The Identity APM Maturity Model: A Framework for Leveling Up | SO-CON 26

The speaker introduces a maturity model analogy, explaining how tools like BloodHound provide visibility and map attack routes to identify choke points, but argue that additional factors like trip planning and vehicle type (gas vs. electric) are critical variables for comprehensive security strategy.

Key Takeaways:
• BloodHound provides essential visibility and insights that were previously unavailable to security teams 0:13.
• The tool allows users to map attack routes and identify specific choke points within the infrastructure 0:20.
• The speaker argues that while mapping is great, a maturity model requires considering additional variables like preparation and resources 0:29.
• Analogous to travel planning, security strategies must account for variables such as the "vehicle" type and necessary stops along the route 0:39.

Effective security maturity requires moving beyond simple visibility and route mapping to include comprehensive planning and resource assessment.

Sources:

• 0:13 Discussion of BloodHound's visibility capabilities.
• 0:20 Explanation of route mapping and choke point identification.
• 0:29 Introduction to the maturity model and additional variables.
• 0:39 Use of travel analogies to explain security planning complexity.