Identity and access management

ADVSEC01: How do you manage access to your advertising platform?

Managing access to an advertising platform remains a critical security concern, as it involves protecting potentially sensitive data, financial information, and programmatic access while maintaining appropriate permissions for authorized users.

Best practices

• ADVSEC01-BP01 Implement user authentication and access control to protect bidding process and content

• ADVSEC01-BP02 Restrict DSP access to allow only authorized SSPs

• ADVSEC01-BP03 Restrict DSP outbound traffic to authorized SSPs only

• ADVSEC01-BP04 Implement authorization by setting access policies, and implement least privilege access for users to protect programmatic advertising workloads