Stay ConnectedIdentity at the Center is a weekly podcast all about identity security in the context of identity and access management (IAM). With decades of real-world IAM experience, hosts Jim McDonald and Jeff Steadman bring you conversations with news, topics, and guests from the identity management industry. Do you know who has access to what?
Visit us on the web at idacpodcast.com
Copyright: © 771327
In this comprehensive episode of the Identity at the Center podcast, hosts Jeff and Jim explore the foundations and sustainability of effective Identity and Access Management (IAM) programs. They delve into the essential elements of setting up an IAM program, including the importance of executive buy-in, phased implementation strategies, the significance of governance, and adapting to evolving business needs. The discussion also emphasizes the need for continuous enhancements and future-proofing IAM systems by budgeting for updates and choosing dependable managed service partners. Practical advice is offered throughout, ensuring listeners have the tools to start and maintain a successful IAM program. The episode wraps up with a recap of ten crucial steps for IAM implementation and lighter conversations about recent personal trips.
00:00 Introduction and Podcast Setup 01:30 Technical Difficulties and Recording Challenges 04:23 Conferences and Upcoming Events 05:55 Starting an IAM Program 10:34 Assessing Current IAM Capabilities 22:37 Building a Cross-Functional IAM Team 30:56 Choosing the Right IAM Technology 43:02 Starting with Phase One 43:44 Planning for Compliance and Cyber Insurance 46:25 User Experience in IAM Implementation 49:18 Workforce vs. Customer Identity Management 57:46 Governance, Policies, and Metrics 01:09:31 Maintaining and Evolving IAM Programs 01:16:03 Final Thoughts and Recap
Authenticate Conference - Use code IDAC15 for 15% off: https://authenticatecon.com/event/authenticate-2024-conference/
Connect with us on LinkedIn:
Jim McDonald: https://www.linkedin.com/in/jimmcdonaldpmp/
Jeff Steadman: https://www.linkedin.com/in/jeffsteadman/
Visit the show on the web at http://idacpodcast.com and watch at https://www.youtube.com/@idacpodcast
In this sponsored episode of the Identity at the Center podcast, brought to you by Panini, hosts Jeff and Jim interview Marta Nappo, the Strategic Marketing and Business Development Director at Panini. Marta discusses Panini's evolution from a leading check scanner company to entering the identity verification market with their new solution called BioCred. Panini, a company with 79 years of history, is launching a patented method for biometric credential verification aimed at financial services and healthcare sectors, among others. Marta shares insights into Panini's approach to privacy by not storing personal data on servers and highlights the potential of their cloud-based infrastructure to integrate into customer workflows. The conversation touches on the benefits of reliable biometric authentication in reducing fraud, improving customer experience, and enhancing operational efficiency. They also explore use cases in financial services, healthcare, and more.
00:00 Welcome to the Identity at the Center Podcast
02:44 Meet Marta Nappo
03:02 Marta's Career Journey
05:20 Panini's New Identity Solution: BioCred
06:11 Global Expansion and Market Presence
08:18 Identity Verification Challenges and Solutions
11:58 Privacy and Data Security
15:28 Future of Identity Verification
21:58 Customer Feedback and Future Plans
25:01 Initial Impressions and Expectations
25:26 Lowering Barriers and Building Trust
26:07 Market Growth and Challenges
27:05 Real-World Use Cases
28:05 Identity Verification in Various Sectors
35:24 Measuring Success and Benefits
38:53 Volleyball and Life Lessons
45:24 Fun with Volleyball and Dogs
46:47 Conclusion and Farewell
Learn more about Panini: https://www.panini.com/
Connect with Marta: https://www.linkedin.com/in/martanappo/
Dog playing volleyball: https://youtube.com/shorts/QSCMJQo6kps?si=CN-2lGTEx0T4nBAC
Connect with us on LinkedIn:
Jim McDonald: https://www.linkedin.com/in/jimmcdonaldpmp/
Jeff Steadman: https://www.linkedin.com/in/jeffsteadman/
Visit the show on the web at idacpodcast.com and watch at https://www.youtube.com/@idacpodcast
In this episode of the Identity at the Center podcast, Jeff and Jim are live at the Identity Week America conference in Washington, DC. Welcoming Ryan Galluzzo, Identity Management Program Lead at NIST, they dive into recent NIST updates, including a mobile driver's license project, changes in public comment and revision processes, and the significance of user-controlled wallets. They also touch on self-sovereign identity, risk management, evolution in identity assurance levels, and the vital role of continuous evaluation and improvement. The episode concludes with a light-hearted discussion on the inquisitive nature of children and the spontaneous, enriching conversations that happen at industry conferences.
00:00 Welcome to Identity at the Center Podcast
01:26 Conference Highlights and Networking
02:47 Panel Discussions and Key Takeaways
05:07 Mobile Driver's License Project
07:09 Public Comment Draft and Feedback
11:40 Self-Sovereign Identity and Trust Issues
16:41 NIST Guidance and Risk Management
28:47 Introduction to RMF and Assurance Levels
29:05 Contextualizing Assurance Levels for Different Users
30:25 Continuous Evaluation and Improvement
34:28 User-Controlled Wallets and Federation
35:59 Account Recovery and Assurance Levels
37:18 Overview of NIST 800-63 Documents
51:25 Existential Questions and Personal Anecdotes
55:25 Conclusion and Final Thoughts
Connect with Ryan: https://www.linkedin.com/in/ryan-galluzzo-a100563b/
Authenticate Conference - Use code IDAC15 for 15% off: https://authenticatecon.com/event/authenticate-2024-conference/
Connect with us on LinkedIn:
Jim McDonald: https://www.linkedin.com/in/jimmcdonaldpmp/
Jeff Steadman: https://www.linkedin.com/in/jeffsteadman/
Visit the show on the web at http://idacpodcast.com and watch at https://www.youtube.com/@idacpodcast
In this episode of the Identity at the Center podcast, host Jim McDonald welcomes Deneen DeFiore, Chief Information Security Officer at United Airlines. The episode delves into Deneen's career path in identity, her extensive experience at General Electric, and the evolution of identity and access management practices. The conversation transitions to her current role at United Airlines, highlighting her approach to integrating customer identity with enhanced trust and personalized experiences. The discussion also touches on building high-performing teams, the importance of professional development through conferences and certifications, and the balance between business and technical leadership. They conclude with some lighter notes on Cincinnati landmarks and local traditions.
00:00 Introduction and Housekeeping
01:16 Guest Introduction: Deneen DeFiori
01:37 Deneen's Identity Origin Story
04:11 Innovative Projects at GE
07:50 United Airlines and Customer Identity
12:35 Building a Winning Team
16:27 Professional Development and Certifications
19:58 Balancing Business and Technology
37:20 Future of Identity and Biometrics
40:01 Cincinnati Hallmarks and Farewell
Connect with Deneen: https://www.linkedin.com/in/deneendefiore/
Attending Identity Week in America or Asia? Use our discount code IDAC30 for 30% off your registration fee! Learn more at: http://terrapinn.com/IDWUS/Part-IDAC
Authenticate Conference - Use code IDAC15 for 15% off: https://authenticatecon.com/event/authenticate-2024-conference/
Hybrid Identity Protection Conference (HIP Conf) - Use code IDACpod for 20% off: https://register.hipconf.com/W7eVML
Connect with us on LinkedIn:
Jim McDonald: https://www.linkedin.com/in/jimmcdonaldpmp/
Jeff Steadman: https://www.linkedin.com/in/jeffsteadman/
Visit the show on the web at http://idacpodcast.com and watch at https://www.youtube.com/@idacpodcast
In this sponsored episode of the Identity at the Center Podcast, hosts Jeff and Jim speak with Nitin Sonawane, Chief Product Officer and Co-Founder of Zilla Security. Nitin shares insights about disrupting the identity security and governance space with innovative solutions such as Zilla Universal Sync (ZUS) and how AI and ML can streamline and enhance access reviews and compliance. The discussion covers the evolution of identity governance, the integration challenges, and the novel approaches Zilla Security is adopting to make organizations more secure and efficient. They also touch upon the personal side, diving into Nitin's passion for astronomy and his impressive experiences with telescopic observations. Tune in for a deep dive into the future of identity governance and the potential of leveraging data for better security outcomes.
00:00 Introduction
01:21 Welcome to the Identity at the Center Podcast
01:55 Spotlight on Zilla Security
02:23 Meet Nitin Sonawane
03:36 The Role of a Chief Product Officer
04:44 Overview of Zilla Security
07:16 Challenges in Identity Governance
10:32 Innovations with Zilla Universal Sync (ZUS)
22:45 Future of AI in Identity Governance
33:16 Balancing Security and Compliance
34:43 The Role of Automation in Compliance
36:41 AI's Impact on Security and Compliance
39:14 Risk Management and Identity
40:59 Streamlining Access and Approvals
44:47 Leveraging Data for Risk Reduction
50:29 Future of Identity and AI
53:32 Astronomy and Identity
01:01:04 Conclusion and Contact Information
Connect with Nitin: https://www.linkedin.com/in/nitin-sonawane-0743b/
Learn more about Zilla Security: https://zillasecurity.com/
Connect with us on LinkedIn:
Jim McDonald: https://www.linkedin.com/in/jimmcdonaldpmp/
Jeff Steadman: https://www.linkedin.com/in/jeffsteadman/
Visit the show on the web at idacpodcast.com and subscribe to our YouTube channel at idacpodcast.tv
In this episode of the Identity at the Center podcast, Jeff and Jim discuss the intricacies of authentication with Andrew Shikiar, Executive Director and CEO of the FIDO Alliance. The conversation covers various aspects of authentication including different use cases, the importance of passkeys, and regional adoption trends. They also highlight the upcoming Authenticate 2024 conference in Carlsbad, California, emphasizing its unique value for identity experts and practitioners. Listeners are encouraged to take advantage of early bird pricing and discount codes for the event linked below.
00:00 Welcome to the Identity at the Center Podcast
01:36 Podcast Milestones and Schedule
02:42 Engaging with the Audience
04:35 Introducing the Guest: Andrew Shikiar
07:34 FIDO Alliance and Passkeys Overview
10:12 The Importance of Passwordless Authentication
18:23 Authenticate Conference Highlights
22:07 Conference Details and Registration
26:19 Networking and Conference Challenges
26:35 Session Tracks and Remote Participation
28:02 FIDO APAC Summit in Kuala Lumpur
29:38 Highlights of the Authenticate Conference
32:21 Identity Verification and Adjacent Technologies
34:28 Live Podcasts and Interactive Sessions
35:59 Fun Activities and Networking at Authenticate
39:52 Travel Experiences and Final Thoughts
Connect with Andrew: https://www.linkedin.com/in/andrewshikiar/
Learn more about the FIDO Alliance: https://fidoalliance.org/
Authenticate Conference - Use code IDAC15 for 15% off: https://authenticatecon.com/event/authenticate-2024-conference/
FIDO Alliance Shop - https://shop.fidoalliance.org/ - Use code IDAC10 for a discount on your purchase!
Connect with us on LinkedIn:
Jim McDonald: https://www.linkedin.com/in/jimmcdonaldpmp/
Jeff Steadman: https://www.linkedin.com/in/jeffsteadman/
Visit the show on the web at idacpodcast.com and follow @IDACPodcast on Twitter.
In this sponsored episode, Jim McDonald hosts Eric Woodruff, Senior Security Researcher at Semperis, to discuss the company's approach to identity security. They delve into Semperis' tools like Purple Knight and Forest Druid, focusing on their capabilities in detecting and mitigating Active Directory and Entra ID vulnerabilities. The conversation covers the critical role of prevention and response in ITDR, the impact of ransomware on Enterprise ID infrastructures, and the importance of ensuring a trusted state in Active Directory. They also touch on the upcoming Hybrid Identity Protection Conference and its significance for industry professionals.
00:00 Introduction and Sponsor Spotlight
02:15 Eric Woodruff's Background and Role at Semperis
05:22 Importance of Active Directory in Enterprises
06:45 Threats and Vulnerabilities in Active Directory
17:21 Tools and Solutions for Active Directory Security
22:41 Hybrid Identity Protection and Upcoming Conference
40:13 Closing Thoughts and Personal Anecdotes
Learn more about Semperis: https://www.semperis.com/
Connect with Eric: https://www.linkedin.com/in/ericonidentity/
Meet Silver SAML: Golden SAML in the Cloud: https://www.semperis.com/blog/meet-silver-saml/
Hybrid Identity Protection Conference (HIP Conf) - Use code IDACpod for 20% off: https://register.hipconf.com/W7eVML
Connect with us on LinkedIn:
Jim McDonald: https://www.linkedin.com/in/jimmcdonaldpmp/
Jeff Steadman: https://www.linkedin.com/in/jeffsteadman/
Visit the show on the web at idacpodcast.com and follow @IDACPodcast on Twitter.
In episode 300 of the Identity at the Center podcast, hosts Jeff and Jim celebrate their significant milestone by discussing the origins and future of the podcast. They delve into the complexities of identity management in educational settings and explore the philosophical underpinnings of the term 'identity at the center.' Highlighted questions from listeners cover topics like the effectiveness of Social Security Numbers for identity verification and the challenges of authenticating callers to the help desk. They also discuss their recent conference acceptances and plans for future episodes. The conversation shifts to the potential impacts of AI, decentralized identity, and the growing importance of identity in government services.
00:00 Introduction and Episode 300 Milestones
02:01 The Journey to YouTube
04:18 Becoming a 501c3 Nonprofit
07:18 Understanding Identity at the Center
09:37 Complexities of Identity in Education
12:43 Identity as the New Perimeter
18:20 Identity in Business and Government
27:15 Centralizing Identity Data for Success
28:21 Challenges in Higher Education IT Systems
30:01 Listener Question: Confirming Identity Over the Phone
30:31 Weaknesses in Caller Authentication
34:19 Best Practices for Identity Verification
47:48 Future of Identity and Access Management
51:23 Upcoming Conferences and Final Thoughts
IDPro Body of Knowledge - Account Recovery (v3) by Dean Saxe: https://bok.idpro.org/article/id/64/
Attending Identity Week in America or Asia? Use our discount code IDAC30 for 30% off your registration fee! Learn more at: http://terrapinn.com/IDWUS/Part-IDAC
Authenticate Conference - Use code IDAC15 for 15% off: https://authenticatecon.com/event/authenticate-2024-conference/
Hybrid Identity Protection Conference (HIP Conf) - Use code IDACpod for 20% off: https://register.hipconf.com/W7eVML
Connect with us on LinkedIn:
Jim McDonald: https://www.linkedin.com/in/jimmcdonaldpmp/
Jeff Steadman: https://www.linkedin.com/in/jeffsteadman/
Visit the show on the web at http://idacpodcast.com and watch at https://www.youtube.com/@idacpodcast
In this episode of Identity at the Center podcast, hosts Jeff and Jim delve into Microsoft's approach to identity and access management with guest Merill Fernando, a product manager at Microsoft. Merill shares his journey into the identity space, the current state and future plans for Entra ID, and the importance of DevOps and governance in identity management. The conversation also touches on the potential of AI in security with the introduction of Security Copilot and the intricacies of managing non-human identities.
00:00 Introduction and Greetings
01:53 Concert Experience and Technology
05:48 Travel and Work Updates
07:54 Conference Announcements and Discount Codes
11:22 Guest Introduction: Merrill Fernando
12:08 Merrill's Journey into Identity
18:54 Role and Responsibilities at Microsoft
24:09 DevOps and Identity Management
33:21 DevTestProd Environment Setup
36:10 Challenges with Machine IDs in DevOps
40:12 Understanding Service Principles
42:42 Microsoft's Identity Governance and Administration
50:25 The Role of AI in Identity Management
56:15 Hiking as a Decompression Activity
01:04:35 Final Thoughts and Wrap-Up
Connect with Merill: https://www.linkedin.com/in/merill/
Microsoft 365 / Entra DevOps Tenant Model: https://x.com/merill/status/1683783494324097025
Attending Identity Week in America or Asia? Use our discount code IDAC30 for 30% off your registration fee! Learn more at: http://terrapinn.com/IDWUS/Part-IDAC
Authenticate Conference - Use code IDAC15 for 15% off: https://authenticatecon.com/event/authenticate-2024-conference/
Hybrid Identity Protection Conference (HIP Conf) - Use code IDACpod for 20% off: https://register.hipconf.com/W7eVML
Connect with us on LinkedIn:
Jim McDonald: https://www.linkedin.com/in/jimmcdonaldpmp/
Jeff Steadman: https://www.linkedin.com/in/jeffsteadman/
Visit the show on the web at http://idacpodcast.com and watch at https://www.youtube.com/@idacpodcast
In this episode of the Identity at the Center podcast, hosts Jeff and Jim delve into the complexities of creating effective RFPs (Request for Proposals) for Identity and Access Management (IAM) systems. They provide critical advice for both the customer and vendor sides, stressing the importance of defining clear objectives, understanding technical and business requirements, and avoiding an overwhelming level of detail that can detract from the RFP's usefulness. The hosts also advocate for combining software and services in a single RFP and highlight the value of open-ended questions to gather meaningful responses. Drawing from their experiences, Jeff and Jim discuss the pros and cons of RFPs, the importance of experience from both vendors and implementation partners, and offer strategies for managing the RFP process effectively. Thanks to listener Alfred in Canada for the great question!
00:00 Introduction and Casual Banter
02:09 Travel Adventures and Motorcycle Rally
05:07 Podcast Challenges and Listener Shoutouts
06:34 Upcoming Conferences and Events
09:57 Listener Question: Tips for a Smooth IAM RFP
22:00 Importance of Subject Knowledge22:15 The Positive Side of RFPs
24:06 Challenges with RFPs
25:39 Combining Software and Services in RFPs
26:58 Evaluating Implementation Partners
28:26 Experience Matters in RFP Responses
31:06 Tips for Effective RFPs
34:10 Personal Anecdote: A Scare and a Surprise Party
38:58 Upcoming Busy Schedule
40:05 Wrapping Up and Final Thoughts
Attending Identity Week in Europe, America, or Asia? Use our discount code IDAC30 for 30% off your registration fee! Learn more at:
Authenticate Conference - Use code IDAC15 for 15% off: https://authenticatecon.com/event/authenticate-2024-conference/
Connect with us on LinkedIn:
Jim McDonald: https://www.linkedin.com/in/jimmcdonaldpmp/
Jeff Steadman: https://www.linkedin.com/in/jeffsteadman/
Visit the show on the web at http://idacpodcast.com and watch at https://www.youtube.com/@idacpodcast
Our TOPPODCAST Picks 
