#305 - Identity Week America with Ryan Galluzzo of NIST

In this sponsored episode of the Identity at the Center podcast brought to you by Strivacity, Jeff and Jim welcome Stephen Cox, co-founder and CTO of Strivacity, to discuss the evolving landscape of identity management. The conversation covers Strivacity's unique approach to customer identity and access management (CIAM), the importance of isolation by design for security, and the integration of generative AI into their platform. Stephen shares insights on how Strivacity differentiates itself in the market, the recognition from Gartner, and the challenges of implementing AI in identity management systems. They discuss the evolving landscape of AI, particularly in relation to data access, security, and identity management. Also explored is the balance between leveraging AI for business insights and the potential threats it poses to data security. The discussion also touches on the future of AI technology, the challenges of governance in a rapidly changing environment, and an unexpected segue into astrophotography, highlighting the intersection of AI technology and personal interests. Chapters 00:00 Introduction to the Identity at the Center Podcast 01:37 Meet Steven Cox from Strivacity 02:34 Strivacity's Unique Approach to CIAM 09:27 Differentiating Consumer and Customer IAM 11:49 Strivacity's Recognition and Achievements 14:05 The Importance of Isolation by Design 15:38 Generative AI in IAM Products 21:45 Implementing AI in Strivacity's Platform 29:25 Addressing AI Hallucinations and Security Concerns 30:56 Cost Implications of AI Systems 31:50 Leveraging AI for Business Insights 34:03 Implementing AI with Security in Mind 38:53 Future of AI in Identity Space 44:48 Astrophotography Adventures 53:52 Conclusion and Final Thoughts Connect with Stephen: https://www.linkedin.com/in/stephencox/ Learn more about Strivacity: https://strivacity.ai Connect with us on LinkedIn: Jim McDonald: https://www.linkedin.com/in/jimmcdonaldpmp/ Jeff Steadman: https://www.linkedin.com/in/jeffsteadman/ Visit the show on the web at idacpodcast.com and watch at https://www.youtube.com/@idacpodcast Keywords Identity Management, Customer IAM, Strivacity, AI Integration, Cybersecurity, Digital Identity, Gartner Recognition, Isolation by Design, Generative AI, User Experience, AI, data security, identity management, astrophotography, technology governance

In this engaging podcast episode, hosts Jeff and Jim broadcast from the Authenticate 2024 conference in Carlsbad, California, exploring a wide range of topics. They discuss their podcast's future and share personal experiences with hurricanes. Joined by Dean Saxe, Principal Engineer at Beyond Identity and Chair of the OpenID Foundation Death & The Digital Estate Community Group, the conversation covers identity security, digital estates, and the lasting impact of digital assets. Listeners will hear about complex themes such as managing digital legacies, the evolution of digital credentials, the importance of device-bound credentials, and personal stories of career development in the IAM field. Finally, the episode ends on a lighthearted note with a nostalgic dive into favorite board games, from childhood classics to modern hits. Don't miss this multifaceted discussion that blends professional insights with personal anecdotes. 00:00 Introduction, Conference Setting, and Personal Updates 02:19 Hurricane Aftermath and Resilience 04:03 Authenticate 2024 Highlights 04:57 Upcoming Events and Case Study Teasers 05:38 Introducing Dean Saxe 06:49 Dean's Journey in Identity and Security 13:30 Death and the Digital Estate 25:08 The Risks of Relying on Cloud Services 25:35 Legacy Contacts and Digital Estate Planning 28:15 Respecting Cultural Differences in Digital Death 29:04 Empowerment Through Consent and Choice 29:56 Interoperability and Accessibility in Digital Estates 30:25 Legal and Regulatory Considerations 32:20 The Importance of a Digital Living Will 33:21 Challenges and Future Directions 33:54 The Role of AI in Digital Estates 39:14 Getting Involved in the Digital Estate Community 44:33 Board Games and Lighthearted Farewells 50:15 Conclusion and Final Thoughts Connect with Dean: https://www.linkedin.com/in/deanhsaxe/ Learn more about Beyond Identity: https://www.beyondidentity.com/ Death and the Digital Estate (DADE) Community Group: https://openid.net/cg/death-and-the-digital-estate/ Gartner IAM Summit - Save $375 on registration using our exclusive code IDAC375: https://www.gartner.com/en/conferences/na/identity-access-management-us Semperis’ Hybrid Identity Protection Conference (HIP Conf) - Use code IDACpod for 20% off: https://www.hipconf.com/ Connect with us on LinkedIn: Jim McDonald: https://www.linkedin.com/in/jimmcdonaldpmp/ Jeff Steadman: https://www.linkedin.com/in/jeffsteadman/ Visit the show on the web at http://idacpodcast.com

In this compelling episode of the Identity at the Center podcast, hosts Jeff and Jim invite you to explore the evolving landscape of privacy, identity, and data security. Featuring insights from industry expert Tina Srivastava, co-founder of Badge, they delve into the pressing issue of data breaches and the innovative technologies designed to combat them, including privacy-preserving biometric systems and public key conversion. Discover the potential of these solutions to revolutionize identity security, the importance of GDPR, and the critical need for inclusive, accessible digital identity systems. The discussion highlights the balance between convenience and privacy while addressing the responsibilities of device manufacturers, telecom companies, and app developers. Tune in for an enlightening conversation about national security, phishing-resistant authentication, and the role of technology in safeguarding our digital identities. Plus, get a glimpse of the social side of tech conferences with a fun recap of Authenticate 2024's karaoke night and a heartfelt thank you to the episode's sponsors and supporters.00:00 Welcome to the Identity at the Center Podcast02:22 Conference Highlights and Casual Banter05:05 Main Topic: Identity and Security with Tina Srivastava08:50 Badge: Revolutionizing Identity Verification12:01 Challenges and Innovations in Identity Security22:08 Reflecting on Domestic Abuse and Digital Identity23:16 Accessibility and Inclusivity in Technology25:48 The Battle for Privacy and Identity29:18 The Future of Seamless Identity Verification35:41 Karaoke Fun at Authenticate Conference39:25 Wrapping Up and Final ThoughtsConnect with Tina: https://www.linkedin.com/in/tina-s-8291438a/Learn more about Badge: https://www.badgeinc.com/Gartner IAM Summit - Save $375 on registration using our exclusive code IDAC375: https://www.gartner.com/en/conferences/na/identity-access-management-usSemperis’ Hybrid Identity Protection Conference (HIP Conf) - Use code IDACpod for 20% off: https://www.hipconf.com/Connect with us on LinkedIn:Jim McDonald: https://www.linkedin.com/in/jimmcdonaldpmp/Jeff Steadman: https://www.linkedin.com/in/jeffsteadman/Visit the show on the web at http://idacpodcast.com

This episode is sponsored by Semperis: semperis.com In this sponsored episode of the Identity at the Center podcast, hosts Jeff and Jim discuss the changing landscape of ransomware attacks and the importance of identity security with Gil Kirkpatrick, Chief Architect at Semperis. They explore how ransomware strategies have evolved from merely encrypting data to exfiltrating sensitive information for ransom. The conversation also delves into the necessity of having robust identity recovery plans, the role of Active Directory in cybersecurity, and the importance of regular security posture assessments with tools like Purple Knight. Additionally, Gil shares insights from the Semperis Ransomware Risk Report and recounts his experiences as a pilot, offering a fascinating look at both cybersecurity and the world of aviation. 00:00 Introduction to Ransomware Evolution 01:25 Welcome to the Identity at the Center Podcast 01:53 Guest Introduction: Gil Kirkpatrick from Semperis 02:25 Journey into the Identity Space 06:09 Semperis: Enhancing Security and Resilience 21:08 The Importance of Active Directory Security 28:09 Ransomware Risk Report Insights 32:15 The Trustworthiness of Decryption Keys 34:18 Business Disruption from Ransomware 36:14 Should Companies Pay the Ransom? 38:47 The Importance of Cyber Resilience 41:14 Active Directory and Disaster Recovery 43:17 The Decline in Ransomware News 47:36 The Basics of Cybersecurity 50:31 Adventures in Piloting 58:35 Conclusion and Final Thoughts Connect with Gil: https://www.linkedin.com/in/gil-kirkpatrick/ Learn more about Semperis: https://www.semperis.com/ 2024 Ransomware Risk Report: Embracing the Assume Breach Mindset: ttps://www.semperis.com/ransomware-risk-report/ Download Purple Knight: https://www.semperis.com/purple-knight/ Hybrid Identity Protection Conference (HIP Conf) - Use code IDACpod for 20% off: https://register.hipconf.com/W7eVML Connect with us on LinkedIn: Jim McDonald: https://www.linkedin.com/in/jimmcdonaldpmp/ Jeff Steadman: https://www.linkedin.com/in/jeffsteadman/ Visit the show on the web at idacpodcast.com

In this special episode of the Identity at the Center podcast, recorded live from the SailPoint Navigate 2024 conference in Orlando, hosts Jeff and Jim engage with Andrew Moore, VP of Product Management at SailPoint. The conversation spans a variety of critical themes, including the management of identity platforms, product development, and the importance of customer feedback. Andrew details his career journey, including his transition from Under Armour to SailPoint, and shares insights into the development of connected products, data-driven design, and user experience enhancements. The episode also introduces the latest innovations, such as Privileged Task Automation and Machine Identity Security, emphasizing their potential to address productivity and security risks. Furthermore, the speakers discuss the transformative role of AI in Identity Governance and Administration (IGA), highlighting the importance of explainable AI and maintaining strong security standards. This episode is a deep dive into the dynamic landscape of identity governance and the strategies driving continuous innovation. 00:00 Welcome to the Identity at the Center Podcast 01:55 Conference Insights and Future Plans 03:38 Introducing Andrew Moore 03:52 Andrew Moore's Journey into Identity 06:48 Product Management at SailPoint 16:48 Innovative Projects and Customer Feedback 23:17 Exploring Low Code and No Code Identity Automations 23:53 Understanding Customer Feedback and Research Techniques 24:41 Balancing Positive and Negative Feedback 00:24 Dealing with Critical Feedback 29:34 Announcing the Product Roadmap 30:37 Privileged Task Automation: A Game Changer 39:11 Machine Identity Security: New Innovations 42:33 The Future of AI in Identity Governance 47:12 Addressing Concerns About AI in IGA 50:40 Conclusion and Final Thoughts Connect with Andrew: https://www.linkedin.com/in/richardandrewmoore/ Learn more about SailPoint: https://www.sailpoint.com/ SailPoint Navigate 2024 London - Use code IDAC for a £300 discount - https://www.sailpoint.com/navigate/london Semperis’ Hybrid Identity Protection Conference (HIP Conf) - Use code IDACpod for 20% off: https://www.hipconf.com/ Gartner IAM Summit - Save $375 on registration using our exclusive code IDAC375: https://www.gartner.com/en/conferences/na/identity-access-management-us Connect with us on LinkedIn: Jim McDonald: https://www.linkedin.com/in/jimmcdonaldpmp/ Jeff Steadman: https://www.linkedin.com/in/jeffsteadman/ Visit the show on the web at http://idacpodcast.com 🔑 Episode Keywords Identity Governance, Sailpoint, Product Management, Innovation Workshop, Ai In Iga, Ux Design, Machine Identity Security, Privileged Task Automation, Customer Feedback, Product Roadmap, Orlando Conference, Bill Gates Quote, Data Privacy, Under Armour, Wearable Technology, User Experience, Cybersecurity Trends, Enterprise Applications, Saas Platform, Identity Security

In this comprehensive episode, Jeff and Jim broadcast from the Authenticate 2024 conference in San Diego, uncovering the deep connection between technology and human rights with an emphasis on inclusivity and ethical considerations in digital identity advancements. Hear from Grace Klutke, the Kim Cameron Award winner, about her remarkable journey from law to digital identity. Dive into discussions with Ian Glazer and Arynn Crow of the Digital Identity Advancement Foundation (DIAF) on the foundation's mission, mentorship programs, and the significance of legacy awards like the Kim Cameron and Vittorio Bertucci Awards. Explore interdisciplinary approaches to digital identity encompassing technical, legal, and social engineering perspectives. Gain insights into AI's role, data governance, and the unique culture of the digital identity community. Plus, enjoy a light-hearted segment on conference experiences, attire, and industry swag. Don't forget to like, subscribe, and check out our links in the show notes! 00:00 Introduction: Identity at the Center Podcast Begins 03:00 Upcoming Conferences and Events 03:54 Introducing the Guests: Grace, Arynn, and Ian 05:09 Grace's Journey to the Kim Cameron Award 07:13 Digital Identity Advancement Foundation (DIAF) 09:43 The Importance of Standards and Awards 17:35 The Role of Legal Background in Digital Identity 18:02 Legal Perspectives on Digital Identity 18:59 The Intersection of Law and Technology 21:20 Challenges and Future Directions 23:23 Mentorship and Career Advice 24:11 AI and Identity Data 27:54 Conference Insights and Reflections 35:23 Closing Thoughts and Future Plans Connect with Grace: https://www.linkedin.com/in/grace-klutke-3ba8a1228/ Connect with Arynn: https://www.linkedin.com/in/arynn-crow-821761103/ Connect with Ian: https://www.linkedin.com/in/iglazer Learn more about DIAF: https://digitalidadvancement.org/ Gartner IAM Summit - Save $375 on registration using our exclusive code IDAC375: https://www.gartner.com/en/conferences/na/identity-access-management-us Semperis’ Hybrid Identity Protection Conference (HIP Conf) - Use code IDACpod for 20% off: https://www.hipconf.com/ Connect with us on LinkedIn: Jim McDonald: https://www.linkedin.com/in/jimmcdonaldpmp/ Jeff Steadman: https://www.linkedin.com/in/jeffsteadman/ Visit the show on the web at http://idacpodcast.com and watch at http://idacpodcast.tv

In this episode of the Identity at the Center podcast, Jim McDonald speaks with Brandon Pinzon, an Insurance Industry Cybersecurity Executive, about the evolving landscape of identity management. They discuss Brandon's journey into digital identity, the role of identity management within organizations, and the unique challenges faced by the insurance industry. The conversation also delves into the intersection of compliance and security, highlighting the importance of understanding risk in the identity space. In this conversation, Brandon discusses the critical relationship between risk management and compliance in cybersecurity, emphasizing the importance of understanding and quantifying risk. He explores the evolving landscape of cyber insurance, highlighting the need for identity practitioners to be proactive in managing risks and building relationships with financial stakeholders. The discussion also touches on the necessity of cyber insurance for various organizations and concludes with insights into the vibrant cybersecurity community in San Antonio. 00:00 Podcast Introduction and Host Update 01:23 Upcoming Conferences and Discount Codes 02:29 Guest Introduction: Brandon Pinzon 03:02 Brandon's Identity Origin Story 05:25 Debate: Where Does Identity Management Belong? 13:45 Pros and Cons of CISO Responsibility for Identity 21:16 Identity in the Insurance Industry 29:52 Addressing Legacy Systems in Financial Institutions 31:38 Compliance vs. Security in Financial Services 35:33 Understanding and Quantifying Risk 38:33 The Role of Cyber Insurance 54:28 San Antonio: A Hub for Cybersecurity Connect with Brandon: https://www.linkedin.com/in/bpinzon/ Gartner IAM Summit - Save $375 on registration using our exclusive code IDAC375: https://www.gartner.com/en/conferences/na/identity-access-management-us Semperis’ Hybrid Identity Protection Conference (HIP Conf) - Use code IDACpod for 20% off: https://www.hipconf.com/ Connect with us on LinkedIn: Jim McDonald: https://www.linkedin.com/in/jimmcdonaldpmp/ Jeff Steadman: https://www.linkedin.com/in/jeffsteadman/ Visit the show on the web at http://idacpodcast.com and watch at https://www.youtube.com/@idacpodcast Keywords identity management, cybersecurity, insurance industry, compliance, digital identity, CISO, identity governance, user experience, risk management, financial services, risk management, compliance, cyber insurance, identity management, cybersecurity, threat modeling, risk assessment, business continuity, data protection, security strategy

In this episode of the Identity at the Center podcast, Jim McDonald is joined by Eve Maler to explore a provocative topic—"Consent is Dead." Eve shares insights from her recent keynote at the European Identity and Cloud Conference (EIC) in Berlin, where she unpacked the failures of consent-based systems in protecting user privacy. They discuss why the "I agree" button has lost its meaning, even in regions with strong data protection laws like GDPR, and how users' personal information is monetized through identity resolution technologies. Eve reveals how identity professionals often overlook the world of identity resolution, which operates without a direct relationship with users. She emphasizes the importance of IAM professionals understanding the deep monetization of personal data and the critical need to improve systems of privacy, consent, and security. They also touch on the role of AI in authorization decisions and the balance between explainability and automation in future IAM systems. Chapters 00:00 Introduction and Context 03:01 Eve Maler's Journey in Identity 09:53 Exploring Personhood and Verifiable Credentials 12:52 Identity Verification and AI Threats 25:13 The State of Consent in Digital Identity 30:42 GDPR and Its Implications 39:53 The Future of AI in IAM 45:05 AuthZen Working Group Update 55:23 Non-Human Identities and IoT 01:02:52 Closing Thoughts and Future Directions 01:04:03 Fingerprint City Outro.mp4 Connect with Eve: https://www.linkedin.com/in/evemaler/ Venn Factory: https://www.vennfactory.com/ Personhood: The Killer Credential? (blog by Eve): https://workshop.vennfactory.com/p/personhood-the-killer-credential Death and the Digital Estate (blog by Eve): https://workshop.vennfactory.com/p/death-and-the-digital-estate From Chance to Control (blog by Eve): https://workshop.vennfactory.com/p/from-chance-to-control Connect with us on LinkedIn: Jim McDonald: https://www.linkedin.com/in/jimmcdonaldpmp/ Jeff Steadman: https://www.linkedin.com/in/jeffsteadman/ Visit the show on the web at http://idacpodcast.com and watch at https://www.youtube.com/@idacpodcast

In this Token Identity sponsored episode of the Identity at the Center podcast, hosts Jeff and Jim welcome Ido Shlomo, co-founder and CTO of Token Security, to discuss the vital and often overlooked topic of non-human identities or machine identities within organizations. The conversation covers how machine identities differ from human identities, the unique challenges they pose, and how Token Security aims to address these issues. Ido shares his personal journey into the cyber-security field, real-life case studies, and details about Token Security's approach to managing and securing machine identities. The episode also delves into the implementation and ROI of their solution and touches on lighter topics like online gaming. 00:00 Welcome to the Identity at the Center Podcast 03:14 Guest Introduction: Ido Shlomo from Token Security 03:35 Ido Shlomo's Journey into Identity Security 06:04 Understanding Token Security's Mission 07:37 Challenges in Machine Identity Management 10:08 Defining Non-Human Identity 11:32 The Story Behind Token Security's Name 13:35 Token Security's Unique Value Proposition 20:20 Real-Life Case Study: The Importance of Non-Human Identity Security 22:05 Narrowing Down the Machines 22:15 Identifying the Compromised Machine 22:26 GitHub Report and API Key 22:34 Event Resolution and Success 22:39 Human vs Non-Human Identity 22:56 Technology Differences and Case Study 23:23 Implementing the Solution 23:46 Philosophy of Software Development 24:28 Integration and Deployment 26:09 Building an Inventory 26:31 Reducing Risk and Lifecycle Process 28:05 Attribution and Data Collection 30:02 Learning More and ROI 34:22 Online Gaming and Personal Insights 34:47 Gaming Personas and Preferences 36:34 Gaming Memories and Character Classes 40:33 Wrapping Up and Final Thoughts Connect with Ido: https://www.linkedin.com/in/ido--shlomo/ Learn more about Token Security: https://www.token.security/?utm_medium=idac&utm_source=website&utm_campaign=Sep_podcast&utm_content=sponsor_page Connect with us on LinkedIn: Jim McDonald: https://www.linkedin.com/in/jimmcdonaldpmp/ Jeff Steadman: https://www.linkedin.com/in/jeffsteadman/ Visit the show on the web at idacpodcast.com and watch at https://www.youtube.com/@idacpodcast

In this episode of the Identity at the Center podcast, Jeff and Jim discuss how to make the business case for IAM and determining the return on investment (ROI). Joined by Andre Koot, they delve into the need for a compelling business case to drive IAM investments. The conversation covers the quantitative and qualitative aspects of ROI, and the importance of stakeholder communication. 00:00 Welcome to the Identity at the Center Podcast 01:39 Training and Professional Development in IAM 03:58 Upcoming Conferences and Events 07:51 The Business Case for IAM 12:51 IAM: Financial and Non-Financial Perspectives 23:08 Calculating Return on Investment in IAM 28:59 Hard Dollars vs. Soft Dollars 30:11 Dollarizing Non-Savings Benefits 31:40 Challenges in ROI Calculations 34:07 Quantifiable vs. Non-Quantifiable Benefits 37:14 ROI in Different Organizational Contexts 39:50 Insourcing vs. Outsourcing 49:02 Communicating ROI Effectively 54:10 Language Nuances and Cultural Context 01:01:35 Conclusion and Final Thoughts Connect with Andre: https://www.linkedin.com/in/meneer/ The Business Case for IAM (IDPro): https://bok.idpro.org/article/id/97/ Strategic Alignment and Access Governance (IDPro): ****https://bok.idpro.org/article/id/90/ Authenticate Conference - Use code IDAC15 for 15% off: https://authenticatecon.com/event/authenticate-2024-conference/ SailPoint Navigate - October 21-24 in Orlando, FL - Use code IDAC for a $400 discount Connect with us on LinkedIn: Jim McDonald: https://www.linkedin.com/in/jimmcdonaldpmp/ Jeff Steadman: https://www.linkedin.com/in/jeffsteadman/ Visit the show on the web at http://idacpodcast.com and watch at https://www.youtube.com/@idacpodcast