Kupeli, M., & Sogut, E. (2024). Assessment of the cybersecurity efficiency of G20 countries using data envelopment analysis [Conference study]. 2024 17th International Conference on Information Security and Cryptology (ISCTürkiye), 1–4. https://doi.org/10.1109/ISCTrkiye64784.2024.10779233
This study employs Data Envelopment Analysis (DEA) to assess and rank the cybersecurity performance of G20 countries, using existing cybersecurity indices to inform strategies for enhancing national cybersecurity capabilities.

Leszczyna, R. (2024). Cybersecurity assessment methods—Why aren’t they used? IT Professional, 26(4), 71–79. https://doi.org/10.1109/MITP.2024.3392415
This article investigates why many cybersecurity assessment methods proposed in academic settings are not adopted in operational environments, highlighting the importance of continuous support, funding models, and active community engagement.

Wahed, M. A., Alzboon, M. S., Alqaraleh, M., Halasa, A., Al-Batah, M., & Bader, A. F. (2024). Comprehensive assessment of cybersecurity measures: Evaluating incident response, AI integration, and emerging threats [Conference article]. 2024 7th International Conference on Internet Applications, Protocols, and Services (NETAPPS), Internet Applications, Protocols, and Services (NETAPPS), 1–8. https://doi.org/10.1109/NETAPPS63333.2024.10823603
This article assesses the effectiveness of current cybersecurity measures, focusing on incident response, AI integration, and strategies to combat emerging threats, and identifies best practices for improving cybersecurity resilience.

MITRE ATT&CK®. (n.d.). Retrieved March 19, 2025, from https://attack.mitre.org/

Georgiadou, A., Mouzakitis, S., & Askounis, D. (2021). Assessing MITRE ATT&CK Risk Using a Cyber-Security Culture Framework. Sensors,21(9), 3267. https://doi.org/10.3390/s21093267

(2024, April 25). ISC2 Certified Information Systems Security Professional (CISSP) (2024) Cert Prep. LinkedIn Learning. https://www.linkedin.com/learning/isc2-certified-information-systems-security-professional-cissp-2024-cert-prep/earning-your-cissp?u=99504138

Landoll, D. (2021). The Security Risk Assessment Handbook. CRC Press.