Active Directory Security Measures for U.S. State and Local Government and Education

NASCIO's 2024 top-ten priorities see cybersecurity and digital services tie for first; the post argues asset visibility bridges the two and shows how Wiz supports state governments.

This guest post examines why Active Directory is both foundational and vulnerable across U.S. public sector agencies, from the OPM breach onward, and why detection and hardening are essential.

A domain controller should do one thing: control the domain. Why ADDS belongs on a DC and which roles, tools, and apps to keep off it to shrink the attack surface.

Semperis argues AI-driven attacks are outpacing identity teams as machine identities outnumber human ones 10:1, and urges building organization-wide cyber resilience around hybrid identity protection before the next crisis.

A guest post on navigating overlapping federal requirements like FISMA, FedRAMP, and Executive Order 14028, and how mapping them to NIST CSF 2.0 simplifies public sector compliance.

Semperis launched Lightning Identity Runtime Protection: ML-powered detection of proven identity attack patterns like password spray and brute force, layered on DSP and led by Igor Baikalov.