This is the second in a five-part series of conversations that Jeff had with fellow identity professionals at the FIDO Alliance Authenticate 2021 conference. Jeff talks with Andrew Shikiar, Executive Director of the FIDO Alliance, Joon Hyuk Lee, Head of the FIDO Developer Challenge, Bhaskar Deo, CEO & Co-Founder of Trillbit, and Aaron Brighton, Founder of Lockdrop about the FIDO Developer challenge and how application developers like Bhaskar and Aaron leveraged FIDO authentication for their ...
Oct 26, 2021•36 min•Ep. 118
This is the first in a five-part series of conversations that Jeff had with fellow identity professionals at the FIDO Alliance Authenticate 2021 conference. Jeff talks with Arryn Crow, Senior Technical Program Manager for AWS Identity about how to make the IAM field more inclusive and accessible. Connect with Arryn Crow: https://www.linkedin.com/in/arynn-crow-821761103/ Learn more about the FIDO Alliance: https://fidoalliance.org/ Connect with us on LinkedIn: Jim McDonald: https://www.linkedin.c...
Oct 25, 2021•24 min•Ep. 117
Jim and Jeff talk with Eve Maler, ForgeRock's Chief Technology Officer and Chief UMAanitarian, about the 2021 ForgeRock Consumer Identity Breach Report and discuss some of the key findings including why the Healthcare sector continues to be targeted. Connect with Eve on LinkedIn: https://www.linkedin.com/in/evemaler/ Eve's Twitter: https://twitter.com/xmlgrrl ForgeRock 2021 Consumer Identity Breach Report: https://www.forgerock.com/resources/2021-consumer-identity-breach-report NIST 800-207 Zero...
Oct 18, 2021•59 min•Ep. 116
Jim and Jeff talk with John Morton, Director of Solutions Engineering at Britive, about why managing IAM for the cloud is different and the challenges it brings to IAM programs. Connect with John on LinkedIn: https://www.linkedin.com/in/johnmortonnotromnhoj/ Learn more about Britive: https://www.britive.com/ Protiviti Webinar "Why IAM Fails: How to Develop an IAM Program That Works": https://gateway.on24.com/wcc/eh/783829/lp/3384356/why-iam-fails-how-to-develop-an-iam-program-that-works/?isSocia...
Oct 11, 2021•55 min•Ep. 115
Jim and Jeff talk with Andrew Chanthaphone, Manager with Edgile's Identity Service Line, about getting into the IAM space and things to consider for running successful IAM projects. Connect with Andrew on LinkedIn: https://www.linkedin.com/in/andrewchanthaphone/ Check out Andrew's YouTube "All Things IAM": https://www.youtube.com/channel/UCQt1akSIv5b8GW6yp2sQzjw Andrew's Identity and Access Management 101 Webinar for CSNP: https://youtu.be/vI-vTE4TB3s Connect with Jim and Jeff on LinkedIn here: ...
Oct 04, 2021•52 min•Ep. 114
Jim and Jeff talk with Jennifer Kraxner, Director of Strategic Advisory at SecZetta, about the convergence of third-party risk and identity and the importance of having accurate and always up-to-date authoritative sources for all identities in the organization. Connect with Jennifer Kraxner on LinkedIn: https://www.linkedin.com/in/jenkraxner/ IAM Best Practices Blog Series: The Importance of an Authoritative Identity Source: https://www.idsalliance.org/blog/2020/09/11/iam-best-practices-blog-ser...
Sep 27, 2021•53 min•Ep. 113
Jim and Jeff talk with Stephen Cox, Co-Founder and Chief Technology Officer at Strivacity, about customer or consumer IAM (CIAM) and things to consider for a rollout such as security, scale, and using a product versus open-source solution. Connect with Stephen on LinkedIn: https://www.linkedin.com/in/stephencox/ Learn more about Strivacity: https://strivacity.com/ Connect with Jim and Jeff on LinkedIn here: Jim McDonald: https://www.linkedin.com/in/jimmcdonaldpmp/ Jeff Steadman: https://www.link...
Sep 20, 2021•47 min•Ep. 112
Jim and Jeff talk with Andrew Shikiar, Executive Director of the FIDO Alliance, about the upcoming Authenticate 2021 Conference. Authenticate 2021 Conference: https://authenticatecon.com/ Learn more about the FIDO Alliance: https://FidoAlliance.org Connect with Andrew on LinkedIn: https://www.linkedin.com/in/andrewshikiar/ Connect with Jim and Jeff on LinkedIn here: Jim McDonald: https://www.linkedin.com/in/jimmcdonaldpmp/ Jeff Steadman: https://www.linkedin.com/in/jeffsteadman/ Visit the show a...
Sep 16, 2021•13 min•Ep. 111
Jim and Jeff talk with Gil Kirkpatrick, Chief Architect at Semperis and 17-year Microsoft MVP for Active Directory and Enterprise Mobility, about how Microsoft approaches Hybrid Identity and what you should be thinking about when it comes to securing these identities. Connect with Gil on LinkedIn: https://www.linkedin.com/in/gil-kirkpatrick/ Learn more about Semperis: https://www.semperis.com/ Learn more about the Hybrid Identity Conference: https://www.hipconf.com/ Connect with Jim and Jeff on ...
Sep 13, 2021•56 min•Ep. 110
Jim and Jeff talk with Roger Grimes, Data Driven Defense Evangelist at KnowBe4 about hacking MFA and some of the misconceptions people might have about the security it provides. Connect with Roger on LinkedIn: https://www.linkedin.com/in/rogeragrimes/ Webinar - Nuclear Ransomware: https://us02web.zoom.us/webinar/register/1016269776988/WN_gXRlL99_QcKbNTF8oMyiaQ Webinar - 12 Ways to Defeat Multi-Factor Authentication: https://info.knowbe4.com/webinar-12-ways-to-defeat-mfa-chnl Some of Roger's Book...
Sep 06, 2021•1 hr 10 min•Ep. 109
Jim and Jeff talk with Kurt Johnson, Vice President of Strategy & Business Development at Beyond Identity, about the ongoing maturity of authentication and getting to passwordless. Connect with Kurt on LinkedIn: https://www.linkedin.com/in/kurt-johnson-3aaaa5/ Learn more about Beyond Identity: https://www.beyondidentity.com/ Average Cost to Buy Access to a Compromised Company - $1,000: https://www.darkreading.com/threat-intelligence/average-cost-to-buy-access-to-a-compromised-company-1-000 C...
Aug 30, 2021•1 hr 1 min•Ep. 108
Jim and Jeff talk with Harry Sverdlove, Chief Technologist at Zscaler, about Identity Based Segmentation, Secure Access Service Edge (SASE aka "Sassy"), and who wins in a battle between the Stay Puft Marshmallow Man and the Pillsbury Doughboy. Connect with Harry on LinkedIn: https://www.linkedin.com/in/harrysverdlove/ Three Styles of Identity-Based Segmentation: https://www.gartner.com/doc/reprints?id=1-255M0P9G&ct=210204&st=sb&__hstc=186049462.8bc3d35413990dfd42b08db4be9b8c69.162256...
Aug 23, 2021•49 min•Ep. 107
Jim and Jeff talk with Martin Kuppinger, Founder and Principal Analyst at KuppingerCole, about things to consider on how to make your IAM programs and projects a success. Connect with Martin on LinkedIn: https://www.linkedin.com/in/martinkuppinger/ Learn more about KuppingerCole: https://www.kuppingercole.com/ KuppingerCole European Identity and Cloud Conference: https://www.kuppingercole.com/events/eic2021 KuppingerCole Key Success Factors for IAM Projects: https://bit.ly/37guZkv Connect with J...
Aug 16, 2021•1 hr 16 min•Ep. 106
Jim and Jeff talk with Tom Malta, CEO & Principal of IAM Experts, LLC, about his Identify Defined Security Alliance IAM Evangelist of the Year award, hybrid cloud identity management, and the adoption of password less authentication. Connect with Tom on LinkedIn: https://www.linkedin.com/in/identitymgmtexpert/ A Single Identity Management and Security Strategy for Hybrid Clouds: https://www.idsalliance.org/blog/2021/05/12/a-single-identity-management-and-security-strategy-for-hybrid-clouds/ ...
Aug 09, 2021•53 min•Ep. 105
Jim and Jeff talk with Rod Simmons, Vice President of Product Strategy at Omada, about the role modern IGA plays in a Zero Trust strategy. Connect with Rod on LinkedIn: https://www.linkedin.com/in/rodlsimmons/ Learn about Omada here: https://www.omada.net/ A Modern Approach to Identity Governance and Administration: Securing Remote Work and Supporting Zero Trust Initiatives: https://omadaidentity.com/resources/analyst-reports/esg-modern-iga-report/?success=true Check out Rod's Technology Podcast...
Aug 02, 2021•49 min•Ep. 104
Jim and Jeff talk with Frank Villavicencio, Chief Product Officer with Greenshades Software, about going passwordless and the approach he took with his organization. Connect with Frank on LinkedIn: https://www.linkedin.com/in/fvillavicencio/ Learn more about Greenshades: https://www.greenshades.com/ Learn more about HYPR: https://www.hypr.com/ Microsoft's CISO: Why we're trying to banish passwords forever: https://www.zdnet.com/google-amp/article/microsofts-ciso-why-were-trying-to-banish-passwor...
Jul 26, 2021•57 min•Ep. 103
Jim and Jeff talk with Gerry Gebel, Head of Standards for Strata.io, about identity orchestration, identity fabrics, and how these are coming together to provide a consistent cloud IAM experience. Connect with Gerry on LinkedIn: https://www.linkedin.com/in/gerry-gebel/ Learn more about Strata.io: https://www.strata.io/ Connect with Jim and Jeff on LinkedIn here: Jim McDonald: https://www.linkedin.com/in/jimmcdonaldpmp/ Jeff Steadman: https://www.linkedin.com/in/jeffsteadman/ Visit the show at ww...
Jul 19, 2021•51 min•Ep. 102
Jim and Jeff talk with Sarah Cecchetti, Principal Product Manager for AWS Identity and Co-founder, Board Member, and President of IDPro, about AWS Cognito and the new IDPRO Certified Identity Professional (CIDPRO) certification. Connect with Sarah on LinkedIn: https://www.linkedin.com/in/sarahcecchetti/ IDPro certification link: https://idpro.org/cidpro/ Learn more about AWS Cognito: https://aws.amazon.com/cognito/ Connect with Jim and Jeff on LinkedIn here: Jim McDonald: https://www.linkedin.co...
Jul 12, 2021•53 min•Ep. 101
It's our 100th episode AND our second birthday! A big thank you to everyone that listens! Jim and Jeff talk with Victor Barris, Co-Founder of Identropy and now Managing Director with Protiviti, about what it was like to build an identity company, identity software, pivoting to identity professional services, and getting acquired by a larger organization. Connect with Victor on LinkedIn: https://www.linkedin.com/in/victorbarris/ Connect with Jim and Jeff on LinkedIn here: Jim McDonald: https://ww...
Jul 05, 2021•1 hr 15 min•Ep. 100
Jim and Jeff talk with Julie Smith, Executive Director at the Identity Defined Security Alliance (IDSA), about their recent report: 2021 Trends in Securing Digital Identities. Connect with Julie on LinkedIn: https://www.linkedin.com/in/juliaesmith/ 2021 Trends in Securing Digital Identities Report: https://www.idsalliance.org/2021-trends-in-securing-digital-identities-2/ Connect with Jim and Jeff on LinkedIn here: Jim McDonald: https://www.linkedin.com/in/jimmcdonaldpmp/ Jeff Steadman: https://w...
Jun 28, 2021•52 min•Ep. 99
Jim and Jeff talk with Gal Diskin, Chief Technology Officer and Co-Founder at Authomize, about Identity First Security and Cloud Infrastructure Entitlement Management (CIEM). Connect with Gal on LinkedIn: https://www.linkedin.com/in/galdiskin/ Check out his Identiverse 2021 Session: https://identiverse.com/idv2021/speaker/SPEJMKHDGKV/ Learn more about Authomize: https://www.authomize.com/ Lessons Learned for the Next SolarWinds Attack: https://www.authomize.com/blog/lessons-learned-for-the-next-...
Jun 21, 2021•41 min•Ep. 98
***NOW WITH 100% MORE ZERO TRUST*** Jim and Jeff talk with Sami Laine, Director of Technology Strategy at Okta, about what Zero Trust is and how you can start your own Zero Trust organizational journey (hint: you might already have started and don't know it yet). Connect with Sami on LinkedIn: https://www.linkedin.com/in/samiplaine/ Learn more about The Maturity of Zero Trust Across Organizations from Okta: https://www.okta.com/infographic/the-maturity-of-zero-trust-across-organizations/ Google ...
Jun 14, 2021•42 min•Ep. 97
Jim and Jeff talk with Mike Engle, Head of Strategic Planning at 1Kosmos, about the convergence of identity proofing and password less technologies. Connect with Mike on LinkedIn: https://www.linkedin.com/in/englemichael/ Learn more about 1Kosmos: https://www.1kosmos.com/ 1Kosmos Webinar "Trends in IDAAS: Secure Workforce Access with Strong Identity Proofing: https://www.1kosmos.com/gate-webinar-forrester-and-jefferies Reading list: NIST 800-63a: https://pages.nist.gov/800-63-3/sp800-63a.html Th...
Jun 07, 2021•48 min•Ep. 96
Jim and Jeff talk with Mario Dusaj, Senior Solutions Engineer with Callsign, about Gartner's Continuous Adaptive Risk and Trust Assessment (CARTA) model and how it relates to Zero Trust. Connect with Mario on LinkedIn: https://www.linkedin.com/in/mariodusaj/ Learn more about Callsign: https://www.callsign.com/ Connect with Jim and Jeff on LinkedIn here: Jim McDonald: https://www.linkedin.com/in/jimmcdonaldpmp/ Jeff Steadman: https://www.linkedin.com/in/jeffsteadman/ Visit the show at www.Identit...
May 31, 2021•54 min•Ep. 95
Jim and Jeff talk with Bala Kumar, Chief Product Officer at Jumio, about identity proofing and how it plays a key role in Know Your Customer (KYC) and Anti-Money Laundering (AML) capabilities as part of an identity program. Connect with Bala on LinkedIn: https://www.linkedin.com/in/kbalak/ Learn more about KYX from Jumio here: https://go.jumio.com/kyx-platform-ebook Learn more about Jumio: https://www.jumio.com/ Authenticate 2021 Conference: https://authenticatecon.com/call-for-speakers/ Connect...
May 24, 2021•46 min•Ep. 94
Jim and Jeff talk with Nathan Coffing, Head of Strategy at Cloudentity, about Open Banking and how related standards and APIs are being leveraged to improve identity and security for financial applications. Connect with Nathan on LinkedIn: https://www.linkedin.com/in/ncoffing/ Learn more about Cloudentity: https://cloudentity.com/ Connect with Jim and Jeff on LinkedIn here: Jim McDonald: https://www.linkedin.com/in/jimmcdonaldpmp/ Jeff Steadman: https://www.linkedin.com/in/jeffsteadman/ Visit th...
May 17, 2021•42 min•Ep. 93
Jim and Jeff talk with Brian Deitch, Solutions Architect at Zscaler and all-around good guy, about the role of Zero Trust Network Architecture (ZTNA) as part of a digital identity strategy. Connect with Brian on LinkedIn here: https://www.linkedin.com/in/briandeitch-sase/ Check out the PEBCAK Podcast here: https://podcasts.apple.com/us/podcast/pebcak-podcast-information-security-news-by-some-all/id1560278415 Check out Brian's video on what Zscaler does: https://www.linkedin.com/feed/update/urn:l...
May 10, 2021•48 min•Ep. 92
Jim and Jeff talk with Eric Anderson, Director of Enterprise Security at Adobe, about a bunch of IAM stuff including Zero Trust, privileged access, identity governance, and security program gamification. Also, what rock star we would be for a day and an app recommendation from Jim. Connect with Eric on LinkedIn: https://www.linkedin.com/in/andersonericrobert/ IDSA/Adobe Identity-Centric Security: https://www.idsalliance.org/customer-stories/adobe/ Adobe's Zero-Trust Enterprise Network Platform: ...
May 03, 2021•53 min•Ep. 91
Jim and Jeff talk with Evan Gertis from NetFoundry about the semantic web and how IAM concepts like attribute and policy-based access controls are going to support our future. Connect with Evan on LinkedIn: https://www.linkedin.com/in/egertis/ Visit his website: http://www.evan-gertis.com/ Learn more about NetFoundry: https://netfoundry.io/ Connect with Jim and Jeff on LinkedIn here: Jim McDonald: https://www.linkedin.com/in/jimmcdonaldpmp/ Jeff Steadman: https://www.linkedin.com/in/jeffsteadman...
Apr 26, 2021•45 min•Ep. 90
Jim and Jeff talk with Arun Singh, CEO and Board Member at Ilantus, about the convergence of IAM capabilities, the "as a service" model, and IAM industry trends. Connect with Arun on LinkedIn: https://www.linkedin.com/in/arunksingh-ilantus-ceo/ Learn more about Ilantus here: https://www.ilantus.com/ Connect with Jim and Jeff on LinkedIn here: Jim McDonald: https://www.linkedin.com/in/jimmcdonaldpmp/ Jeff Steadman: https://www.linkedin.com/in/jeffsteadman/ Visit the show at www.IdentityAtTheCente...
Apr 19, 2021•46 min•Ep. 89