Latest / Identity at the Center / #152 - 2022 Trends in Securing Digital Identities with Julie Smith

Transcript

#152 - 2022 Trends in Securing Digital Identities with Julie Smith · Identity at the Center

0:09
You're listening to the identity of the center podcast, this is
0:13
the show that talks about identity and access management
0:15
and making sure you know who has access to what let's get
0:18
started. Welcome to the identity of the
0:25
center podcast. I'm Jeff.
0:26
And that's Jim. Hey, Jim hey, Jeff, how are you?
0:29
Oh, not so bad yourself. There's a little bit of a delay
0:31
there, I think. Oh, I don't know.
0:34
But I was going to say, just got back from vacation, so I'm not
0:38
100% tune back in, you know, is on vacation at the beach of
0:44
rocking the SPF, 50, basically, just short of white paint.
0:51
On my skin just to make sure I don't cook in that, you know,
0:54
Myrtle Beach sun, which is where I was.
0:58
But I saw talking to, you know, our old friend.
1:01
So he has part your name apart, my name Jeffrey MacDonald and
1:07
he's later skin than me and he's like, Jim.
1:09
You're such a rookie SPF 50. Come on, SPF 70 at a minimum.
1:15
So there's a rookie numbers you gotta pump those up.
1:17
Yeah, there you go. Good movie, quote there, Jeff.
1:21
Uh-huh. Yeah.
1:22
I'm I'm rather pasty myself. I have like, I have two stages
1:25
of tan either. I'm not tan or I'm burned.
1:28
There's like nothing in between. Yeah.
1:30
What's the skin peels off? There's plenty of untanned skin
1:34
below it right? Yeah, exactly.
1:36
So I try to, you know, I I try to stay indoors.
1:40
I don't like the heat, I don't like the humidity so the beach
1:42
is not really my favorite thing unless it is in a more, let's
1:46
call temperate climate. I'm not not about the hot sun,
1:50
I'll be under the I'll be Under the Umbrella, enjoying the ocean
1:53
breeze, and that's where you'll find me while the best part
1:55
about the trip to Myrtle Beach was, there's a concert going on,
1:59
the Carolina Country Music Fest, a lot of great acts and the ones
2:04
that I really wanted to see where I'd night.
2:05
So the sum is already down. The breeze has already coming in
2:09
it. The concert was pretty much
2:11
right on the beach so as fantastic, that's a cool setting
2:15
for a concert, I don't think I've ever been to a Beach
2:17
concert like a really legit Beach concert right before.
2:22
Which is unfortunate but I guess to each their own.
2:26
Hey man, I enjoyed it. So, plenty of Bud Light
2:32
available. That's not surprising one bit.
2:38
They probably sponsored it, right?
2:40
I think Coors Light may be sponsor it, because there are a
2:42
lot of people on stage, showing Coors Light and you know that
2:47
that Denver beer is pretty popular.
2:50
Hmm. Well, speaking of Denver, why
2:52
don't we get into our main topic today?
2:53
She's like laughing at us like how stupid we are as we start to
2:57
show off. But we're going to talk about a
3:01
about a topic that we've covered before, but it's time for an
3:05
update and to help us with that, we've got Julie Smith, she's the
3:09
executive director at the identity to find security.
3:11
Alliance. Welcome back, Julie.
3:14
Thanks Jeff. Jim, it's always a pleasure to
3:17
be here with you all so I appreciate it.
3:20
Feel The invitation, I got a little hesitancy there.
3:24
When you were kind of saying that I and the reason I get that
3:27
is because the mysterious way that I introduce our topic.
3:31
What we're going to be talking about is the 2022 Trends and
3:35
securing digital identities, which is something that we've
3:37
actually been doing episodes on this.
3:41
I guess this is maybe our second or maybe third time that we kind
3:44
of got around this. So the trends report has become
3:47
a trend into itself but before we get too far along.
3:51
Wrong. I want to make a note.
3:52
You are the current record holder for number of
3:54
appearances, on, on the podcast, use a zero fifth appearance.
3:58
You've been with us since episode 57 and then 88 and then
4:03
99 and then 140 and now this should be episode number 152.
4:09
I am. And I have to say that I'm a
4:11
little bit disappointed so far, and I'm hoping that episode 5 is
4:15
the is the is the lucky one? Where we get to finally hear
4:19
from Sly, the cat, Has been suspiciously quiet in previous
4:23
episodes makes me a little concerned Sly if you're out
4:27
there, make a noise. So we know that you're okay and
4:29
that you actually exist. I'll just leave it at that.
4:32
Julie. How about that?
4:37
He does exist and he might he might make an appearance this
4:43
time after after five episodes. It's I think it probably is time
4:48
but let's hope maybe he doesn't justify.
4:51
Despair the audience, but yeah. Thanks for having me.
4:55
I appreciate it. And I'm not sure exactly why I
4:57
have the honor of being here the most, maybe I maybe I reach out
5:01
to you the most or not. Sure exactly why that is, but
5:05
happy to have the reigning champion on her.
5:09
Well, I'm happy your judges and this is this has been like
5:11
definitely a mutual relationship.
5:13
We actually got to you and I got to actually meet for the first
5:16
time face to face at RSA a few weeks ago, we do the proverbial
5:19
fist bump and chatted on the corner outside and inside the W
5:23
Hotel there in San Francisco, which is very cool.
5:27
But yeah, I think, you know, we Jim and I like to have good
5:31
conversations, right? Identity.
5:32
And every time you're on, we have a good conversation around
5:35
it done and I think that's what we're gonna do today.
5:37
So no pressure We had nothing whatsoever, but it was great
5:41
meeting. You face to face and Gem, you
5:43
were sorely missed last week at RSA, although God only knows
5:48
what you might have taken home as apparently.
5:50
A lot of people that wear out in San Francisco, last week did so
5:55
be thankful that you weren't there and sounds like you were
5:57
having a lot more fun and a beach anyway.
5:58
So I did enjoy the beach but you know one thing I wanted to ask
6:03
you your the other way to look at it is that you're the biggest
6:06
repeat offender in. Terms of being on the show maybe
6:11
you just for the audience to sake so they don't have to go
6:13
back. Jeff did a great job of talking
6:15
about all the different episodes you're on but in case they're
6:18
not familiar with idea. Say, just kind of give us a
6:21
summary elevator pitch. What is idea?
6:24
Say, yeah, sure. So the idea say our identity to
6:28
find security Alliance, some people even call us.
6:31
It's a which always makes me Flinch a little bit but we are a
6:37
an organization, a non-profit. Stop it.
6:38
I call this a trade Association focused on creating resources
6:43
and help organizations reduce the risk of an identity relating
6:47
breach. So all of our content is freely
6:49
available on our website, it's all vendor-neutral.
6:53
We have if you incorporate all of our members, we have over 40
6:59
members, who participate, and creating content writing blogs
7:06
hosting webinars, or I host the webinars.
7:08
They Provide the expert, the expert perspectives.
7:12
And so, you know, we're really all about educating
7:15
organizations on how they secure their digital identities.
7:19
So membership wise, you know, I talked about more than 40 30 of
7:23
those our vendor members but we also have membership
7:26
opportunities for and practitioners or end end users
7:32
if you will, in the form of contributor memberships as well
7:35
as corporate memberships. So that's really for individuals
7:39
who are out there, living in the trenches, in their security
7:42
teams and, you know, trying to drive identity security in their
7:48
organizations. And they have an opportunity to
7:51
come and network with their peers, learn from an amazing
7:54
group of experts. In this space can get CPE
8:00
credits towards their cissp certification and and thought
8:06
leaders. We have a great platform for
8:08
people if they're looking to become a thought leader in the
8:13
space as well. So, there's lots of benefits to
8:15
being part of the organization and really The primary driver I
8:20
think, is to make an impact and give back to the community.
8:23
Yeah, I would definitely encourage folks to check out
8:25
that contributor membership because I think it is an
8:27
opportunity to be part of the identity Community.
8:31
I think a lot of people have great ideas out there.
8:33
And for the most part, this is how Jim and I contribute is we
8:37
do this stupid podcast every week.
8:39
Other people like to write blogs other people like to do
8:41
webinars, write or speak at conferences or whatever.
8:44
Maybe this is another opportunity for people to get
8:46
involved in this space and there is plenty of room for people to
8:51
give back and contribute. So Very cool.
8:54
I think the other thing that that hasn't been mentioned is
8:56
identity management day. That's something that got
8:58
started. And know, we've had a few
8:59
different conversations around that over the years.
9:01
I think this was the second annual identity management day
9:05
earlier earlier this year, but your organization also kind of
9:08
partnered up with it, was at the national cyber security Alliance
9:11
as well to it was. Yeah, about that.
9:15
Yeah, and yeah. So back to your, my
9:18
participation five times on the on the podcast.
9:21
So at least two of those where identity management.
9:23
Okay. So last April 12th was our
9:25
second annual identity management day.
9:28
We had a great virtual conference where we had five
9:31
sessions and 25, I think speakers talking about all
9:35
things identity from you know, how do we prevent identity
9:39
related attacks today to what's the future of identity look
9:42
like. So that's that is an important
9:45
one and I think a couple of those guest spots on your
9:49
podcast we're also related to our research which is another
9:53
Main component, one of the things we're going to talk about
9:55
today but we've we've published now for different research
10:00
reports and to your point. Jeff, this will be the second
10:04
specific Trends report although we'd kind of over the years
10:08
pulled questions from other reports into this one.
10:11
With the idea that maybe over time we become the Verizon data
10:15
breach investigations report very aspirational obviously but
10:20
just that's Focus very specifically. if eclis on
10:23
identity related breaches and all things around bringing
10:27
identity and security teams together Well the key to
10:30
everything is consistency. That's how we've grown to be
10:32
this multi-million listener, podcasts over the last several
10:36
years. So you definitely being
10:38
consistent important part of that you mentioned the future
10:40
and let's talk about sort of, you know, I guess the presence
10:44
and some of the trends we've seen around this report.
10:47
The 2022 Trends is carrying digital identities I guess,
10:50
before we start to get into some of the findings.
10:52
You mentioned this is the second time that it's come out for
10:56
kicking down to fourth wall. Here we're recording this on
10:58
Monday, June 20th but this I won't actually go live until
11:02
next Monday. By the time I got around to be
11:03
able to edit it, but I believe the report comes out.
11:06
This Wednesday was a June 20 seconds.
11:09
Is that right correct? Yep.
11:12
It's it'll put be published on Wednesday the full report.
11:17
Hopefully you'll see a number of Articles and different
11:21
perspectives on the results of the survey and its research,
11:24
right? So the data is what the data is
11:28
and we hope that lots of different organizations whether
11:31
they're in the media space or member companies or other
11:36
organizations who are interested in the data that we're
11:39
publishing provide their commentary, their perspectives
11:42
on it. Use the data in the report to
11:45
support you know product releases and just perspectives
11:51
on the on the industry as a whole.
11:53
So you know, it's really research that we conduct kind of
11:57
keeping a tech keeping tabs on these. the trends and securing
12:01
digital identities and and its data that's really available for
12:04
interpretation by the broader can So who responds to this?
12:09
I guess Ken to kind of level set.
12:10
So people know where this data is coming from.
12:13
Is it coming from companies as a coming?
12:16
From individuals, it coming from both, I guess, what, what sort
12:19
of the typical respondent look like, yeah, so it is coming from
12:25
individuals inside sort of end user companies across a range of
12:30
Industries Financial Services, Healthcare technology employees
12:35
over. And so it is really a view into
12:40
the Enterprise, its it security and identity professionals.
12:45
And so they have responsibility for identity and identity
12:50
security in some way shape or form, we had over 500
12:55
respondents to the survey. It's actually conducted by an
12:59
organization. We've worked with for all of our
13:01
research approach called dimensional research and they
13:05
that, you know, part of the value that they provide, And as
13:07
they do have a group of people that are open to taking these
13:10
kinds of surveys. So it's, yeah, it's a good group
13:16
and they fill it out wearing their company hats.
13:20
And although this year, we did at sneak in a couple of
13:23
questions to get their own personal perspectives around,
13:27
password security and that kind of thing.
13:29
So but otherwise they are speaking on behalf of
13:34
practitioner inside an organization.
13:36
So I think that is interesting taking that practitioner
13:38
response because sometimes, you know, I think in the identity
13:41
industry sometimes we kind of see it through our own lens of.
13:45
Well, this is the way it should be and you know how we would
13:48
want to see it done, but that doesn't always match up with the
13:51
real world and I was actually getting done.
13:52
So I always liked research like this, that is, you know, taking
13:56
real world people and asking them real world questions and
14:01
what are the challenges and things are coming out and it
14:02
leads me to my next question which is you know, based on Tan
14:06
this report that's going to be coming out.
14:08
Is there what was the most interesting thing or finding
14:11
that you think came out of it? Yeah I think this review this
14:15
year's report you we continue to ask the question every year
14:18
obviously because it's a trend report about or whether
14:22
organization is experience and identity related breach.
14:25
And and in this year the number was 84%.
14:30
I compared to last year 79 percent of the time frames are a
14:33
little bit different this year. We asked have you an experience?
14:36
And identity related breach in the last year and the last
14:40
report we asked in about a two-year timeframe.
14:44
So a little bit of a difference just in terms of the timeframe
14:49
but 84% of those organizations over 79 last year and we also
14:54
asked could this breach have been prevented or minimized and
15:02
we asked specifically about what we would consider some Basic
15:07
identity and access management capabilities as well as the
15:12
security outcomes that we recommend. 96% said, that that
15:18
the breach could have been prevented or minimized and the
15:21
leading Contender was MFA. So, you know, had an
15:27
organization implemented MFA for all of their users than that.
15:31
Breach would have been prevented.
15:33
And my face is one of those things we've been talking about
15:35
or I think Very long time and has been a recommendation coming
15:39
out of the best practices organizations for quite some
15:44
time. So if there's just a couple of
15:47
things in the report that you'll see that are just the basics and
15:52
you know, these breeches that end up being relatively
15:55
significant could have been prevented had some of these
15:57
Technologies and capabilities been implemented.
16:01
Yeah. Want to show that 84% identity
16:04
breaches to me that Was an alarming statistic but this
16:09
other alarming statistic that I want to point to that was in the
16:12
report. What I read that I was like,
16:14
there's no, it's pretty obvious. Why this is happening.
16:17
So it was 51 percent of organizations typically remove
16:23
access for former employee within a day.
16:26
But only twenty twenty six percent always do that.
16:30
To me, is an alarming statistic, like, are you kidding me?
16:33
20% percent of organizations. That they consistently remove
16:38
access within a day. That's, that's not even close to
16:43
high enough. Now, I have my thoughts on maybe
16:45
why that is, but I'd love to hear what your thoughts are and
16:49
also, you know, throw it over to Jeff for his comments and you
16:52
know, what do you believe? Lisa.
16:56
Such a low number in that area. Yeah, I from my perspective,
17:00
it's all about automation. We, I know you guys have had 10
17:04
Jones on the, on the show. At least once and he talks about
17:08
automation just in general is one of the key ways that a lot
17:15
of our problems could be solved. But you think about it the
17:20
number of applications that and any given employee has access to
17:25
on it on a daily basis to do their job if they decide to
17:29
leave the organization or they change roles, probably don't
17:33
know what applications that That employee has access to much
17:38
less, being able to remove permissions from one place and
17:43
have it replicate across all the application.
17:45
So I think it's just a Time intensive exercise.
17:48
Then in a lot of people, a lot of organizations have it
17:51
implemented automation to make that easy.
17:54
That's my, that's my perspective.
17:55
Jeff. What are your thoughts?
17:58
I I agree with Julie, I think this is not a situation where
18:02
people don't want to do the right things.
18:03
I think it's a lack of awareness that even these accounts exist,
18:08
you know, removing access from all of the different places that
18:11
a person might have access to, in an organization, the large,
18:14
the organization, the harder that becomes, the more
18:17
decentralized, the organization when it comes to Identity and
18:20
access management as either a program or provisioning,
18:25
whatever it might be, also May comes much more.
18:28
Difficult. I didn't want to get into this,
18:31
but now I feel like I have to because this has affected me
18:33
literally in the real world today.
18:36
If you've been following the show, you know, that I am in the
18:38
process of moving across state lines, moving from Chicago,
18:43
Illinois area, to North Carolina.
18:46
And, of course, anybody who's purchased a home knows that
18:48
you're working with lawyers and mortgage companies and Realtors,
18:52
and a whole bunch of things. I was supposed to close on my
18:56
house, this Wednesday. The 20 seconds that is not
19:00
happening because of an identity and access management Problem by
19:05
a combination of the mortgage company.
19:08
I'm working with and an individual within a law firm and
19:14
access not being removed from another Law Firm that this
19:18
individual used to work for that caused.
19:21
A whole bunch of issues with data going to the wrong law
19:25
firm, mine, this case, All because this person's access was
19:30
not removed when she transferred from one Law Firm to another Law
19:35
Firm. So that I am a living world
19:37
example of, you know, now might not be, this is a first world
19:42
problem. So I'm not gonna, you know, moan
19:44
and whine and complain about it too much, but a supposed to
19:47
close on Wednesday. And now I'm scrambling to close
19:50
by Friday so that I'm not homeless over the weekend and in
19:54
North Carolina, waiting for waiting for papers to sign.
19:56
So, I do, I believe this number. Yes, absolutely.
20:01
As I've now seen in the real world and it is affecting my
20:04
life. Plus, I told you, I don't think
20:07
homelessness is a first world problem but okay, but yeah, the
20:12
good story, you know, kind of I think I have a pessimistic and
20:16
an optimistic view of this. My pessimistic view is what you
20:20
brought the key point there, jeff, which is removing all
20:25
access when you think about, About.
20:28
Removing all when you think about the 26 percent of
20:32
organizations that do remove people in within one day, it's
20:36
probably not all access. It's probably active directory
20:39
account and the person responding to the survey feels
20:42
confident that removing active directory, removes quote-unquote
20:46
all access. The reality of it is most
20:49
organizations have you know many many applications that are not
20:55
covered just by the active directory account.
20:58
The, the optimistic or the alternative view to this is I
21:03
think Julie's right? In terms of automation, I think,
21:07
you know, there are a lot of organizations that are just
21:10
under invested. I am and some that are smaller
21:13
organizations, that it's not that they're appropriately,
21:18
invested their underinvested because this is becoming such an
21:21
important area, but they might have one or two it people and
21:25
they're doing everything from, you know, Cloning laptops and
21:29
supporting phones and doing email and doing, oh yeah, doing
21:34
identity and access management as well.
21:36
So I think that could have a big impact in terms of driving down
21:43
this, this number as well. But you know, even the 26 if you
21:47
only think the pessimistic view it's even the 26 percent number
21:50
could potentially be inflated but I did want to ask Julie
21:55
another question which was Another statistic that I was
22:01
looking at was around risky Behavior, being reduced, when
22:06
Executives put focus on identity security, a lot of the the focus
22:11
was around, you know, if the executive speak publicly to
22:15
employees about password security, but also a statistic
22:21
about it security stakeholders admitting to risky security
22:26
Behavior. So I wondered if Add a little
22:28
bit of flavor to each of those areas.
22:32
Yeah sure. So that question kind of came
22:36
out of a research report that we did.
22:40
I think I talked about it already, the stakeholder
22:42
perspective which we kind of tied into the line of business
22:46
user and how, you know, how to does identity and access
22:50
management affect them and and one of the things we ask that
22:54
line of business group and it was really kind of a question
22:56
that we put in there. Just because we thought it might
22:58
be interesting to get some perspective on just how, how,
23:02
well does the average user protect their corporate
23:05
passwords. And so we asked a list of
23:09
provide a list of risky, behaviors things like you have
23:12
you shared passwords through slack or Microsoft teams, do you
23:17
reuse passwords be written passwords down on a sticky note,
23:24
you know, just just things that I think we would all consider.
23:28
Poor secure, password hygiene. But yet, we probably all do them
23:32
too. And we thought it'd be
23:34
interesting to try and get at this sort of what's the state
23:39
prevention of identity related breaches as it relates to
23:43
culture and human behaviors and protecting passwords right at
23:47
times. Back to the idea, a lot of times
23:51
it's a cliche that gets thrown around a lot.
23:53
Is that people are the weakest link in the security chain.
23:58
And so we wanted to try and tap into that as well as to tap into
24:03
the idea that it's not just about security technology, but
24:10
it's also about just creating a security-minded culture within
24:15
an organization. So that's really where the
24:20
question came from. So we pulled the question
24:22
forward from one of the previous research reports, and we wanted
24:25
to ask specifically it security. identity people about how well
24:31
they protect their passwords and so what we found is I think
24:34
forty forty percent of them said oh you know we never we never
24:42
displaying eighties bad behaviors versus I think it was
24:45
in the 30s for line of business folks and then again kind of
24:50
getting at this culture and security mindedness within an
24:53
organization we thought well is there any any way that At How
24:59
would, how would a culture evolved.
25:03
And one way that it might have all this through leadership
25:05
support protecting passwords. And so, we asked a question
25:11
around, what's do Executives speak about password, security
25:16
in your organization? And who is the highest level
25:20
Executives? So is it, is it the board level?
25:22
Is it senior Executives? Is it security Executives?
25:25
Is that, you know, See us security leadership.
25:29
And what we found is that and then how do those two things
25:33
correlate, right? So, do people take better care
25:37
of their passwords? If security leadership is
25:41
talking about how important it is in their organization from an
25:47
overall security perspective. And we found that 72% of the eye
25:52
of the respondents to this survey said that they do take
25:56
better care of Their passwords when an executive is talking
26:01
about it. So it's just kind of trying to
26:04
get it this you know just culture affect their individual
26:09
behavior and I think the answer is yes so that was sort of
26:14
really the you know, really the ankle that we took that that the
26:17
state of prevention in 2022 is not necessarily always tied to
26:22
technology and expertise in the organization but it also is tied
26:26
to behaviors. And culture, and we did ask some
26:30
questions around training as well.
26:32
So, you know, kind of looking at it from both of those
26:35
perspectives and, and maybe a little bit.
26:38
Removing the idea, that, that users are your our primary
26:43
attack vector. And turning that into users,
26:46
could be a primary line of defense.
26:50
Yes, I find that research, really your kind of reinforces
26:52
other research that I've seen that.
26:53
Yes, continuing to drive, security, awareness the
26:56
organization. And it's not a one-time thing.
26:59
You have to repeatedly, kind of get the message out and make
27:01
sure that people understand, you know that it's it's it's
27:04
something that you need to be aware of it all times.
27:07
I want to ask one more question on the report and that was
27:10
around something I found interesting and timely Russia
27:13
and Ukraine. So there were a couple of
27:15
questions around it and the one that that I guess struck my eye
27:19
the most What was the question about?
27:21
And this is what the question was.
27:23
Has the recent russia-ukraine crisis, increased visibility of
27:26
your company's identity and security activities among non
27:30
technology leadership and I'm looking at this pie chart and it
27:34
tells me that two-thirds of your respondents said yes there was
27:38
some increase. Now it might have been a
27:39
mightier increase might have a significant increase maybe
27:42
somewhere in between but I look at this and say, okay clearly
27:46
there has been some impact on the visibility of You know, are
27:51
weak properly protected. Do we have the proper identity
27:54
security in place, right? Those are some things, I guess.
27:57
Any, any color you want to add to that or are my findings?
28:00
Kind of, jiving, with will kind of what you're thinking, as
28:03
well? Or am?
28:03
I totally crazy? I would align with you, but I
28:08
will tell you that, you know, this is data right as my
28:12
researcher pounds into me. This is data and, you know, you
28:17
present the data and then people form their own Our own opinions
28:20
from it or own perspectives and they kind of look at it through
28:22
their own lens. I, you know, as part of our
28:27
process for getting the word out about this risk report, we've
28:30
been doing pitching to the press and I did have one one request
28:34
that came back through from a publication that journalist it's
28:40
going to write an article for us which is fantastic.
28:43
And their perspective was, wow, it doesn't really seem at all,
28:47
like there's been And increase awareness but or, you know,
28:53
increase visibility or increased budget because the Ukraine
28:57
Russia Khan which I thought was really interesting, right?
28:59
So just go, just goes to say that we all kind of, I guess
29:03
it's back to the is the dress gold and white or is it, it was
29:08
it blue and white or whatever. Right?
29:10
The same dress and everybody saw it a little bit differently.
29:12
And that's exactly how it is with data.
29:14
So, like, um, yeah, well, here's how we will cook Tommy Boy,
29:18
quote for you, a simple. No would have been sufficient,
29:24
got to throw the movie quotes and where appropriate.
29:27
So Julie, last last week's episode, we asked a group of
29:32
identi Rowdy, what the differences between digital
29:37
identity and identity and access management.
29:40
Those two terms, I you titled this report 2022 Trends in
29:46
securing digital identities. So this is Didn't get your
29:50
answers part of that last episode.
29:52
I'm going to pose that question. But you on the spot posed that
29:54
question to you. Now, what's the difference
29:56
between digital identity and identity and access management?
30:00
And keep in mind? Three had seven different
30:02
answers for seven different people.
30:04
Yeah, nobody has answered this identical yet.
30:07
So this is your chance to give your flavor to it.
30:10
Well, I'm afraid to answer from Jeff because it's going to be
30:14
he's going to want just a very concise answer, so I will I'll
30:19
say this floor is yours. Yeah, so I think I did a digital
30:25
identity as the thing, the identity, the attributes, you
30:30
know, maybe it's the Biometrics associated with.
30:32
But it's the thing that we're protecting and managing and
30:35
validating, right? And then identity and access
30:38
management, we actually would suggest.
30:42
And we have a Blog, I hear the talks about it, that identity
30:44
and access management is of all to identity security because
30:48
it's kind of gone. And really access management and
30:53
its identity security is about getting to a trusted identity
30:57
and you know, whether it's validating and on the front
31:00
front end, it's, you know, protecting it through
31:03
authentication and and you know, maybe offers authorization and
31:06
then that's just the management of it.
31:08
Some of the things we talked about around D provisioning, so
31:11
that's really identity. Security is an evolution of
31:13
identity and access management and then in our world, identity
31:16
Define security is taking that trusted identity.
31:19
Adding some context to it and using that combination of things
31:23
to protect resources. So that's my answer.
31:31
I think it's a good one. I think now we have eight
31:34
different answers. I think this is really
31:37
interesting from a just, I guess the psychological aspect of
31:41
identity and access management is that even people who are in
31:44
the identity space, can't necessarily agree on the
31:46
terminology and the definitions. And I think that's actually
31:50
okay, I'm fine with that because I think we do have different
31:54
perspectives that we bring to it.
31:56
Alright, let's go ahead and start to wrap things up because
31:58
I know Julie you been super generous or time.
32:01
About to hit identify verse. I will just say again.
32:03
Congratulations on his research. It is awesome stuff.
32:06
I love reading it. I'd like to also cite it and
32:09
some of my conversations that I have with other folks in
32:12
industry or customers or clients.
32:14
I would certainly encourage people who haven't checked it
32:17
out already. Go to the identity defines curry
32:20
Alliance website, IDs Alliance dot-org, the research will be
32:24
there and definitely want people to check it out.
32:27
But it wouldn't be an identity, the center episode without
32:30
getting into something. Being silly /.
32:32
Stupid at the end. What is your favorite comedian
32:37
or style of Comedy? Mmm, so I have a new favorite
32:44
comedian and I was in New York City a couple weekends ago and
32:49
we went to the Comedy Cellar. And somewhat, I think actually a
32:53
couple of familiar faces came on the stage, which was amazingly
32:58
cool. But one of them was a guy that I
33:01
have seen in billions. I don't know if you guys watch
33:04
the show billions on HBO, the guy by the name of Mike
33:07
Birbiglia, which I kind of knew but didn't really know that he
33:11
was a stand-up comedian and it turns out he is very popular
33:15
stand-up comedian and he's my new favorite comedian.
33:17
He is, I have thought a lot about this.
33:21
I kind of think he's the clean version of Dave Chappelle and I
33:24
love Dave Chappelle, because I think he has is an amazing
33:28
Storyteller. His topics are a little bit
33:32
interesting and I think Mike Birbiglia is the same way.
33:37
He just, he is an amazing. Storyteller.
33:40
He has an interesting way of kind of weaving things together
33:45
and I'm a fan. I've been binge-watching and
33:48
maybe watch a couple episodes twice of his Netflix series on,
33:55
you know, stand-up comedy series.
33:56
So he's my new favorite comedian and I just love his storytelling
34:01
style and it's, he's fantastic. That's a good pick.
34:06
I like microvilli a lot. I'm a big fan of Comedy.
34:09
And he is definitely up there, I think you're totally right.
34:12
He's a great Storyteller. I think that's what separates a
34:14
lot of. You know, the I guess the good
34:18
folks who are good at. Comedy stand-up specifically is
34:20
being will tell that story. I'm just curious.
34:23
I think for people who aren't familiar Comedy Central in New
34:25
York City is pretty legendary comedy club that a lot of
34:31
big-name comics will go to and sometimes they sort of drop in
34:35
unannounced even and kind of, you know, you might go there to
34:38
say one Act and all of a sudden you're seeing two or three other
34:41
people who are working out material and you're able to kind
34:44
of kind of peek behind the curtain.
34:46
I'm curious. Who did you see anyone else
34:48
there? Besides Michael be good from a
34:50
name recognition. Yeah well there I think there
34:53
were five Comedians and I'm not going to get all their names
34:55
right? Maybe sex actually I thought and
34:59
see I mean it started out in the MC was fantastic and were like,
35:02
wow, okay, this guy's great like who else is coming on?
35:05
They all had, it was funny because they all had certain
35:08
that likes. Chips in one way or another Ryan
35:11
Hamilton. I don't know if you know that
35:13
name, I think he's on, he's on Netflix, he was there Chris De
35:17
Stefano which apparently he is. He was the headliner.
35:21
He's not somebody that I know. But the, you know, the younger
35:25
and set that we are with couple 20 mid, 20 year, olds were like,
35:30
oh my gosh, she's the best, he was the headliner.
35:36
And yeah, the other the other names Escape me at this point
35:39
but it we just went into a cold and had tickets and, you know,
35:43
just all of a sudden these fantastic comedians, every
35:45
single one of them came on stage so it was very cool.
35:49
That's awesome. I think that's actually a bucket
35:50
was cited. For me is, I've never been able
35:52
to hit a venue like that. Go see comedians destefano's a
35:56
good one. He's like a New York Comic.
35:58
She's kind of well-known and sort of that space.
36:00
And you'll find that there's like East Coast West Coast, you
36:03
know, kind of circles of Comedians and things like that.
36:08
Jim. How about yourself?
36:09
Who's your favorite comedian or do you have a favorite style of
36:11
Comedy? So it's interesting when we,
36:14
when I first heard this question, the the name Richard
36:17
Pryor popped into my head. I've really liked some of those
36:21
old comedy routines because that the further you go back in 70s
36:26
and 80s and stuff, every time you are going, oh my God, that's
36:30
so wrong. You know, it's and you know you
36:34
would definitely get Sold it today's world.
36:37
So, you know, even as you move through, like I love, you know,
36:43
Chris Rock. I love Chappelle, I mean, all
36:46
those comedians to me, or fantastic, but I don't only love
36:51
like the outrageous and I love like Seinfeld.
36:55
I love Bob Newhart like that dry, you know, sarcastic comedy.
37:03
And I also love like, What would you call like Saturday Night
37:06
Live and In Living Color and like, Schedule C schedule?
37:11
Yeah. Yeah.
37:12
Like sketch basically. Yeah.
37:14
Yes. Catch and us watching again, the
37:17
other day. Remember, I brought it up to
37:19
you. Is that ship at the Chappelle
37:21
show where he had, you know, Rick James and was Eddie
37:26
Murphy's brother. Oh my God, that's like one of
37:29
the funniest things that really Murphy nonce.
37:31
Yep. Charlie Murphy.
37:33
Charlie Murphy Yeah. Hilarious.
37:37
So anybody who has a scene that skid before go to YouTube and
37:42
search for Rick James. Charlie Murphy.
37:45
You'll cry. Your eyes out.
37:47
Yeah. It's a good Chappelle Show bed
37:48
for sure. I, you know, there are so many
37:51
good Comedians and I've been fortunate enough to hear a lot
37:55
of a lot of good material. I don't know if I could narrow
37:58
it down to one. I think I go in phases.
38:01
So like right now what I've been listening to a lot of is Anthony
38:04
Jeselnik and And Daniel Tosh for some reason keeps coming up but
38:09
there's also Patton Oswalt who is a brilliant stand-up.
38:12
Most people kind of may not be familiar with the stand up
38:14
because they see him in Marvel. Kind of things and TV stuff.
38:18
For big lie is good. If you're really like comedy.
38:22
I think one of my favorite things of all time is it was a
38:27
movie, but it's really just two hours of stand up.
38:29
And it's the original Kings of Comedy and, you know, I had
38:33
Steve Harvey. Bernie Mac.
38:36
Trying to think where the other folks were, but I laughed my
38:41
you-know-what off for a good solid, two hours.
38:44
I actually saw it in the theater and it was so good.
38:49
It was so funny. Bernie Mac's stand up, you know,
38:52
as part of the original Kings of Comedy is in my mind, one of the
38:56
most legendary performances, I think he absolutely nailed it
39:00
and it was fantastic, but there's been so many good ones.
39:02
It's hard for me too hard for you to pick one because I think
39:05
I'd enjoy them all and there's so many different styles.
39:06
Giles comes to it. But yeah, I guess I don't think
39:09
I'm like laughing so hard. I'm crying.
39:11
And I'm also feeling guilty for laughing at what he just said.
39:17
Well, I think it's part of the young that I think that's
39:20
Community. I think.
39:21
I mean, I think that's part of Comedy.
39:23
Right. I think it's sometimes it's
39:25
personal. Sometimes, it's raw.
39:27
Sometimes it's hitting on Raw nerves within sort of the public
39:31
Consciousness, but being able to make light of it or joke about
39:35
it, right? I think, you know, I'm Perfect
39:37
one to make jokes at my own expense expense, obviously, so
39:41
so yeah, yeah. But at the end of the day, you
39:44
know, there's nothing better than just like a really awesome
39:50
belly laugh, right. I mean, that's, there's just
39:53
like, I don't know if feeds the soul, I think so it's a very
39:58
subjective, but I'm totally with you.
39:59
It's like, you know, there is comedy out there for anybody.
40:02
Another good one is Ronny Chang. If he's from Legacy from The
40:06
Daily Show, But he has a stand up, his earlier, stand up for my
40:08
mistakes, like 2016, or 2017 is on Netflix, highly recommended,
40:13
he has a great bit about Amazon Prime that my wife and I had
40:16
been quoting at each other for the last two weeks since we sat
40:20
down and watched it. But that's another good one.
40:23
Who was the guy that was? I know you probably want to wrap
40:26
it up a time and ask you this question, who was the guy?
40:28
That was a co-writer with Dave on the Dave Chappelle Show.
40:32
He has a series of Netflix specials to that are super
40:36
funny. Brennan, maybe in since last
40:41
name I think he is very funny. Deal Brennan.
40:45
Yeah. Emil Brandt.
40:46
He's a good one. Yes.
40:48
Yeah. I think he's on.
40:49
You'll see murder once in a while, on Comedy Central.
40:54
Yeah, it's interesting to see, you know, some of these
40:56
comedians who are they might be stand up.
41:00
They might be kind of like a writer on a show like Conan
41:02
O'Brien's, you know, he's so I guess I'm going to consider him
41:05
a stand-up comedian. But you know, he's obviously
41:07
performer but he used to write for right The Simpsons, right?
41:10
And he was on Saturday Night Live as a writer.
41:12
I things like that is interesting to see some of these
41:15
folks kind of pull around. John Mulaney is another example
41:19
or Bill. Hader, Bill, hader's Stephane on
41:22
Saturday Night Live. I think is one of the funniest
41:24
things ever. And if you know, the back story
41:26
behind it, the fact that so John Mulaney and Bill Hader would
41:30
write, would write the skit Bill Hader would perform it, but John
41:35
Mulaney would sneak And new things that Bill Hader would
41:39
read for the first time on air. Whenever if you ever Google
41:43
Stephane and Saturday Night Live, he can never hold it
41:47
together because he's literally reading the cue cards and seeing
41:50
it for the first time. What are you supposed to say?
41:52
And, you know, maybe not necessarily truly safe for work,
41:56
maybe a little bit PG-13 sometimes but it was on Saturday
41:59
Night Live. So it's probably okay.
42:00
But I think that is also one of the most hilarious.
42:03
Like, B ever is, is the whole Stephane thing, The Saga. over
42:06
the course of the years that that took That's where is I
42:10
never heard that story. I actually just bought tickets
42:12
to go. See, John Mulaney, he's on tour
42:13
now. Well he's gonna see him in
42:15
October. Yeah, he said, we're trying to
42:17
wrap up anyway, happy to share her story because John Mulaney
42:20
has a as a bit called the salt and pepper Diner, or something
42:25
like that. And and basically the story is
42:27
he went to have lunch with a friend and they the the diner he
42:31
was at had a jukebox and it was three plays for a dollar, or
42:36
something like that. And and so they put in like No
42:38
three or four bucks and they had like twenty one place.
42:41
And the whole bit was they played like seven or eight.
42:47
What's what's new pussycat by? Whose it seems that I can
42:54
release things at the moment but it's a, it's a famous song.
42:56
Neil Diamond, I think something like that and they played it
42:59
eight like seven or eight times in a row.
43:01
Just to watch what people did in the diner and people are
43:05
freaking out like, oh, it can't be that again.
43:08
And then, oh, it's Tom Jones. That's what was Tom Jones.
43:11
And then they played, It's Not Unusual by Tom Jones once and
43:14
then they started playing more. What's new pussycat spy, Tom
43:17
Jones and the whole the whole thing, the whole bed is very
43:20
funny. I'm not doing it justice here
43:22
but I'm only bring it up because I got to do that bit in real
43:25
life. A few weeks ago, we went to a
43:28
restaurant, they had one of those Touch Tunes where you can
43:30
like control the Jukebox through an app.
43:33
So I spent I'm I am proud and ashamed.
43:37
To say this, I spent $18 to buy enough tokens to be able to
43:42
play. What's new pussycat seven
43:43
different times. And I will tell you that I got
43:46
exactly the same reaction from the bit.
43:49
As I did an in real life, as what happened in the bit, it was
43:52
amazing. An awesome and I'm happy, I was
43:55
finally able to pull it off. So I so that tells you that I
44:00
spend my money well and wisely and my time well and wisely as
44:05
well. So yeah that's what happened.
44:08
Alright. Now let's go ahead and wrap
44:10
things up because I think I've totally derailed this
44:11
conversation and I will continue talking for comedy for hours on
44:15
end. Julie, thank you so much for
44:17
being with us. You can find the report it'll be
44:20
up on the IDS Alliance websites, starting June 22nd.
44:24
So really by the time people listen to this, it will be
44:27
available any other things that you want to get out there for
44:30
folks who are listening Julie before we wrap it up.
44:33
Um, I don't think so. Anyway, usual pitches check out
44:36
our website. We got A lot of vendor-neutral
44:40
resources everything is freely available.
44:43
There's cases where I might ask you for your contact info
44:46
otherwise you know check it out. There's there's a lot of good
44:50
stuff out there as well as the research report that that will
44:54
be publishing on Wednesday. Very cool.
44:56
How about Jim yourself? Any final thoughts for this
44:58
week? Do it.
45:00
Ask everybody to support the idea say and whatever way you
45:04
can if your practitioner check out the practitioner membership,
45:08
If you're if you work for a company in the digital identity
45:13
industry, whatever that means consider, you know, push your
45:17
company to join now. Right on give back, thanks,
45:21
plenty of the plug kind of voices and spaces for this.
45:23
Yeah, IDs Alliance dot-org. All right, we'll go ahead and
45:26
wrap it up this week we do have at some point we'll reconnect on
45:32
our weekly live stream at idea. See a that live in the meantime
45:35
we've got the YouTube replays out there, we're on the web
45:37
identities. Enter.com.
45:39
We're on Twitter at Heidi as see podcasts, and fingers crossed.
45:44
This will actually be my last podcast in the Chicago area.
45:47
So the next time we talk most likely, I will be in North
45:50
Carolina. We will see if companies get
45:54
their IMX together and let me have that have that little win.
45:57
So all right with that. Thanks everybody for listening
46:01
and we'll talk with everyone in the next one.
46:07
Thanks for Listening to the identity at the center podcast.
46:10
If you like what you heard, don't forget to subscribe and
46:13
visit us on the web and identity at the center.com.