[{"data":1,"prerenderedAt":411},["ShallowReactive",2],{"collection-blogs--1729532487":3,"_apollo:default":410},{"data":4,"meta":407},[5],{"id":6,"title":7,"excerpt":8,"slug":9,"createdAt":10,"updatedAt":11,"publishedAt":12,"backDate":13,"documentId":14,"imageUrl":15,"expertises":61,"author":284,"blocks":310,"seo":392},644,"De blinde vlek in Zero Trust: identiteiten zonder mens","We vertrouwen steeds minder op netwerken en steeds meer op identiteit. MFA, conditional access en Zero Trust lijken dé oplossingen om grip te houden op wie toegang heeft tot wat. Toch is er één identiteitslaag die we structureel over het hoofd zien. En juist die vormt het grootste risico in moderne cloudomgevingen.\nIn deze blog lees je waar deze blinde vlek zit, waarom hij zo gevaarlijk is en wat je eraan kunt doen.","de-blinde-vlek-in-zero-trust-identiteiten-zonder-mens","2026-01-23T15:27:15.799Z","2026-02-20T09:08:12.474Z","2026-02-20T09:08:13.578Z","2026-01-27","c8cdx5q8x25upun5pxn3lwzh",{"id":16,"name":17,"alternativeText":18,"caption":18,"width":19,"height":20,"formats":21,"hash":55,"ext":23,"mime":26,"size":56,"url":57,"previewUrl":18,"provider":58,"provider_metadata":18,"createdAt":59,"updatedAt":59,"documentId":60,"publishedAt":59},1381,"Headerafb blog 1 van 4 Zero Trust.jpg",null,1280,500,{"large":22,"small":32,"medium":39,"thumbnail":47},{"ext":23,"url":24,"hash":25,"mime":26,"name":27,"path":18,"size":28,"width":29,"height":30,"sizeInBytes":31},".jpg","https://incredible-beef-2a6059b946.media.strapiapp.com/large_Headerafb_blog_1_van_4_Zero_Trust_046b9b3344.jpg","large_Headerafb_blog_1_van_4_Zero_Trust_046b9b3344","image/jpeg","large_Headerafb blog 1 van 4 Zero Trust.jpg",76.62,1000,391,76621,{"ext":23,"url":33,"hash":34,"mime":26,"name":35,"path":18,"size":36,"width":20,"height":37,"sizeInBytes":38},"https://incredible-beef-2a6059b946.media.strapiapp.com/small_Headerafb_blog_1_van_4_Zero_Trust_046b9b3344.jpg","small_Headerafb_blog_1_van_4_Zero_Trust_046b9b3344","small_Headerafb blog 1 van 4 Zero Trust.jpg",16.75,195,16752,{"ext":23,"url":40,"hash":41,"mime":26,"name":42,"path":18,"size":43,"width":44,"height":45,"sizeInBytes":46},"https://incredible-beef-2a6059b946.media.strapiapp.com/medium_Headerafb_blog_1_van_4_Zero_Trust_046b9b3344.jpg","medium_Headerafb_blog_1_van_4_Zero_Trust_046b9b3344","medium_Headerafb blog 1 van 4 Zero Trust.jpg",40.83,750,293,40828,{"ext":23,"url":48,"hash":49,"mime":26,"name":50,"path":18,"size":51,"width":52,"height":53,"sizeInBytes":54},"https://incredible-beef-2a6059b946.media.strapiapp.com/thumbnail_Headerafb_blog_1_van_4_Zero_Trust_046b9b3344.jpg","thumbnail_Headerafb_blog_1_van_4_Zero_Trust_046b9b3344","thumbnail_Headerafb blog 1 van 4 Zero Trust.jpg",4.34,245,96,4342,"Headerafb_blog_1_van_4_Zero_Trust_046b9b3344",127.65,"https://incredible-beef-2a6059b946.media.strapiapp.com/Headerafb_blog_1_van_4_Zero_Trust_046b9b3344.jpg","strapi-provider-upload-strapi-cloud","2026-01-26T09:47:28.009Z","pji3ovj6nhqg66x6r2w0ehzc",[62],{"id":63,"title":64,"subTitle":65,"description":66,"shortDescription":67,"slug":68,"createdAt":69,"updatedAt":70,"publishedAt":71,"isCoreExpertise":72,"documentId":73,"image":74,"blocks":94,"midPageBlocks":180,"seo":279},1,"Azure","Hét cloudcomputing platform van Microsoft","Azure is het cloudcomputing platform van Microsoft, dat zowel Infrastructure as a Service (IaaS) als Platform as a Service (PaaS) biedt. Met dit platform kun je applicaties ontwikkelen of een compleet netwerk hosten, en dit alles op een relatief eenvoudige manier beheren. Omdat Azure wordt gehost in managed datacenters over de hele wereld, kun je jouw netwerk of applicatie wereldwijd beschikbaar maken. Microsoft biedt daarnaast een breed scala aan services, zoals Internet of Things (IoT), Azure Kubernetes, Artificial Intelligence (AI) en oplossingen voor het gebruik van Big Data.\n\nOnze Azure consultants, engineers en cloud-architecten hebben ervaring met de ontwikkeling, implementatie en het beheer van de verschillende mogelijkheden die Microsoft Azure ons biedt. Hierbij leveren wij iedere keer maatwerk, want het programma van eisen ziet er telkens anders uit. Of het nu gaat om de ondersteuning van een Azure team of het volledige beheer, onze Azure experts staan voor je klaar. Meer over ons werk lees je onder andere in onze Azure [klantcases](/kennisbank/klantcases/azure) en [blogs](/kennisbank/blogs/azure).\n\n","Onze Azure consultants, engineers en cloud-architecten hebben ervaring met de ontwikkeling, implementatie en het beheer van de verschillende mogelijkheden die Microsoft Azure ons biedt.","azure","2023-08-17T09:47:20.996Z","2025-04-11T13:11:55.618Z","2023-08-17T09:50:22.095Z",true,"eubwn704tlyata6v2q819fn7",{"id":75,"name":76,"alternativeText":18,"caption":18,"width":77,"height":78,"formats":79,"hash":88,"ext":81,"mime":84,"size":89,"url":90,"previewUrl":18,"provider":58,"provider_metadata":18,"createdAt":91,"updatedAt":91,"documentId":92,"publishedAt":93},657,"mircosoft azure web.png",282,130,{"thumbnail":80},{"ext":81,"url":82,"hash":83,"mime":84,"name":85,"path":18,"size":86,"width":52,"height":87},".png","https://incredible-beef-2a6059b946.media.strapiapp.com/thumbnail_mircosoft_azure_web_031897ebac.png","thumbnail_mircosoft_azure_web_031897ebac","image/png","thumbnail_mircosoft azure web.png",5.54,113,"mircosoft_azure_web_031897ebac",1.49,"https://incredible-beef-2a6059b946.media.strapiapp.com/mircosoft_azure_web_031897ebac.png","2024-04-05T12:52:48.184Z","z9c21qscgi7eh5jijkc40fzv","2026-01-05T12:38:34.018Z",[95,157],{"__component":96,"id":97,"title":98,"aside":18,"postType":99,"limit":100,"expertise":101},"strapi.related-kennisbank-list",165,"Lees meer over Azure","alle",3,[102],{"id":63,"title":64,"subTitle":65,"description":66,"shortDescription":67,"slug":68,"createdAt":69,"updatedAt":70,"publishedAt":71,"isCoreExpertise":72,"documentId":73,"image":103,"blocks":106,"midPageBlocks":117,"seo":141},{"id":75,"name":76,"alternativeText":18,"caption":18,"width":77,"height":78,"formats":104,"hash":88,"ext":81,"mime":84,"size":89,"url":90,"previewUrl":18,"provider":58,"provider_metadata":18,"createdAt":91,"updatedAt":91,"documentId":92,"publishedAt":93},{"thumbnail":105},{"ext":81,"url":82,"hash":83,"mime":84,"name":85,"path":18,"size":86,"width":52,"height":87},[107,108],{"__component":96,"id":97,"title":98,"aside":18,"postType":99,"limit":100},{"__component":109,"id":110,"titleLeft":111,"callToActionTextLeft":112,"callToActionLinkUrlLeft":113,"titleRight":114,"callToActionTextRight":115,"callToActionLinkUrlRight":116},"call-to-action.double",209,"Heb je een Azure expert nodig?","Neem contact met ons op","/contact","Zoek je een nieuwe baan?","Bekijk onze vacatures","/word-onze-collega/vacatures",[118,126,131,135],{"__component":119,"id":120,"title":121,"subTitle":18,"content":122,"callToActionText":123,"callToActionLink":113,"colorStyle":124,"showAsides":125},"global.alternating-page-section",25,"Azure Security: veiligheid in de cloud ","Voor organisaties is het belangrijk om de digitale infrastructuur te beveiligen in een steeds complexer wordend cyberlandschap. Onze experts helpen graag met behulp van Azure Security; een reeks beveiligingsdiensten en -functies die door Microsoft Azure wordt aangeboden om bedreigingen te detecteren, te voorkomen en erop te reageren. Enkele belangrijke componenten en functies van Azure Security waarmee wij werken zijn Azure Security Center, Microsoft Entra ID, Azure DDoS Protection en Azure Sentinel.","Neem contact op voor meer informatie","Sugar Glaze",false,{"__component":119,"id":127,"title":128,"subTitle":18,"content":129,"callToActionText":18,"callToActionLink":18,"colorStyle":130,"showAsides":125},26,"Azure Kubernetes Service (AKS)","Azure Kubernetes Service (AKS) helpt bij het beheren van applicaties die in containers draaien. Het vereenvoudigt en automatiseert de implementatie, het beheer en de operationele taken van Kubernetes-clusters. Door gebruik te maken van AKS kunnen organisaties zich richten op het ontwikkelen en beheren van hun applicaties, terwijl Microsoft de complexiteit van de Kubernetes-infrastructuur beheert. Hierdoor kunnen organisaties hun software efficiënt, betrouwbaar en kosteneffectief beheren. Doordat onze experts ruime kennis en ervaring hebben met AKS kunnen ze de klanten op een juiste manier helpen.","White",{"__component":119,"id":132,"title":133,"subTitle":18,"content":134,"callToActionText":18,"callToActionLink":18,"colorStyle":124,"showAsides":125},24,"Infrastructure as Code (IaC)","Infrastructure as Code (IaC) is het beheren van een Azure cloud-omgeving door middel van code en softwareontwikkelingstechnieken om infrastructuur te automatiseren, te configureren en te beheren. Het biedt versiebeheer voor configuraties, wat samenwerking en terugkeer naar eerdere versies vergemakkelijkt. Bovendien zorgt IaC voor consistentie in verschillende omgevingen en maakt het schaalvergroting eenvoudiger door configuraties te herhalen zonder handmatige ingrepen. \n\nAls je vragen hebt of ondersteuning nodig hebt, kunnen de Azure Experts je alles vertellen over Infrastructure as Code.",{"__component":136,"id":137,"title":138,"callToActionText":139,"callToActionLinkUrl":140,"body":18},"call-to-action.single",94,"Wil je weten wat onze collega's allemaal kunnen?","Lees de klantcase over ons werk bij Stichting Inlichtingenbureau","/klantcases/stichting-inlichtingenbureau-kiest-voor-migratie-naar-microsoft-azure",{"id":132,"metaTitle":142,"metaDescription":143,"structuredData":144},"Microsoft Azure-expertise – ShareValue helpt je vooruit","Van beheer tot DevOps: onze Azure-specialisten helpen je om cloudoplossingen slim en veilig in te richten en te optimaliseren.",{"url":145,"@type":146,"@context":147,"provider":148,"areaServed":152,"description":155,"serviceType":156},"https://www.sharevalue.nl/wat-we-doen/azure","Service","https://schema.org",{"url":149,"name":150,"@type":151},"https://www.sharevalue.nl","ShareValue","Organization",{"name":153,"@type":154},"Nederland","Country","ShareValue helpt organisaties om Microsoft Azure effectief in te zetten. Onze specialisten werken aan cloudmigraties, infrastructuur, security, automation en DevOps-oplossingen.","Microsoft Azure consultancy",{"__component":109,"id":110,"titleLeft":111,"callToActionTextLeft":112,"callToActionLinkUrlLeft":113,"titleRight":114,"callToActionTextRight":115,"callToActionLinkUrlRight":116,"iconUrlLeft":158,"iconUrlRight":171},{"id":159,"name":160,"alternativeText":18,"caption":18,"width":161,"height":162,"formats":18,"hash":163,"ext":164,"mime":165,"size":166,"url":167,"previewUrl":18,"provider":58,"provider_metadata":18,"createdAt":168,"updatedAt":169,"documentId":170,"publishedAt":93},6,"bulb.svg",71,70,"bulb_dd2e1d4efb",".svg","image/svg+xml",3.75,"https://incredible-beef-2a6059b946.media.strapiapp.com/bulb_dd2e1d4efb.svg","2023-08-17T08:31:37.036Z","2025-04-01T14:08:08.648Z","l2lglwkh4lf7ip36sjvs42rc",{"id":172,"name":173,"alternativeText":18,"caption":18,"width":162,"height":162,"formats":18,"hash":174,"ext":164,"mime":165,"size":175,"url":176,"previewUrl":18,"provider":58,"provider_metadata":18,"createdAt":177,"updatedAt":178,"documentId":179,"publishedAt":93},8,"briefcase.svg","briefcase_679abae475",4.49,"https://incredible-beef-2a6059b946.media.strapiapp.com/briefcase_679abae475.svg","2023-08-17T08:31:37.038Z","2025-01-24T15:53:51.531Z","bfdftlvwhj35dm37dzv4aujf",[181,217,247,277],{"__component":119,"id":120,"title":121,"subTitle":18,"content":122,"callToActionText":123,"callToActionLink":113,"colorStyle":124,"showAsides":125,"imageUrl":182},{"id":183,"name":184,"alternativeText":18,"caption":18,"width":19,"height":185,"formats":186,"hash":212,"ext":23,"mime":26,"size":213,"url":214,"previewUrl":18,"provider":58,"provider_metadata":18,"createdAt":215,"updatedAt":215,"documentId":216,"publishedAt":93},779,"security azure.jpg",850,{"large":187,"small":193,"medium":199,"thumbnail":205},{"ext":23,"url":188,"hash":189,"mime":26,"name":190,"path":18,"size":191,"width":29,"height":192},"https://incredible-beef-2a6059b946.media.strapiapp.com/large_security_azure_b1610cf1cb.jpg","large_security_azure_b1610cf1cb","large_security azure.jpg",107.3,664,{"ext":23,"url":194,"hash":195,"mime":26,"name":196,"path":18,"size":197,"width":20,"height":198},"https://incredible-beef-2a6059b946.media.strapiapp.com/small_security_azure_b1610cf1cb.jpg","small_security_azure_b1610cf1cb","small_security azure.jpg",39.16,332,{"ext":23,"url":200,"hash":201,"mime":26,"name":202,"path":18,"size":203,"width":44,"height":204},"https://incredible-beef-2a6059b946.media.strapiapp.com/medium_security_azure_b1610cf1cb.jpg","medium_security_azure_b1610cf1cb","medium_security azure.jpg",71.35,498,{"ext":23,"url":206,"hash":207,"mime":26,"name":208,"path":18,"size":209,"width":210,"height":211},"https://incredible-beef-2a6059b946.media.strapiapp.com/thumbnail_security_azure_b1610cf1cb.jpg","thumbnail_security_azure_b1610cf1cb","thumbnail_security azure.jpg",12.37,235,156,"security_azure_b1610cf1cb",150.42,"https://incredible-beef-2a6059b946.media.strapiapp.com/security_azure_b1610cf1cb.jpg","2024-08-08T08:50:26.921Z","z3xlbivuior2upad6adbxjgz",{"__component":119,"id":127,"title":128,"subTitle":18,"content":129,"callToActionText":18,"callToActionLink":18,"colorStyle":130,"showAsides":125,"imageUrl":218},{"id":219,"name":220,"alternativeText":18,"caption":18,"width":19,"height":185,"formats":221,"hash":242,"ext":23,"mime":26,"size":243,"url":244,"previewUrl":18,"provider":58,"provider_metadata":18,"createdAt":245,"updatedAt":245,"documentId":246,"publishedAt":93},780,"containers.jpg",{"large":222,"small":227,"medium":232,"thumbnail":237},{"ext":23,"url":223,"hash":224,"mime":26,"name":225,"path":18,"size":226,"width":29,"height":192},"https://incredible-beef-2a6059b946.media.strapiapp.com/large_containers_2e766510ad.jpg","large_containers_2e766510ad","large_containers.jpg",163.19,{"ext":23,"url":228,"hash":229,"mime":26,"name":230,"path":18,"size":231,"width":20,"height":198},"https://incredible-beef-2a6059b946.media.strapiapp.com/small_containers_2e766510ad.jpg","small_containers_2e766510ad","small_containers.jpg",49.69,{"ext":23,"url":233,"hash":234,"mime":26,"name":235,"path":18,"size":236,"width":44,"height":204},"https://incredible-beef-2a6059b946.media.strapiapp.com/medium_containers_2e766510ad.jpg","medium_containers_2e766510ad","medium_containers.jpg",101.49,{"ext":23,"url":238,"hash":239,"mime":26,"name":240,"path":18,"size":241,"width":210,"height":211},"https://incredible-beef-2a6059b946.media.strapiapp.com/thumbnail_containers_2e766510ad.jpg","thumbnail_containers_2e766510ad","thumbnail_containers.jpg",12.65,"containers_2e766510ad",240.51,"https://incredible-beef-2a6059b946.media.strapiapp.com/containers_2e766510ad.jpg","2024-08-08T08:54:58.426Z","idshbfmg66aak9yxdr9d22c7",{"__component":119,"id":132,"title":133,"subTitle":18,"content":134,"callToActionText":18,"callToActionLink":18,"colorStyle":124,"showAsides":125,"imageUrl":248},{"id":249,"name":250,"alternativeText":18,"caption":18,"width":19,"height":185,"formats":251,"hash":272,"ext":23,"mime":26,"size":273,"url":274,"previewUrl":18,"provider":58,"provider_metadata":18,"createdAt":275,"updatedAt":275,"documentId":276,"publishedAt":93},781,"infrastructure.jpg",{"large":252,"small":257,"medium":262,"thumbnail":267},{"ext":23,"url":253,"hash":254,"mime":26,"name":255,"path":18,"size":256,"width":29,"height":192},"https://incredible-beef-2a6059b946.media.strapiapp.com/large_infrastructure_bf66532759.jpg","large_infrastructure_bf66532759","large_infrastructure.jpg",246.61,{"ext":23,"url":258,"hash":259,"mime":26,"name":260,"path":18,"size":261,"width":20,"height":198},"https://incredible-beef-2a6059b946.media.strapiapp.com/small_infrastructure_bf66532759.jpg","small_infrastructure_bf66532759","small_infrastructure.jpg",69.57,{"ext":23,"url":263,"hash":264,"mime":26,"name":265,"path":18,"size":266,"width":44,"height":204},"https://incredible-beef-2a6059b946.media.strapiapp.com/medium_infrastructure_bf66532759.jpg","medium_infrastructure_bf66532759","medium_infrastructure.jpg",149.51,{"ext":23,"url":268,"hash":269,"mime":26,"name":270,"path":18,"size":271,"width":210,"height":211},"https://incredible-beef-2a6059b946.media.strapiapp.com/thumbnail_infrastructure_bf66532759.jpg","thumbnail_infrastructure_bf66532759","thumbnail_infrastructure.jpg",15.74,"infrastructure_bf66532759",374.88,"https://incredible-beef-2a6059b946.media.strapiapp.com/infrastructure_bf66532759.jpg","2024-08-08T08:58:52.414Z","bmkl03ingwf6ms8pdk5jvmx5",{"__component":136,"id":137,"title":138,"callToActionText":139,"callToActionLinkUrl":140,"body":18,"imageUrl":278},{"id":159,"name":160,"alternativeText":18,"caption":18,"width":161,"height":162,"formats":18,"hash":163,"ext":164,"mime":165,"size":166,"url":167,"previewUrl":18,"provider":58,"provider_metadata":18,"createdAt":168,"updatedAt":169,"documentId":170,"publishedAt":93},{"id":132,"metaTitle":142,"metaDescription":143,"structuredData":280,"metaImage":18,"metaSocial":283},{"url":145,"@type":146,"@context":147,"provider":281,"areaServed":282,"description":155,"serviceType":156},{"url":149,"name":150,"@type":151},{"name":153,"@type":154},[],{"id":285,"name":286,"jobTitle":287,"about":18,"createdAt":288,"updatedAt":289,"publishedAt":290,"documentId":291,"image":292,"contactOptions":309},36,"Gert","Engineer & Architect","2023-08-18T08:37:46.157Z","2024-03-18T14:39:44.060Z","2023-08-18T08:37:45.403Z","issofzsvhgrwftfjuizdg4ac",{"id":293,"name":294,"alternativeText":18,"caption":18,"width":295,"height":296,"formats":297,"hash":304,"ext":81,"mime":84,"size":305,"url":306,"previewUrl":18,"provider":58,"provider_metadata":18,"createdAt":307,"updatedAt":307,"documentId":308,"publishedAt":93},604,"Gert websitefoto.png",278,326,{"thumbnail":298},{"ext":81,"url":299,"hash":300,"mime":84,"name":301,"path":18,"size":302,"width":303,"height":211},"https://incredible-beef-2a6059b946.media.strapiapp.com/thumbnail_Gert_websitefoto_cab2bacf46.png","thumbnail_Gert_websitefoto_cab2bacf46","thumbnail_Gert websitefoto.png",20.16,133,"Gert_websitefoto_cab2bacf46",21.32,"https://incredible-beef-2a6059b946.media.strapiapp.com/Gert_websitefoto_cab2bacf46.png","2024-03-18T14:38:40.376Z","x8md4b4efqc3aih2mw7g0ro3",[],[311,315,318,321,324,327,330,333,336,339,343,348],{"__component":312,"id":313,"title":18,"asideText":18,"underline":125,"centered":125,"blankAside":125,"aside":18,"content":314,"introductionText":18},"global.pagesection",4600,"## De ongemakkelijke realiteit\nVeel organisaties zijn ervan overtuigd dat ze identity goed hebben ingeregeld. \n- MFA is ingeschakeld met extra verificatie voor gebruikers.\n- Conditional Access is uitgerold met regels die bepalen wanneer en hoe gebruikers toegang krijgen.\n- Zero Trust staat op de roadmap  of wordt zelfs als “af” beschouwd.\n\nEn toch draait een groot deel van de cloudomgeving op identiteiten die:\n- nooit inloggen: ze authenticeren automatisch, zonder menselijke interactie.\n- nooit MFA gebruiken: extra verificatie is voor deze identiteiten meestal niet mogelijk.\n- en zelden expliciet worden gecontroleerd: ze blijven bestaan en behouden rechten, ook als de workload verandert.\n\nDat is geen randverschijnsel. Dat is de grootste onbewaakte aanvalsvector in moderne cloudomgevingen.\nIn eerdere blogs heb ik geschreven over Zero Trust als fundament, over de impact van AI en over waarom klassieke netwerkbeveiliging tekortschiet. Eén conclusie kwam steeds terug: vertrouwen verschuift weg van het netwerk en richting identiteit. In dit blog zoom ik daarom in op wat daarbij structureel wordt genegeerd: identiteiten die geen mens zijn.\n\n![Blinde vlek Zero Trust afbeelding 1.png](https://incredible-beef-2a6059b946.media.strapiapp.com/Blinde_vlek_Zero_Trust_afbeelding_1_5e74130da0.png)",{"__component":312,"id":316,"title":18,"asideText":18,"underline":125,"centered":125,"blankAside":125,"aside":18,"content":317,"introductionText":18},4601,"## Identity ≠ gebruikers\nJarenlang hebben we security ingericht rond gebruikers. Accounts, MFA, conditional access, alles is ontworpen voor mensen die bewust inloggen. Maar moderne omgevingen draaien allang niet meer alleen op mensen.\nCloud workloads, automatisering, CI/CD pipelines en AI-toepassingen functioneren via identiteiten die autonoom handelen. Ze vragen geen toestemming, klikken niet verkeerd en melden zich niet bij de servicedesk. Ze doen gewoon wat ze mogen doen.\nEn precies daar wringt het. Als identity de nieuwe perimeter is, dan bewaken we die perimeter vandaag vooral voor gebruikers. Niet voor wat namens hen opereert.",{"__component":312,"id":319,"title":18,"asideText":18,"underline":125,"centered":125,"blankAside":125,"aside":18,"content":320,"introductionText":18},4602,"## Identity als nieuw control plane binnen Zero Trust\nZero Trust heeft duidelijk gemaakt dat netwerkgrenzen onvoldoende bescherming bieden. Vertrouwen wordt niet langer bepaald door waar iets vandaan komt, maar door wie of wat toegang vraagt, in welke context.\n\nDaarmee is identity het centrale control plane geworden voor:\n- Toegang tot data: Wie of wat mag gevoelige informatie lezen, wijzigen of verwerken.\n- Toegang tot workloads: Welke applicaties, services of processen mogen resources gebruiken of beheren.\n- Communicatie tussen services: Welke systemen onderling mogen praten en welke acties daarbij zijn toegestaan.\n\nIn theorie geldt dit identiteitsmodel voor alle entiteiten in een omgeving, mensen én systemen. In de praktijk wordt Zero Trust echter bijna altijd user-centric geïmplementeerd.\nDat is geen tekortkoming van Zero Trust als model. Het is een bewuste, en risicovolle, vereenvoudiging in de uitvoering.",{"__component":312,"id":322,"title":18,"asideText":18,"underline":125,"centered":125,"blankAside":125,"aside":18,"content":323,"introductionText":18},4603,"## De explosie van non-human identities\nElke moderne cloudomgeving bevat een groeiend aantal identiteiten die geen mens zijn:\n- Service principals: Technische accounts die applicaties of services gebruiken om toegang te krijgen tot cloudresources, vaak met vaste en brede rechten.\n- Managed identities: Door het platform beheerde identiteiten waarmee workloads zich authenticeren zonder wachtwoorden of secrets.\n- API-identiteiten: Identiteiten die gebruikt worden voor communicatie tussen systemen, applicaties of externe diensten.\n- Automatisering en scripts: Identiteiten die worden gebruikt door geplande taken, scripts en beheerprocessen om wijzigingen door te voeren.\n- CI/CD pipelines: Identiteiten waarmee build- en deploymentprocessen code uitrollen naar cloudomgevingen.\n- AI-agents en workloads: Autonome processen die data ophalen, modellen trainen of acties uitvoeren zonder directe menselijke interactie.\n\nIn veel organisaties zijn deze identiteiten inmiddels talrijker dan gebruikersaccounts. Ze worden automatisch aangemaakt, snel aangepast en zelden actief beheerd.\nZe zijn essentieel voor schaal en snelheid. Maar ze groeien sneller dan ons beveiligingsdenken en vaak zonder expliciete ontwerpkeuzes.\n\n![Blinde vlek Zero Trust afbeelding 2.png](https://incredible-beef-2a6059b946.media.strapiapp.com/Blinde_vlek_Zero_Trust_afbeelding_2_d2b936bd12.png)",{"__component":312,"id":325,"title":18,"asideText":18,"underline":125,"centered":125,"blankAside":125,"aside":18,"content":326,"introductionText":18},4604,"## Waarom non-human identities gevaarlijker zijn dan gebruikers\nNon-human identities zijn niet per definitie onveilig. Ze worden gevaarlijk door de manier waarop we ermee omgaan.\n\nTypische kenmerken:\n- Geen MFA: Deze identiteiten kunnen niet extra worden beschermd met gebruikersmaatregelen zoals MFA.\n- Langlevende tokens en permissies: Toegang blijft vaak maanden of jaren geldig, ongeacht of de workload nog bestaat.\n- Onduidelijk eigenaarschap: Het is vaak niet duidelijk welk team of welke persoon verantwoordelijk is.\n- Minimale monitoring: Misbruik of afwijkend gedrag blijft lang onopgemerkt.\n- ‘Set-and-forget’-configuraties: Eenmaal ingericht worden rechten zelden opnieuw bekeken.\n\nEen gebruiker kan een fout maken en dat valt meestal op. Een service principal met te ruime rechten maakt geen fouten. Die doet exact wat hij mag doen. En dat is vaak veel te veel, voor veel te lang, zonder dat iemand het merkt.\nIdentity-security faalt hier niet spectaculair, maar stilletjes, totdat incident response ineens geen gebruikersaccount onderzoekt, maar een workload. Dit is het punt waarop teams zich vaak realiseren dat ze dit risico al jaren met zich meedragen.",{"__component":312,"id":328,"title":18,"asideText":18,"underline":125,"centered":125,"blankAside":125,"aside":18,"content":329,"introductionText":18},4605,"\n## Waarom dit ook kleine organisaties raakt\nDit probleem beperkt zich niet tot grote enterprises. Ook kleine organisaties maken dagelijks gebruik van:\n- Cloud-automatisering: Processen die automatisch resources aanmaken, wijzigen of verwijderen zonder menselijke tussenkomst.\n- API-integraties: Koppelingen tussen interne systemen en externe diensten die continu toegang nodig hebben.\n- Scripts met verhoogde rechten: Technische scripts die beheeracties uitvoeren en vaak meer rechten hebben dan strikt noodzakelijk.\n- AI-experimenten: Proof-of-concepts en pilots die data ophalen of acties uitvoeren, meestal zonder volwassen governance.\n\nSterker nog: in kleinere omgevingen groeit dit risico vaak sneller, omdat snelheid en flexibiliteit belangrijker zijn dan formele controlemechanismen.\n\nTegelijkertijd hebben kleine organisaties hier juist een voordeel:\n- Minder legacy: Minder verouderde systemen en uitzonderingen die beveiliging complex maken.\n- Minder uitzonderingen: Beleid en toegangsregels zijn eenvoudiger en consistenter toe te passen.\n- Sneller overzicht: Het aantal workloads en identiteiten is beperkt en daardoor beter beheersbaar.\n\nZero Trust voor non-human identities is daarom geen luxe voor grote organisaties. Het is een noodzakelijke discipline in elke cloudomgeving, juist ook in kleine teams.",{"__component":312,"id":331,"title":18,"asideText":18,"underline":125,"centered":125,"blankAside":125,"aside":18,"content":332,"introductionText":18},4606,"## Wat je vandaag al zou moeten weten\nDit blog is bewust geen handleiding. Maar er zijn een paar dingen die elke organisatie, groot of klein, nu al zou moeten kunnen beantwoorden. Zonder tooling-project. Zonder redesign.\nAls je deze vragen niet kunt beantwoorden, heb je geen zicht op je identiteitsperimeter.\n- Kun je alle non-human identities in je omgeving benoemen?\n- Weet je welke workloads welke identiteit gebruiken?\n- Is voor elke non-human identity een eigenaar aangewezen?\n- Kun je zien wanneer en waar een identity wordt gebruikt?\n- Kun je met zekerheid zeggen welke identiteiten productie-toegang hebben?\n\nDit zijn geen maturity-vragen. Dit zijn basisvoorwaarden voor Zero Trust. Zonder dit inzicht is Zero Trust geen strategie, maar een aanname.\nAls het antwoord hierop “nee” is, dan is Zero Trust in jouw omgeving, hoe goed bedoeld ook, fundamenteel incompleet.\n\n![Blinde vlek Zero Trust afbeelding 3.png](https://incredible-beef-2a6059b946.media.strapiapp.com/Blinde_vlek_Zero_Trust_afbeelding_3_f930e53074.png)",{"__component":312,"id":334,"title":18,"asideText":18,"underline":125,"centered":125,"blankAside":125,"aside":18,"content":335,"introductionText":18},4607,"## Conclusie:\nZero Trust faalt niet omdat het concept tekortschiet. Het faalt wanneer we identity blijven reduceren tot gebruikers.\nTerwijl cloudplatformen en AI-systemen steeds autonomer worden, groeit het aantal identiteiten dat namens ons handelt zonder expliciete controle, zonder duidelijke grenzen en vaak zonder duidelijke eigenaar. Wie Zero Trust serieus neemt, moet voorbij de mens durven kijken.\n\nIn de volgende blog maken we de stap van inzicht naar ontwerp: hoe pas je Zero Trust-principes toe op non-human identities zonder ze te behandelen als uitzonderingen?\nNiet als theoretisch model, maar als bewuste architectuurkeuze.\n\n",{"__component":337,"id":338,"title":18,"showBlankAside":125},"global.social-sharing",529,{"__component":340,"id":341,"name":286,"jobTitle":342},"strapi.author-card",413,"Azure Architect",{"__component":109,"id":344,"titleLeft":111,"callToActionTextLeft":112,"callToActionLinkUrlLeft":113,"titleRight":345,"callToActionTextRight":115,"callToActionLinkUrlRight":116,"iconUrlLeft":346,"iconUrlRight":347},618,"Wil je onze collega worden?",{"id":159,"name":160,"alternativeText":18,"caption":18,"width":161,"height":162,"formats":18,"hash":163,"ext":164,"mime":165,"size":166,"url":167,"previewUrl":18,"provider":58,"provider_metadata":18,"createdAt":168,"updatedAt":169,"documentId":170,"publishedAt":93},{"id":172,"name":173,"alternativeText":18,"caption":18,"width":162,"height":162,"formats":18,"hash":174,"ext":164,"mime":165,"size":175,"url":176,"previewUrl":18,"provider":58,"provider_metadata":18,"createdAt":177,"updatedAt":178,"documentId":179,"publishedAt":93},{"__component":96,"id":349,"title":98,"aside":18,"postType":350,"limit":100,"expertise":351},461,"blogs",[352],{"id":63,"title":64,"subTitle":65,"description":66,"shortDescription":67,"slug":68,"createdAt":69,"updatedAt":70,"publishedAt":71,"isCoreExpertise":72,"documentId":73,"image":353,"blocks":356,"midPageBlocks":363,"seo":387},{"id":75,"name":76,"alternativeText":18,"caption":18,"width":77,"height":78,"formats":354,"hash":88,"ext":81,"mime":84,"size":89,"url":90,"previewUrl":18,"provider":58,"provider_metadata":18,"createdAt":91,"updatedAt":91,"documentId":92,"publishedAt":93},{"thumbnail":355},{"ext":81,"url":82,"hash":83,"mime":84,"name":85,"path":18,"size":86,"width":52,"height":87},[357,360],{"__component":96,"id":97,"title":98,"aside":18,"postType":99,"limit":100,"expertise":358},[359],{"id":63,"title":64,"subTitle":65,"description":66,"shortDescription":67,"slug":68,"createdAt":69,"updatedAt":70,"publishedAt":71,"isCoreExpertise":72,"documentId":73},{"__component":109,"id":110,"titleLeft":111,"callToActionTextLeft":112,"callToActionLinkUrlLeft":113,"titleRight":114,"callToActionTextRight":115,"callToActionLinkUrlRight":116,"iconUrlLeft":361,"iconUrlRight":362},{"id":159,"name":160,"alternativeText":18,"caption":18,"width":161,"height":162,"formats":18,"hash":163,"ext":164,"mime":165,"size":166,"url":167,"previewUrl":18,"provider":58,"provider_metadata":18,"createdAt":168,"updatedAt":169,"documentId":170,"publishedAt":93},{"id":172,"name":173,"alternativeText":18,"caption":18,"width":162,"height":162,"formats":18,"hash":174,"ext":164,"mime":165,"size":175,"url":176,"previewUrl":18,"provider":58,"provider_metadata":18,"createdAt":177,"updatedAt":178,"documentId":179,"publishedAt":93},[364,371,378,385],{"__component":119,"id":120,"title":121,"subTitle":18,"content":122,"callToActionText":123,"callToActionLink":113,"colorStyle":124,"showAsides":125,"imageUrl":365},{"id":183,"name":184,"alternativeText":18,"caption":18,"width":19,"height":185,"formats":366,"hash":212,"ext":23,"mime":26,"size":213,"url":214,"previewUrl":18,"provider":58,"provider_metadata":18,"createdAt":215,"updatedAt":215,"documentId":216,"publishedAt":93},{"large":367,"small":368,"medium":369,"thumbnail":370},{"ext":23,"url":188,"hash":189,"mime":26,"name":190,"path":18,"size":191,"width":29,"height":192},{"ext":23,"url":194,"hash":195,"mime":26,"name":196,"path":18,"size":197,"width":20,"height":198},{"ext":23,"url":200,"hash":201,"mime":26,"name":202,"path":18,"size":203,"width":44,"height":204},{"ext":23,"url":206,"hash":207,"mime":26,"name":208,"path":18,"size":209,"width":210,"height":211},{"__component":119,"id":127,"title":128,"subTitle":18,"content":129,"callToActionText":18,"callToActionLink":18,"colorStyle":130,"showAsides":125,"imageUrl":372},{"id":219,"name":220,"alternativeText":18,"caption":18,"width":19,"height":185,"formats":373,"hash":242,"ext":23,"mime":26,"size":243,"url":244,"previewUrl":18,"provider":58,"provider_metadata":18,"createdAt":245,"updatedAt":245,"documentId":246,"publishedAt":93},{"large":374,"small":375,"medium":376,"thumbnail":377},{"ext":23,"url":223,"hash":224,"mime":26,"name":225,"path":18,"size":226,"width":29,"height":192},{"ext":23,"url":228,"hash":229,"mime":26,"name":230,"path":18,"size":231,"width":20,"height":198},{"ext":23,"url":233,"hash":234,"mime":26,"name":235,"path":18,"size":236,"width":44,"height":204},{"ext":23,"url":238,"hash":239,"mime":26,"name":240,"path":18,"size":241,"width":210,"height":211},{"__component":119,"id":132,"title":133,"subTitle":18,"content":134,"callToActionText":18,"callToActionLink":18,"colorStyle":124,"showAsides":125,"imageUrl":379},{"id":249,"name":250,"alternativeText":18,"caption":18,"width":19,"height":185,"formats":380,"hash":272,"ext":23,"mime":26,"size":273,"url":274,"previewUrl":18,"provider":58,"provider_metadata":18,"createdAt":275,"updatedAt":275,"documentId":276,"publishedAt":93},{"large":381,"small":382,"medium":383,"thumbnail":384},{"ext":23,"url":253,"hash":254,"mime":26,"name":255,"path":18,"size":256,"width":29,"height":192},{"ext":23,"url":258,"hash":259,"mime":26,"name":260,"path":18,"size":261,"width":20,"height":198},{"ext":23,"url":263,"hash":264,"mime":26,"name":265,"path":18,"size":266,"width":44,"height":204},{"ext":23,"url":268,"hash":269,"mime":26,"name":270,"path":18,"size":271,"width":210,"height":211},{"__component":136,"id":137,"title":138,"callToActionText":139,"callToActionLinkUrl":140,"body":18,"imageUrl":386},{"id":159,"name":160,"alternativeText":18,"caption":18,"width":161,"height":162,"formats":18,"hash":163,"ext":164,"mime":165,"size":166,"url":167,"previewUrl":18,"provider":58,"provider_metadata":18,"createdAt":168,"updatedAt":169,"documentId":170,"publishedAt":93},{"id":132,"metaTitle":142,"metaDescription":143,"structuredData":388,"metaImage":18,"metaSocial":391},{"url":145,"@type":146,"@context":147,"provider":389,"areaServed":390,"description":155,"serviceType":156},{"url":149,"name":150,"@type":151},{"name":153,"@type":154},[],{"id":393,"metaTitle":394,"metaDescription":395,"structuredData":396,"metaImage":18,"metaSocial":406},582,"Zero Trust voorbij de mens: identiteitslaag | ShareValue","Identiteiten zonder mens vormen een risico binnen Zero Trust. Lees waarom service accounts en workloads extra aandacht vragen in je securitystrategie.",{"url":397,"@type":398,"author":399,"@context":147,"headline":400,"publisher":401,"articleBody":405,"description":395,"mainEntityOfPage":397},"https://sharevalue.nl/#/blogs/de-blinde-vlek-in-zero-trust-identiteiten-zonder-mens","BlogPosting",{"name":150,"@type":151},"De blinde vlek in Zero Trust: identiteiten",{"logo":402,"name":150,"@type":151},{"url":403,"@type":404},"https://www.sharevalue.nl/_nuxt/img/sharevalue-logo.3c5e7cb.svg","ImageObject","Zero Trust richt zich vaak op menselijke identiteiten, terwijl identiteiten zonder mens – zoals service accounts, applicaties en workloads – minstens zo kritisch zijn. In dit artikel gaan we in op deze blinde vlek en laten we zien waarom juist deze identiteiten een essentieel onderdeel moeten zijn van je Zero Trust-aanpak.",[],{"pagination":408},{"page":63,"pageSize":409},100,{},1780406935307]