Stay ConnectedIdentity at the Center is a weekly podcast all about identity security in the context of identity and access management (IAM). With decades of real-world IAM experience, hosts Jim McDonald and Jeff Steadman bring you conversations with news, topics, and guests from the identity management industry. Do you know who has access to what?
Visit us on the web at idacpodcast.com
Copyright: © 771327
In this sponsored episode of the Identity at the Center podcast brought to you by Strivacity, Jeff and Jim welcome Stephen Cox, co-founder and CTO of Strivacity, to discuss the evolving landscape of identity management. The conversation covers Strivacity's unique approach to customer identity and access management (CIAM), the importance of isolation by design for security, and the integration of generative AI into their platform. Stephen shares insights on how Strivacity differentiates itself in the market, the recognition from Gartner, and the challenges of implementing AI in identity management systems. They discuss the evolving landscape of AI, particularly in relation to data access, security, and identity management. Also explored is the balance between leveraging AI for business insights and the potential threats it poses to data security. The discussion also touches on the future of AI technology, the challenges of governance in a rapidly changing environment, and an unexpected segue into astrophotography, highlighting the intersection of AI technology and personal interests.
Chapters
00:00 Introduction to the Identity at the Center Podcast 01:37 Meet Steven Cox from Strivacity 02:34 Strivacity's Unique Approach to CIAM 09:27 Differentiating Consumer and Customer IAM 11:49 Strivacity's Recognition and Achievements 14:05 The Importance of Isolation by Design 15:38 Generative AI in IAM Products 21:45 Implementing AI in Strivacity's Platform 29:25 Addressing AI Hallucinations and Security Concerns 30:56 Cost Implications of AI Systems 31:50 Leveraging AI for Business Insights 34:03 Implementing AI with Security in Mind 38:53 Future of AI in Identity Space 44:48 Astrophotography Adventures 53:52 Conclusion and Final Thoughts
Connect with Stephen: https://www.linkedin.com/in/stephencox/
Learn more about Strivacity: https://strivacity.ai
Connect with us on LinkedIn:
Jim McDonald: https://www.linkedin.com/in/jimmcdonaldpmp/
Jeff Steadman: https://www.linkedin.com/in/jeffsteadman/
Visit the show on the web at idacpodcast.com and watch at https://www.youtube.com/@idacpodcast
Keywords
Identity Management, Customer IAM, Strivacity, AI Integration, Cybersecurity, Digital Identity, Gartner Recognition, Isolation by Design, Generative AI, User Experience, AI, data security, identity management, astrophotography, technology governance
In this engaging podcast episode, hosts Jeff and Jim broadcast from the Authenticate 2024 conference in Carlsbad, California, exploring a wide range of topics. They discuss their podcast's future and share personal experiences with hurricanes. Joined by Dean Saxe, Principal Engineer at Beyond Identity and Chair of the OpenID Foundation Death & The Digital Estate Community Group, the conversation covers identity security, digital estates, and the lasting impact of digital assets. Listeners will hear about complex themes such as managing digital legacies, the evolution of digital credentials, the importance of device-bound credentials, and personal stories of career development in the IAM field. Finally, the episode ends on a lighthearted note with a nostalgic dive into favorite board games, from childhood classics to modern hits. Don't miss this multifaceted discussion that blends professional insights with personal anecdotes.
00:00 Introduction, Conference Setting, and Personal Updates
02:19 Hurricane Aftermath and Resilience
04:03 Authenticate 2024 Highlights
04:57 Upcoming Events and Case Study Teasers
05:38 Introducing Dean Saxe
06:49 Dean's Journey in Identity and Security
13:30 Death and the Digital Estate
25:08 The Risks of Relying on Cloud Services
25:35 Legacy Contacts and Digital Estate Planning
28:15 Respecting Cultural Differences in Digital Death
29:04 Empowerment Through Consent and Choice
29:56 Interoperability and Accessibility in Digital Estates
30:25 Legal and Regulatory Considerations
32:20 The Importance of a Digital Living Will
33:21 Challenges and Future Directions
33:54 The Role of AI in Digital Estates
39:14 Getting Involved in the Digital Estate Community
44:33 Board Games and Lighthearted Farewells
50:15 Conclusion and Final Thoughts
Connect with Dean: https://www.linkedin.com/in/deanhsaxe/
Learn more about Beyond Identity: https://www.beyondidentity.com/
Death and the Digital Estate (DADE) Community Group: https://openid.net/cg/death-and-the-digital-estate/
Gartner IAM Summit - Save $375 on registration using our exclusive code IDAC375: https://www.gartner.com/en/conferences/na/identity-access-management-us
Semperis’ Hybrid Identity Protection Conference (HIP Conf) - Use code IDACpod for 20% off: https://www.hipconf.com/
Connect with us on LinkedIn:
Jim McDonald: https://www.linkedin.com/in/jimmcdonaldpmp/
Jeff Steadman: https://www.linkedin.com/in/jeffsteadman/
Visit the show on the web at http://idacpodcast.com
In this compelling episode of the Identity at the Center podcast, hosts Jeff and Jim invite you to explore the evolving landscape of privacy, identity, and data security. Featuring insights from industry expert Tina Srivastava, co-founder of Badge, they delve into the pressing issue of data breaches and the innovative technologies designed to combat them, including privacy-preserving biometric systems and public key conversion. Discover the potential of these solutions to revolutionize identity security, the importance of GDPR, and the critical need for inclusive, accessible digital identity systems. The discussion highlights the balance between convenience and privacy while addressing the responsibilities of device manufacturers, telecom companies, and app developers. Tune in for an enlightening conversation about national security, phishing-resistant authentication, and the role of technology in safeguarding our digital identities. Plus, get a glimpse of the social side of tech conferences with a fun recap of Authenticate 2024's karaoke night and a heartfelt thank you to the episode's sponsors and supporters.
00:00 Welcome to the Identity at the Center Podcast
02:22 Conference Highlights and Casual Banter
05:05 Main Topic: Identity and Security with Tina Srivastava
08:50 Badge: Revolutionizing Identity Verification
12:01 Challenges and Innovations in Identity Security
22:08 Reflecting on Domestic Abuse and Digital Identity
23:16 Accessibility and Inclusivity in Technology
25:48 The Battle for Privacy and Identity
29:18 The Future of Seamless Identity Verification
35:41 Karaoke Fun at Authenticate Conference
39:25 Wrapping Up and Final Thoughts
Connect with Tina: https://www.linkedin.com/in/tina-s-8291438a/
Learn more about Badge: https://www.badgeinc.com/
Gartner IAM Summit - Save $375 on registration using our exclusive code IDAC375: https://www.gartner.com/en/conferences/na/identity-access-management-us
Semperis’ Hybrid Identity Protection Conference (HIP Conf) - Use code IDACpod for 20% off: https://www.hipconf.com/
Connect with us on LinkedIn:
Jim McDonald: https://www.linkedin.com/in/jimmcdonaldpmp/
Jeff Steadman: https://www.linkedin.com/in/jeffsteadman/
Visit the show on the web at http://idacpodcast.com
This episode is sponsored by Semperis: semperis.com
In this sponsored episode of the Identity at the Center podcast, hosts Jeff and Jim discuss the changing landscape of ransomware attacks and the importance of identity security with Gil Kirkpatrick, Chief Architect at Semperis. They explore how ransomware strategies have evolved from merely encrypting data to exfiltrating sensitive information for ransom. The conversation also delves into the necessity of having robust identity recovery plans, the role of Active Directory in cybersecurity, and the importance of regular security posture assessments with tools like Purple Knight. Additionally, Gil shares insights from the Semperis Ransomware Risk Report and recounts his experiences as a pilot, offering a fascinating look at both cybersecurity and the world of aviation.
00:00 Introduction to Ransomware Evolution
01:25 Welcome to the Identity at the Center Podcast
01:53 Guest Introduction: Gil Kirkpatrick from Semperis
02:25 Journey into the Identity Space
06:09 Semperis: Enhancing Security and Resilience
21:08 The Importance of Active Directory Security
28:09 Ransomware Risk Report Insights
32:15 The Trustworthiness of Decryption Keys
34:18 Business Disruption from Ransomware
36:14 Should Companies Pay the Ransom?
38:47 The Importance of Cyber Resilience
41:14 Active Directory and Disaster Recovery
43:17 The Decline in Ransomware News
47:36 The Basics of Cybersecurity
50:31 Adventures in Piloting
58:35 Conclusion and Final Thoughts
Connect with Gil: https://www.linkedin.com/in/gil-kirkpatrick/
Learn more about Semperis: https://www.semperis.com/
2024 Ransomware Risk Report: Embracing the Assume Breach Mindset: ttps://www.semperis.com/ransomware-risk-report/
Download Purple Knight: https://www.semperis.com/purple-knight/
Hybrid Identity Protection Conference (HIP Conf) - Use code IDACpod for 20% off: https://register.hipconf.com/W7eVML
Connect with us on LinkedIn:
Jim McDonald: https://www.linkedin.com/in/jimmcdonaldpmp/
Jeff Steadman: https://www.linkedin.com/in/jeffsteadman/
Visit the show on the web at idacpodcast.com
In this special episode of the Identity at the Center podcast, recorded live from the SailPoint Navigate 2024 conference in Orlando, hosts Jeff and Jim engage with Andrew Moore, VP of Product Management at SailPoint. The conversation spans a variety of critical themes, including the management of identity platforms, product development, and the importance of customer feedback. Andrew details his career journey, including his transition from Under Armour to SailPoint, and shares insights into the development of connected products, data-driven design, and user experience enhancements. The episode also introduces the latest innovations, such as Privileged Task Automation and Machine Identity Security, emphasizing their potential to address productivity and security risks. Furthermore, the speakers discuss the transformative role of AI in Identity Governance and Administration (IGA), highlighting the importance of explainable AI and maintaining strong security standards. This episode is a deep dive into the dynamic landscape of identity governance and the strategies driving continuous innovation.
00:00 Welcome to the Identity at the Center Podcast
01:55 Conference Insights and Future Plans
03:38 Introducing Andrew Moore
03:52 Andrew Moore's Journey into Identity
06:48 Product Management at SailPoint
16:48 Innovative Projects and Customer Feedback
23:17 Exploring Low Code and No Code Identity Automations
23:53 Understanding Customer Feedback and Research Techniques
24:41 Balancing Positive and Negative Feedback
00:24 Dealing with Critical Feedback
29:34 Announcing the Product Roadmap
30:37 Privileged Task Automation: A Game Changer
39:11 Machine Identity Security: New Innovations
42:33 The Future of AI in Identity Governance
47:12 Addressing Concerns About AI in IGA
50:40 Conclusion and Final Thoughts
Connect with Andrew: https://www.linkedin.com/in/richardandrewmoore/
Learn more about SailPoint: https://www.sailpoint.com/
SailPoint Navigate 2024 London - Use code IDAC for a £300 discount - https://www.sailpoint.com/navigate/london
Semperis’ Hybrid Identity Protection Conference (HIP Conf) - Use code IDACpod for 20% off: https://www.hipconf.com/
Gartner IAM Summit - Save $375 on registration using our exclusive code IDAC375: https://www.gartner.com/en/conferences/na/identity-access-management-us
Connect with us on LinkedIn:
Jim McDonald: https://www.linkedin.com/in/jimmcdonaldpmp/
Jeff Steadman: https://www.linkedin.com/in/jeffsteadman/
Visit the show on the web at http://idacpodcast.com
🔑 Episode Keywords
Identity Governance, Sailpoint, Product Management, Innovation Workshop, Ai In Iga, Ux Design, Machine Identity Security, Privileged Task Automation, Customer Feedback, Product Roadmap, Orlando Conference, Bill Gates Quote, Data Privacy, Under Armour, Wearable Technology, User Experience, Cybersecurity Trends, Enterprise Applications, Saas Platform, Identity Security
In this comprehensive episode, Jeff and Jim broadcast from the Authenticate 2024 conference in San Diego, uncovering the deep connection between technology and human rights with an emphasis on inclusivity and ethical considerations in digital identity advancements. Hear from Grace Klutke, the Kim Cameron Award winner, about her remarkable journey from law to digital identity. Dive into discussions with Ian Glazer and Arynn Crow of the Digital Identity Advancement Foundation (DIAF) on the foundation's mission, mentorship programs, and the significance of legacy awards like the Kim Cameron and Vittorio Bertucci Awards. Explore interdisciplinary approaches to digital identity encompassing technical, legal, and social engineering perspectives. Gain insights into AI's role, data governance, and the unique culture of the digital identity community. Plus, enjoy a light-hearted segment on conference experiences, attire, and industry swag. Don't forget to like, subscribe, and check out our links in the show notes!
00:00 Introduction: Identity at the Center Podcast Begins
03:00 Upcoming Conferences and Events
03:54 Introducing the Guests: Grace, Arynn, and Ian
05:09 Grace's Journey to the Kim Cameron Award
07:13 Digital Identity Advancement Foundation (DIAF)
09:43 The Importance of Standards and Awards
17:35 The Role of Legal Background in Digital Identity
18:02 Legal Perspectives on Digital Identity
18:59 The Intersection of Law and Technology
21:20 Challenges and Future Directions
23:23 Mentorship and Career Advice
24:11 AI and Identity Data
27:54 Conference Insights and Reflections
35:23 Closing Thoughts and Future Plans
Connect with Grace: https://www.linkedin.com/in/grace-klutke-3ba8a1228/
Connect with Arynn: https://www.linkedin.com/in/arynn-crow-821761103/
Connect with Ian: https://www.linkedin.com/in/iglazer
Learn more about DIAF: https://digitalidadvancement.org/
Gartner IAM Summit - Save $375 on registration using our exclusive code IDAC375: https://www.gartner.com/en/conferences/na/identity-access-management-us
Semperis’ Hybrid Identity Protection Conference (HIP Conf) - Use code IDACpod for 20% off: https://www.hipconf.com/
Connect with us on LinkedIn:
Jim McDonald: https://www.linkedin.com/in/jimmcdonaldpmp/
Jeff Steadman: https://www.linkedin.com/in/jeffsteadman/
Visit the show on the web at http://idacpodcast.com and watch at http://idacpodcast.tv
In this episode of the Identity at the Center podcast, Jim McDonald speaks with Brandon Pinzon, an Insurance Industry Cybersecurity Executive, about the evolving landscape of identity management. They discuss Brandon's journey into digital identity, the role of identity management within organizations, and the unique challenges faced by the insurance industry. The conversation also delves into the intersection of compliance and security, highlighting the importance of understanding risk in the identity space. In this conversation, Brandon discusses the critical relationship between risk management and compliance in cybersecurity, emphasizing the importance of understanding and quantifying risk. He explores the evolving landscape of cyber insurance, highlighting the need for identity practitioners to be proactive in managing risks and building relationships with financial stakeholders. The discussion also touches on the necessity of cyber insurance for various organizations and concludes with insights into the vibrant cybersecurity community in San Antonio.
00:00 Podcast Introduction and Host Update
01:23 Upcoming Conferences and Discount Codes
02:29 Guest Introduction: Brandon Pinzon
03:02 Brandon's Identity Origin Story
05:25 Debate: Where Does Identity Management Belong?
13:45 Pros and Cons of CISO Responsibility for Identity
21:16 Identity in the Insurance Industry
29:52 Addressing Legacy Systems in Financial Institutions
31:38 Compliance vs. Security in Financial Services
35:33 Understanding and Quantifying Risk
38:33 The Role of Cyber Insurance
54:28 San Antonio: A Hub for Cybersecurity
Connect with Brandon: https://www.linkedin.com/in/bpinzon/
Gartner IAM Summit - Save $375 on registration using our exclusive code IDAC375: https://www.gartner.com/en/conferences/na/identity-access-management-us
Semperis’ Hybrid Identity Protection Conference (HIP Conf) - Use code IDACpod for 20% off: https://www.hipconf.com/
Connect with us on LinkedIn:
Jim McDonald: https://www.linkedin.com/in/jimmcdonaldpmp/
Jeff Steadman: https://www.linkedin.com/in/jeffsteadman/
Visit the show on the web at http://idacpodcast.com and watch at https://www.youtube.com/@idacpodcast
Keywords
identity management, cybersecurity, insurance industry, compliance, digital identity, CISO, identity governance, user experience, risk management, financial services, risk management, compliance, cyber insurance, identity management, cybersecurity, threat modeling, risk assessment, business continuity, data protection, security strategy
In this episode of the Identity at the Center podcast, Jim McDonald is joined by Eve Maler to explore a provocative topic—"Consent is Dead." Eve shares insights from her recent keynote at the European Identity and Cloud Conference (EIC) in Berlin, where she unpacked the failures of consent-based systems in protecting user privacy. They discuss why the "I agree" button has lost its meaning, even in regions with strong data protection laws like GDPR, and how users' personal information is monetized through identity resolution technologies.
Eve reveals how identity professionals often overlook the world of identity resolution, which operates without a direct relationship with users. She emphasizes the importance of IAM professionals understanding the deep monetization of personal data and the critical need to improve systems of privacy, consent, and security. They also touch on the role of AI in authorization decisions and the balance between explainability and automation in future IAM systems.
Chapters
00:00 Introduction and Context 03:01 Eve Maler's Journey in Identity 09:53 Exploring Personhood and Verifiable Credentials 12:52 Identity Verification and AI Threats 25:13 The State of Consent in Digital Identity 30:42 GDPR and Its Implications 39:53 The Future of AI in IAM 45:05 AuthZen Working Group Update 55:23 Non-Human Identities and IoT 01:02:52 Closing Thoughts and Future Directions 01:04:03 Fingerprint City Outro.mp4
Connect with Eve: https://www.linkedin.com/in/evemaler/
Venn Factory: https://www.vennfactory.com/
Personhood: The Killer Credential? (blog by Eve): https://workshop.vennfactory.com/p/personhood-the-killer-credential
Death and the Digital Estate (blog by Eve): https://workshop.vennfactory.com/p/death-and-the-digital-estate
From Chance to Control (blog by Eve): https://workshop.vennfactory.com/p/from-chance-to-control
Connect with us on LinkedIn:
Jim McDonald: https://www.linkedin.com/in/jimmcdonaldpmp/
Jeff Steadman: https://www.linkedin.com/in/jeffsteadman/
Visit the show on the web at http://idacpodcast.com and watch at https://www.youtube.com/@idacpodcast
In this Token Identity sponsored episode of the Identity at the Center podcast, hosts Jeff and Jim welcome Ido Shlomo, co-founder and CTO of Token Security, to discuss the vital and often overlooked topic of non-human identities or machine identities within organizations. The conversation covers how machine identities differ from human identities, the unique challenges they pose, and how Token Security aims to address these issues. Ido shares his personal journey into the cyber-security field, real-life case studies, and details about Token Security's approach to managing and securing machine identities. The episode also delves into the implementation and ROI of their solution and touches on lighter topics like online gaming.
00:00 Welcome to the Identity at the Center Podcast
03:14 Guest Introduction: Ido Shlomo from Token Security
03:35 Ido Shlomo's Journey into Identity Security
06:04 Understanding Token Security's Mission
07:37 Challenges in Machine Identity Management
10:08 Defining Non-Human Identity
11:32 The Story Behind Token Security's Name
13:35 Token Security's Unique Value Proposition
20:20 Real-Life Case Study: The Importance of Non-Human Identity Security
22:05 Narrowing Down the Machines
22:15 Identifying the Compromised Machine
22:26 GitHub Report and API Key
22:34 Event Resolution and Success
22:39 Human vs Non-Human Identity
22:56 Technology Differences and Case Study
23:23 Implementing the Solution
23:46 Philosophy of Software Development
24:28 Integration and Deployment
26:09 Building an Inventory
26:31 Reducing Risk and Lifecycle Process
28:05 Attribution and Data Collection
30:02 Learning More and ROI
34:22 Online Gaming and Personal Insights
34:47 Gaming Personas and Preferences
36:34 Gaming Memories and Character Classes
40:33 Wrapping Up and Final Thoughts
Connect with Ido: https://www.linkedin.com/in/ido--shlomo/
Learn more about Token Security: https://www.token.security/?utm_medium=idac&utm_source=website&utm_campaign=Sep_podcast&utm_content=sponsor_page
Connect with us on LinkedIn:
Jim McDonald: https://www.linkedin.com/in/jimmcdonaldpmp/
Jeff Steadman: https://www.linkedin.com/in/jeffsteadman/
Visit the show on the web at idacpodcast.com and watch at https://www.youtube.com/@idacpodcast
In this episode of the Identity at the Center podcast, Jeff and Jim discuss how to make the business case for IAM and determining the return on investment (ROI). Joined by Andre Koot, they delve into the need for a compelling business case to drive IAM investments. The conversation covers the quantitative and qualitative aspects of ROI, and the importance of stakeholder communication.
00:00 Welcome to the Identity at the Center Podcast 01:39 Training and Professional Development in IAM 03:58 Upcoming Conferences and Events 07:51 The Business Case for IAM 12:51 IAM: Financial and Non-Financial Perspectives 23:08 Calculating Return on Investment in IAM 28:59 Hard Dollars vs. Soft Dollars 30:11 Dollarizing Non-Savings Benefits 31:40 Challenges in ROI Calculations 34:07 Quantifiable vs. Non-Quantifiable Benefits 37:14 ROI in Different Organizational Contexts 39:50 Insourcing vs. Outsourcing 49:02 Communicating ROI Effectively 54:10 Language Nuances and Cultural Context 01:01:35 Conclusion and Final Thoughts
Connect with Andre: https://www.linkedin.com/in/meneer/
The Business Case for IAM (IDPro): https://bok.idpro.org/article/id/97/
Strategic Alignment and Access Governance (IDPro): ****https://bok.idpro.org/article/id/90/
Authenticate Conference - Use code IDAC15 for 15% off: https://authenticatecon.com/event/authenticate-2024-conference/
SailPoint Navigate - October 21-24 in Orlando, FL - Use code IDAC for a $400 discount
Connect with us on LinkedIn:
Jim McDonald: https://www.linkedin.com/in/jimmcdonaldpmp/
Jeff Steadman: https://www.linkedin.com/in/jeffsteadman/
Visit the show on the web at http://idacpodcast.com and watch at https://www.youtube.com/@idacpodcast
Our TOPPODCAST Picks 
