Stay ConnectedIdentity at the Center is a weekly podcast all about identity security in the context of identity and access management (IAM). With decades of real-world IAM experience, hosts Jim McDonald and Jeff Steadman bring you conversations with news, topics, and guests from the identity management industry. Do you know who has access to what?
Visit us on the web at idacpodcast.com
Copyright: © 771327
In this episode of the Identity at the Center Podcast, hosts Jeff and Jim discuss with Simon Moffatt, founder of The Cyber Hut and identity researcher, the integral role of identity in security, productivity, and online services. They dive into Simon's journey in the identity space, the importance of fresh analytical tools, and his new book, 'IAM at 2035,' which delves into the future of identity security. The discussion also covers AI's impact on consulting and identity, the importance of non-human identities being tied to carbon life forms, and potential scenarios of AI taking over various roles. The episode wraps up with a light-hearted chat about potential fictional writing endeavors.
Timestamps
00:00 The Importance of Identity in Technology01:53 Podcast Introduction and Listener Engagement04:57 Conference Announcements and Exciting Events07:47 Guest Introduction: Simon Moffatt10:34 Simon's Journey into Identity and Access Management17:22 The Cyber Hut and Emerging Technologies19:19 Content Creation and Writing Process23:30 The Analyst Brief Podcast25:50 Moffatt's Laws of Identity Security32:40 The Importance of Accountability in AI33:07 Autonomous Decision Making and Accountability35:11 AI's Impact on Jobs and Consulting37:14 The Future of AI and Human Creativity40:22 Challenges and Opportunities in AI43:32 Introducing the Book: IAM at 203556:59 Writing and Creativity: Fictional Ideas01:06:15 Conclusion and Final Thoughts
Connect with Simon: https://www.linkedin.com/in/simonmoffatt/
The Cyber Hut: https://www.thecyberhut.com/
IAM Radar: https://iamradar.thecyberhut.com/
The Analyst Brief Podcast: https://creators.spotify.com/pod/profile/the-cyber-hut/
IAM at 2035 Book: https://us.amazon.com/IAM-2035-Future-Identity-Security-ebook/dp/B0D2516SQP
Conference Discounts!
European Identity and Cloud Conference 2025 - Use code idac25mko for 25% off: https://www.kuppingercole.com/events/eic2025?ref=partneridac
Identiverse 2025 - Use code IDV25-IDAC25 for 25% off: https://identiverse.com/
Connect with us on LinkedIn:
Jim McDonald: https://www.linkedin.com/in/jimmcdonaldpmp/
Jeff Steadman: https://www.linkedin.com/in/jeffsteadman/
Visit the show on the web at http://idacpodcast.com
Keywords:
IAM, identity and access management, Simon Moffatt, The Cyber Hut, IAM at 2035, Moffatt Laws, digital identity, identity security, AI accountability, AI and identity, identity podcast, Jeff Steadman, Jim McDonald, identity at the center, IdentiSquabble, identity consulting, future of IAM, identity trends, identity conference
Sponsored by Veza. Visit veza.com/idac for more info.
In this sponsored episode of the Identity at the Center Podcast, hosts Jeff and Jim welcome Tarun Thakur, the co-founder and CEO of Veza, and Phil Venables, a strategic security advisor with Google and board director for Veza. The discussion spans the critical role of identity security in modern organizations, the innovative solutions offered by Veza's Access Graph, and the challenges posed by both human and non-human identities. They delve into the evolving landscape of privilege access management (PAM), the transformative potential of AI in identity security, and actionable steps organizations can take to achieve least privilege and reduce risk. The episode also highlights Veza's recent $108 million Series D investment, underscoring its mission to build the next-generation identity platform.
Chapters
00:00 Understanding Privilege in Organizations
02:10 Introduction to the Podcast
03:13 Meet the Experts: Tarun and Phil
03:46 Tarun's Journey into Identity
05:24 Phil's Background in Identity
08:35 The Vision and Differentiation of Veza
11:38 Announcing Major Investments
13:48 Challenges in Identity Security
27:48 Challenges of Privilege Access Management
28:09 The Evolution of Privilege Access
30:25 Session Recording and Management in Modern Infrastructure
33:17 The Role of Access Graph in Identity Management
44:47 Leveraging AI in Identity Security
52:50 Final Thoughts and Future Directions
Connect with Tarun: https://www.linkedin.com/in/tarunthakur/
Learn more about Veza: https://veza.com/idac
Connect with Phil: https://www.linkedin.com/in/philvenables/
Phil’s Blog: https://www.philvenables.com/
Connect with us on LinkedIn:
Jim McDonald: https://www.linkedin.com/in/jimmcdonaldpmp/
Jeff Steadman: https://www.linkedin.com/in/jeffsteadman/
Visit the show on the web at idacpodcast.com
In this episode of the Identity at the Center podcast, hosts Jeff and Jim dive into the complexities and challenges of Identity and Access Management (IAM). They discuss the cumbersome user experience of Multi-Factor Authentication (MFA) setups, assess the value of IAM maturity programs, and highlight the changing landscape of authentication standards over time. Listener questions address topics such as the future of passwords, the importance of user experience, AI's impact on IAM, budget-conscious IAM strategies for smaller companies, and the dream guests for the show. The episode concludes with a lighter note on what superpowers an IAM superhero might have, emphasizing the role of clear communication in combating the confusion rampant in IAM.
Timestamps
00:00 The Hassles of Multi-Factor Authentication
01:03 Welcome to the Identity at the Center Podcast
01:18 The Value of IAM Maturity Assessments
03:23 Evolving Standards in Authentication
10:55 Upcoming Conferences and Events
15:56 Listener Mailbag: IAM Questions Answered
27:26 Replicating Manual Processes with Automation
28:36 The Importance of User Experience in Automation
29:51 Dynamic Access and Self-Service Models
31:39 Strategic IAM Program Management
33:03 AI's Impact on Identity Governance
43:11 Building Strong IAM Programs on a Budget
47:07 Dream Guests and IAM Superpowers
54:22 Listener Questions and Wrap-Up
Conference Discounts!
European Identity and Cloud Conference 2025 - Use code idac25mko for 25% off: https://www.kuppingercole.com/events/eic2025?ref=partneridac
Identiverse 2025 - Use code IDV25-IDAC25 for 25% off: https://identiverse.com/
Connect with us on LinkedIn:
Jim McDonald: https://www.linkedin.com/in/jimmcdonaldpmp/
Jeff Steadman: https://www.linkedin.com/in/jeffsteadman/
Visit the show on the web at http://idacpodcast.com
In this episode of the Identity at the Center Podcast, hosts Jeff and Jim enthusiastically announce that their podcast is now the official podcast of IDPro. Heather Flanagan, the Executive Director of IDPro, joins the discussion to share insights about the previous IDPro Show, the time and resource constraints of producing it, and the transition to making Identity at the Center the official IDPro podcast. They also discuss her global travels and participation in various identity-related conferences, including EIC and Identiverse. They also delve into the ID Pro's Slack community, the CIDPRO certification, and the Identity Salon initiative. The episode concludes with discussions about upcoming personal travel plans and their experiences in organizing and attending identity industry events.
Chapters
00:00 Exciting Announcement: Official Podcast of IDPro01:54 Introduction and Casual Banter03:23 Conference Season and Identity Beers06:39 Welcoming Heather Flanagan08:22 IDPro and Community Building15:05 The CIDPRO Certification19:59 The Identity Salon27:30 IDPro's Global Presence and Challenges28:54 IDPro at EIC: Workshops and Job Descriptions31:15 Addressing the Identity Talent Shortage33:14 The Origin and Culture of Identity Beers35:07 IDPro's Role at Identiverse38:55 The Rigors of the CIDPRO Exam40:26 Balancing Travel and Personal Life46:09 Vacation Planning Styles52:40 Closing Remarks and Future Plans
Connect with Heather: https://www.linkedin.com/in/hlflanagan/
Learn more about IDPro: https://idpro.org/
The Identity Salon: https://theidentitysalon.com/
Identibeer tracker - https://github.com/martin-sandren-conf/iamconfs/blob/main/Meetups_and_IdentiBeers_2025_spring
Conference Discounts!
Gartner IAM Summit - Code IDAC425 saves 425€: https://www.gartner.com/en/conferences/emea/identity-access-management-uk
European Identity and Cloud Conference 2025 - Use code idac25mko for 25% off: https://www.kuppingercole.com/events/eic2025?ref=partneridac
Identiverse 2025 - Use code IDV25-IDAC25 for 25% off: https://identiverse.com/
Connect with us on LinkedIn:
Jim McDonald: https://www.linkedin.com/in/jimmcdonaldpmp/
Jeff Steadman: https://www.linkedin.com/in/jeffsteadman/
Visit the show on the web at http://idacpodcast.com
In this episode of Identity at the Center, Kristin Olsen, Director of Product Management for the guest travel experience at Alaska Airlines, shares insights into the evolving world of digital identity in the travel industry. Kristin discusses the vision for seamless travel using face or phone for identity verification, collaboration with TSA, and future trends like AI and mobile IDs. The conversation also delves into the challenges and opportunities of enhancing guest experience, risk management, and the importance of strong IAM practices. Stick around for a lighter note as Kristin reveals her background in improv comedy and how it has influenced her professional journey. Plus, don't miss exclusive conference codes for upcoming events!
Chapters
00:00 Introduction to Digital Identity in the Travel Industry01:26 Welcome to the Identity of the Center Podcast01:48 Discussing MFA and Adaptive Authentication07:23 Conference Announcements and Identity Beers12:23 Introducing Kristin Olsen from Alaska Airlines12:43 Kristin Olsen's Role and Insights on Digital Identity30:05 Engineering Excitement in the Airline Industry30:42 Enhancing Guest Experience with Technology33:03 Digital Identity and Day of Travel35:05 Future Trends in Identity Management44:27 The Role of AI in Product Management53:09 Kristin's Improv Comedy Background01:01:55 Wrapping Up and Final Thoughts
Connect with Kristin: https://www.linkedin.com/in/kristin-olsen-b252032/
Conference Discounts!
Gartner IAM Summit - Code IDAC425 saves 425€: https://www.gartner.com/en/conferences/emea/identity-access-management-uk
European Identity and Cloud Conference 2025 - Use code idac25mko for 25% off: https://www.kuppingercole.com/events/eic2025?ref=partneridac
Identiverse 2025 - Use code IDV25-IDAC25 for 25% off: https://identiverse.com/
Connect with us on LinkedIn:
Jim McDonald: https://www.linkedin.com/in/jimmcdonaldpmp/
Jeff Steadman: https://www.linkedin.com/in/jeffsteadman/
Visit the show on the web at http://idacpodcast.com
Join Jeff and Jim in this episode of the Identity at the Center Podcast as they delve into the upcoming Identity Management Day 2025. Featuring guest Jeff Reich, Executive Director at the Identity Defined Security Alliance (IDSA), this episode unpacks the significance of non-human identities, AI in identity management, and the existential questions surrounding identity. The discussion covers upcoming events, awards, and what to expect from Identity Management Day, while also exploring the potential impact of Quantum Computing. Don't miss out on this in-depth conversation that combines humor with profound insights into the evolving landscape of identity management.
Chapters
00:00 Introduction and Identity Concerns
01:30 AI and Podcasting
01:59 AI Limitations and Future
05:41 Conference Announcements
07:30 Identity Management Day 2025
09:35 Global Identity Trends
18:39 Existential Identity and AI
27:29 The Concept of Identity in Technology
28:05 Machine Identity and Its Implications
29:30 Human vs. Machine Identity
31:07 The Future of Identity with AI and Quantum Computing
38:13 Identity Management Day Awards
45:17 Fun and Lighthearted Discussion
51:35 Conclusion and Final Thoughts
Connect with Jeff: https://www.linkedin.com/in/jreich/
Learn more about the IDSA: https://www.idsalliance.org/
Register for Identity Management Day 2025: https://www.accelevents.com/e/Identity-Management-Day-2025-Virtual-Conference
Connect with us on LinkedIn:
Jim McDonald: https://www.linkedin.com/in/jimmcdonaldpmp/
Jeff Steadman: https://www.linkedin.com/in/jeffsteadman/
Visit the show on the web at http://idacpodcast.com
Keywords: Identity Management, AI, Non-Human Identities, Identity Defined Security Alliance, IDSA, Quantum Computing, Identity Management Day 2025, Identity at the Center Podcast.
Join AI Jeff and AI Jim on 'Identity at the Center' as they explore the most outrageous and entertaining innovations in identity and access management (IAM) for this special April Fools' episode. From 'Identity at the Center - After Dark' on Diz-Prime-flix to the rise of 'Carrier Pigeon Authentication,' this episode promises a wild ride through the absurdities of digital identity. Don't miss highlights like toaster authentication challenges, karaoke biometric logins, and the surreal 'Session_Expired' club experience. Stay secure and get ready to laugh out loud with the most bizarre IAM content you've ever seen!
Chapters
00:00:00 Welcome & Introduction00:01:00 Special Announcement: 'Identity at the Center - After Dark' on Diz-Prime-flix00:02:00 News: Biometric Authentication Requires Singing Karaoke00:03:00 Sponsor: SonataSecure - Musical Authentication00:04:00 Sponsor: WhisperGuard - Secure Messaging with AuraScan00:05:00 News: Identity Management Replaced by Carrier Pigeons & Caffeine Level Access Control00:06:00 Sponsor: Fortress of Fabulousness Firewall00:07:00 Sponsor: Zeus's Zero Trust Zenith00:08:00 News: Digital Certificates Require Imaginary Friend Permission & Interpretive Dance Passphrases00:09:00 Sponsor: EgoSphere - Decentralized Identity Platform00:10:00 Sponsor: RoleRescue - Rehabilitate RBAC Systems00:11:00 News: Sentient Corporate Directory 'Dirk' Playing Matchmaker00:12:00 Sponsor: Omni-Identity Nexus - Transdimensional Identity00:13:00 Sponsor: Packet Politeness Protocol00:14:00 News: Principle of Extreme Least Privilege (PELP) & Spirit Animal Check Authentication00:15:00 Sponsor: The Sentient Security Snail00:16:00 News: Quantum Entanglement Authentication & PAM Crowns00:17:00 News: Mandatory Offboarding Serenades00:18:00 Sponsor: AccessStream & Permission Patrol00:19:00 Sponsor: The Great Identity Governance Swamp Romp Webinar00:20:00 News: Fortune Cookie Authentication & Jim's Consciousness Theory00:21:00 City Correspondent Tyler: Session_Expired Club Entry Requirements00:22:00 City Correspondent Tyler: Explaining Human SAML Assertions00:23:00 City Correspondent Tyler: Human SAML Assertions & Club Details00:24:00 City Correspondent Tyler: Session_Expired Club Summary00:25:00 Closing Remarks & Outro
Connect with us on LinkedIn:
Real Jim McDonald: https://www.linkedin.com/in/jimmcdonaldpmp/
Real Jeff Steadman: https://www.linkedin.com/in/jeffsteadman/
Visit the show on the web at http://idacpodcast.com
Keywords: Identity and Access Management, digital identity, cybersecurity, AI Jeff, AI Jim, alternative realities, IAM news, April Fool's.
In this episode of the Identity at the Center Podcast, hosts Jeff and Jim delve into the intricacies of compliance, governance, and cybersecurity with special guest and colleague Kia Smith, a director in RSM's Security and Privacy Risk Consulting practice. They explore the foundational role of compliance activities such as Sarbanes-Oxley, the crucial need to align governance with security, and the rising complexity of regulatory environments driven by third-party dependencies. Kia provides valuable insights into the Cybersecurity Maturity Model Certification (CMMC) and its widespread implications for industries beyond defense. The discussion also touches upon the relevance of legal language in contracts to manage risk effectively, the role of AI in compliance frameworks, and the importance of continuous compliance validation.
Chapters
00:00 Understanding Compliance: Beyond Check-the-Box
01:58 Introduction to the Podcast
03:46 The Importance of a Well-Rounded Identity Professional
06:38 Upcoming Conferences and Discount Codes
08:51 Meet Our Guest: Kia Smith
09:36 Kia's Journey from Law to Cybersecurity
13:50 The Role of a Director in Consulting
19:37 Compliance vs. Security: A Balanced Approach
21:41 The Evolving Regulatory Landscape
25:00 Managing Third-Party Risks
32:21 Setting IAM Security Standards
32:54 Cloud Service Offerings and FedRAMP
34:07 Procurement and Security Collaboration
34:45 Contractual Security Requirements
35:24 Business Involvement in Security Decisions
36:26 Reviewing Security Practices
37:10 Governance and Risk Acceptance
41:12 Impact of Regulations on Industries
42:58 CMMC and Its Broad Implications
51:30 AI in Compliance and Cybersecurity
55:33 Pickle Pops and Lighthearted Farewell
Connect with Kia: https://www.linkedin.com/in/kia-smith-mpp-cisa/
Learn more about RSM’s Digital Identity Consulting: https://rsmus.com/services/risk-fraud-cybersecurity/cybersecurity-business-vulnerability/identity-and-access.html?cmpid=ola:45559-idac:bb01
Conference Discounts!
Gartner IAM Summit - Code IDAC425 saves 425€: https://www.gartner.com/en/conferences/emea/identity-access-management-uk
European Identity and Cloud Conference 2025 - Use code idac25mko for 25% off: https://www.kuppingercole.com/events/eic2025?ref=partneridac
Identiverse 2025 - Use code IDV25-IDAC25 for 25% off: https://identiverse.com/
Connect with us on LinkedIn:
Jim McDonald: https://www.linkedin.com/in/jimmcdonaldpmp/
Jeff Steadman: https://www.linkedin.com/in/jeffsteadman/
Visit the show on the web at http://idacpodcast.com
This episode is sponsored by Permiso. Visit permiso.io/idac to learn more.
In this sponsored episode of the Identity at the Center Podcast, hosts Jeff and Jim sit down with Paul Nguyen, co-founder and co-CEO of Permiso, to discuss the critical role of identity security in modern information security. Paul shares insights into the history of identity threats, the rise of identity-focused attacks like Scattered Spider and LLM Jacking, and the importance of real-time identity monitoring for both human and non-human identities across cloud and on-prem environments. The episode explores how Permiso is positioned in the market to provide comprehensive identity threat detection and response (ITDR) and identity security posture management (ISPM), offering advanced visibility and proactive measures against emerging threats.
Chapters
00:00 Introduction to Security Vendors
00:50 Welcome to the Identity at the Center Podcast
01:30 Sponsored Spotlight: Permiso
02:14 Meet Paul Nguyen, Co-Founder of Permiso
03:34 The Importance of Identity in Security
05:35 Permiso's Unique Approach to Identity Security
07:36 Real-Time Monitoring and Threat Detection
09:23 Challenges and Solutions in Identity Security
15:16 Modern Attacks and Identity Threats
25:56 The Role of Honeypots in Security Research
26:49 Challenges of Maintaining Security
27:15 Honeypots and Breach Detection
27:46 Dwell Time and Reconnaissance
28:34 Password Complexity and Monitoring Gaps
29:24 Roles and Responsibilities in Identity Security
29:49 Unified Identity Security Teams
30:57 Emerging Threats and Joint Efforts
32:49 Permiso's Role in Identity Security
34:10 Detection and Response Strategies
36:11 Managing Identity Risks
36:51 Combining Prevention and Detection
39:44 Real-World Applications and Challenges
51:17 Personal Insights and Final Thoughts
Connect with Paul: https://www.linkedin.com/in/paulnguyen/
Learn more about Permiso: https://permiso.io/idac
Connect with us on LinkedIn:
Jim McDonald: https://www.linkedin.com/in/jimmcdonaldpmp/
Jeff Steadman: https://www.linkedin.com/in/jeffsteadman/
Visit the show on the web at idacpodcast.com and watch at idacpodcast.tv
Keywords:
identity security, real-time monitoring, IAM, cybersecurity, identity exploitation, modern attacks, insider threats, honeypots, organizational structure, Non-Human Identities, Identity Security, Permiso, Risk Management, Insider Threat, Shadow IT, Identity Graph, ITDR, ISPM, Cybersecurity
In this episode of the Identity at the Center Podcast, Jeff and Jim discuss the upcoming European Identity and Cloud Conference (EIC) with Warwick Ashford, Senior Analyst at KuppingerCole Analysts. Warwick outlines the differences between digital identity and identity and access management (IAM), emphasizing the importance of managing non-human identities in today’s digital world. The episode covers key themes for this year's EIC, including AI's role in cybersecurity, decentralized identity, identity ecosystems, and inclusivity. Warwick also highlights the extensive agenda comprising over 200 presentations, multiple workshops, and notable speakers from global standards bodies and cybersecurity experts. Tips for first-time attendees and the exciting social events, such as the Spree River cruises, are also discussed. Both in-person and virtual attendance options are available, ensuring no one misses out on the valuable insights and networking opportunities.
Chapters
00:00 Understanding Digital Identity vs. Identity and Access Management
01:55 Welcome to the Identity at the Center Podcast
02:03 Celebrating Milestones and Consistency
03:54 Conference Discount Codes and Announcements
07:13 Introducing Our Guest: Warwick Ashford
07:33 Warwick's Journey into Cybersecurity and Identity
11:59 The Importance of Managed Services in Cybersecurity
13:34 Previewing the European Identity and Cloud Conference (EIC)
16:03 Who Should Attend EIC and Why
19:03 Main Themes and Tracks at EIC 2023
26:14 The Future of Identity Ecosystems
31:59 Digital Credential Services Workshop
32:22 Focus on Identity Fabrics
32:52 Keynote Sessions and Presentations
33:15 Involvement of Various Organizations
33:56 Award Winners and Their Contributions
35:34 Virtual Ticket Option and Its Benefits
37:41 After Hours Events and Networking
40:17 EIC Awards and Finalists
42:06 Notable Speakers and Topics
44:46 Tips for First Timers
49:51 AI in Cybersecurity
51:41 Digital Identity vs. Identity and Access Management
57:07 Identity's Role in Cybersecurity
01:00:13 Conclusion and Wrap-Up
Connect with Warwick: https://www.linkedin.com/in/warwickashford/
Conference Discounts!
Gartner IAM Summit - Code IDAC425 saves 425€: https://www.gartner.com/en/conferences/emea/identity-access-management-uk
European Identity and Cloud Conference 2025 - Use code idac25mko for 25% off: https://www.kuppingercole.com/events/eic2025?ref=partneridac
Identiverse 2025 - Use code IDV25-IDAC25 for 25% off: https://identiverse.com/
Connect with us on LinkedIn:
Jim McDonald: https://www.linkedin.com/in/jimmcdonaldpmp/
Jeff Steadman: https://www.linkedin.com/in/jeffsteadman/
Visit the show on the web at http://idacpodcast.com
Keywords
Identity, Cybersecurity, EIC, Managed Services, Decentralized Identity, Networking, Conferences, Identity Ecosystems, Workshops, Keynotes, EIC, digital identity, cybersecurity, virtual ticket, networking, awards, keynote speakers, AI, IAM, conference tips
Our TOPPODCAST Picks 
