Industry Resources

Leading provider of actionable, objective insight for IT leaders. Gartner's research on identity governance, access management, and zero trust architecture informs our product positioning and feature development.

Influential research firm known for zero trust maturity assessments and security organisation benchmarks. Their frameworks help us benchmark IdentityFirst's capabilities against market expectations.

Global market intelligence firm providing data and analysis on IT spending, security market trends, and cloud adoption patterns. IDC's research supports our market sizing and geographic expansion strategy.

Verizon's Data Breach Investigations Report is the industry-standard reference for understanding attack patterns, breach vectors, and threat actor motivations. This data directly informs our detection rules and risk scoring algorithms.

The NIST CSF provides a voluntary framework of standards, guidelines, and best practices for managing cybersecurity risk. IdentityFirst aligns its controls mapping and compliance reporting with NIST CSF categories and subcategories.

The international standard for information security management systems (ISMS). ISO 27001 certification demonstrates commitment to systematic security management. IdentityFirst supports evidence collection for Annex A controls.

Service Organisation Control 2 is a framework for service organisations to demonstrate their controls relevant to security, availability, processing integrity, confidentiality, and privacy. IdentityFirst supports evidence collection for SOC 2 Type II audit preparation.

The UK General Data Protection Regulation governs data protection and privacy. IdentityFirst's data processing capabilities support organisations in meeting GDPR requirements for access control, data minimisation, and breach notification.

A UK government-backed certification scheme that helps organisations protect themselves against common cyber attacks. Cyber Essentials provides a baseline of cyber hygiene that IdentityFirst helps organisations achieve and maintain.

Formerly Azure AD, Microsoft's cloud-based identity and access management service. IdentityFirst provides enhanced security analytics, hybrid identity visibility, and privilege escalation detection for Entra ID environments.

Amazon Web Services Identity and Access Management provides fine-grained access control across AWS services. IdentityFirst extends AWS IAM visibility with cross-account analysis, permission boundary monitoring, and role chaining detection.

Google Cloud's identity and access management for resource hierarchy and policy management. IdentityFirst integrates with Google Cloud IAM for workload identity federation and service account risk assessment.

Leading independent identity platform for secure access management. IdentityFirst complements Okta with advanced threat detection, behavioural analytics, and comprehensive identity posture assessment across the Okta ecosystem.

Enterprise identity security platform for secure access experiences. IdentityFirst integrates with Ping Identity for intelligent access certification, entitlement analysis, and API security monitoring.

The cybersecurity cluster for the North of England, bringing together industry, academia, and government. IdentityFirst actively participates in CyberNorth initiatives to share threat intelligence and advance regional cyber resilience.

The trade association for the technology industry in the UK. TechUK's cybersecurity programme shapes policy and promotes best practices. IdentityFirst contributes to TechUK's work on digital trust and secure innovation.

Global association for information systems audit, control, and security professionals. ISACA's frameworks (COBIT, CRISC) and certifications inform IdentityFirst's approach to identity governance and risk management.

International nonprofit association of certified cybersecurity professionals. (ISC)²'s CISSP and SSCP certifications establish the baseline knowledge that informs IdentityFirst's technical architecture decisions.

The regional voice of business across the North East of England, supporting organisations with advocacy, networking, and resources to strengthen the UK business community. IdentityFirst partners with regional chambers to promote identity security awareness and support businesses in protecting their digital assets and workforce identity.

Leading cybersecurity news portal covering enterprise security, threat intelligence, and incident response. SecurityWeek's reporting on major breaches informs our threat modelling and detection rule development.

One of the most widely read cybersecurity sites offering technical articles, vulnerability analysis, and operational security guidance. Dark Reading's deep-dive articles on identity attacks inform our product research.

Long-established cybersecurity publication covering policy, threats, and defensive technologies. SC Media's executive-level analysis helps us understand the business impact of identity security decisions.

Publication for security leaders covering risk management, governance, and security strategy. CSO Online's perspective on security programmes helps IdentityFirst understand CISO priorities and challenges.

The UK National Cyber Security Centre provides authoritative guidance on cyber security for organisations of all sizes. The NCSC's Cyber Essentials, CAF, and incident response guidance directly inform IdentityFirst's compliance mapping.

The UK Information Commissioner's Office enforces data protection and privacy laws. ICO guidance on data security and breach notification shapes IdentityFirst's data handling capabilities and compliance features.

The US Cybersecurity and Infrastructure Security Agency provides cybersecurity resources, threat alerts, and resilience guidance. CISA's Known Exploited Vulnerabilities catalogue informs our vulnerability prioritisation logic.

Python libraries for identity and access management, including PyOIDC and oidc-op. These open source components support interoperability standards that IdentityFirst leverages for federation capabilities.

The MITRE ATT&CK framework provides a comprehensive matrix of adversary tactics and techniques. IdentityFirst uses ATT&CK to map detection capabilities and communicate threat coverage to security teams.

Game of Active Directory is an open source project for practicing AD security assessment. IdentityFirst uses GOAD as a reference environment for testing detection capabilities against realistic attack scenarios.