CISA Releases Continuous Diagnostics and Mitigation Program: Identity, Credential, and Access Management (ICAM) Reference Architecture

Summary:

The Continuous Diagnostics and Mitigation (CDM) Program: Identity, Credential, and Access Management (ICAM) Reference Architecture has been released by the Cybersecurity and Infrastructure Security Agency (CISA). The publication provides a comprehensive guide to integrating identity and access management capabilities into ICAM architectures, filling a previous gap in authoritative resources. The document describes the federal ICAM practice area, related CDM capabilities, and introduces federation services. It also explores zero-trust architecture and illustrates how ICAM and CDM enable it. CISA recommends using the reference architecture to create robust and effective ICAM capabilities.