![\"Expert](\"https:\/\/solutionsreview.com\/identity-management\/files\/2019\/11\/managed-security-mod.png\")
<\/p>\n<\/p>\n
Today is Identity Management Day 2021.\u00a0<\/span><\/p>\n According to the <\/span>Identity Defined Security Alliance<\/span><\/a>, this is\u201ca day of awareness to educate business leaders, IT decision-makers, and the general public about the importance of managing and securing digital identities.\u201d<\/span><\/p>\n After all, identity management forms the core of all modern cybersecurity<\/a>. Authentication forms the new digital perimeter and continuous authentication helps constitute a vital component of security monitoring.\u00a0<\/span><\/p>\n For more, we consulted with several cybersecurity<\/a> experts. Here\u2019s what they had to say about Identity Management Day 2021.\u00a0<\/span><\/p>\n Doug Davis is Senior Product Manager at <\/span><\/i>Semperis<\/span><\/i><\/a>.\u00a0<\/span><\/i><\/p>\n “With the growing popularity of cloud, enterprises have been gravitating toward a hybrid identity management model that promises the best of both worlds\u2014a little bit in the cloud, and a little bit on-premises. For the vast majority, this means leveraging Azure Active Directory (AAD) alongside Active Directory (AD). Organizations making this change must consider three critical adjustments: the need for new authentication models, the loss of the traditional perimeter, and drastic changes to the permissions model.<\/span><\/p>\n “Changes in permissions are by far the biggest security risk when it comes to implementing hybrid identity management. Not only are there a huge number of services available when organizations move to a hybrid identity environment, but you also have roles in Azure AD that may be unfamiliar compare to the set of well-defined administrative groups in Active Directory. Organizations must establish strong governance of what apps are going to be turned on, who is able to make those changes, and what access rights they will get. While managing identity in a hybrid environment might seem as simple as joining a Windows device to AAD, failing to account for changes to the risk landscape opens the door to issues that can cause headaches in the future.”<\/span><\/p>\n Anurag Kahol is CTO and Cofounder of <\/span><\/i>Bitglass<\/span><\/i><\/a>.<\/span><\/i><\/p>\n \u201cIdentity Management Day emphasizes the importance of protecting our digital identities (which is increasingly critical as the acceleration of digital transformation efforts opens new doors for threat actors). With many internet users holding dozens of online accounts across various services, it has become more difficult for them to memorize numerous, complex passwords. Unfortunately, password reuse has become a common malpractice that increases the chances of account hijacking when one set of a user\u2019s credentials are leaked. <\/span>More than 80 percent<\/span><\/a> of hacking-related breaches are tied to lost or stolen credentials and it is now self-evident that passwords alone are not enough when it comes to authenticating users.\u201d<\/span><\/p>\n \u201cAs the security landscape evolves, consumers and businesses must work together to ensure the privacy of corporate and personal data. To properly verify the identities of their employees and customers, companies must enhance their security protocols by establishing continuous, context-based security throughout the entire login experience. Solutions like multi-factor authentication (MFA) and Single Sign-On (SSO) don\u2019t require users to remember countless passwords, while also mitigating the risk of account compromise. On a consumer level, users can safeguard their digital identity by educating themselves on the risks of password reuse, following cybersecurity best practices, and staying informed on rising threats. Because we now live in a time when our daily lives revolve around the internet and our various accounts therein, identity management awareness has never been more critical.\u201d<\/span><\/p>\n Jasen Meece is CEO of <\/span><\/i>Cloudentity<\/span><\/i><\/a>.\u00a0<\/span><\/i><\/p>\n \u201cIdentity-related data breaches are very common these days, yet preventable if the right precautions are taken at both the individual and enterprise level. Not only on <\/span>Identity Management Day<\/span><\/a>, but every day, it\u2019s critical that business leaders, IT decision-makers, and the general public are aware of the importance of responsibly managing and securing digital identities. Digital identity protects sensitive data and greatly impacts how we work, interact with each other, access technology, and complete transactions. Therefore, Identity Access and Management (IAM) and cybersecurity need to be treated holistically. Organizations must implement security best practices to keep employee and customer identities safe, and this includes securing applications starting at the API level.\u201d\u00a0<\/span><\/p>\n \u201cAPI Protection is key for managing identities (be they human or machine), dictating how an application can consume sensitive data. We\u2019ve seen dozens of breaches from poorly-written APIs, where object or function level authorization issues cause programmatic data leakage that attackers can take advantage of. An example of this gone wrong is the <\/span>Walgreens app error<\/span><\/a> last year when a vulnerability of the Walgreen app\u2019s API caused a data breach where customers could view the private medical messages of other customers. If organizations don’t take control of identity management integrated with API security, we will see even more large-scale data breaches.\u201d<\/span><\/p>\n Tim Bandos is CISO of <\/span><\/i>Digital Guardian<\/span><\/i><\/a>.\u00a0<\/span><\/i><\/p>\n \u201cSo much personally identifiable information (PII) has been exposed in breaches over recent years that it is quite easy for hackers to use our identities against us. Everyone, in some form, is vulnerable to attack. In particular, the rich amount of compromised passwords and rise in cloud-based applications has left companies more vulnerable to compromise than ever before.\u201d<\/span><\/p>\n \u201cThe security landscape has completely shifted since the pandemic and businesses need to be able to support a long-term hybrid workforce going forward. <\/span>New research<\/span><\/a> from Centrify showed that \u2018an overwhelming percentage (90 percent) of cyber-attacks on cloud environments in the last 12 months involved compromised privileged credentials.\u2019\u201d<\/span><\/p>\n \u201cShould a cyber-criminal obtain an employee\u2019s credentials, they are able to log into their email, and then use that information to access more company services and applications \u2013 all with the company and victim being none the wiser. If the credentials entered are valid, the same alarms are not raised as when an authorized user attempts entry from the outside.\u201d<\/span><\/p>\n \u201cThis means IAM solutions will need to be front and center during strategy discussions to ensure that the right employees have access to the correct resources with an appropriate level of privileges. Otherwise, you run the risk of cyber-criminals exploiting these weaknesses and your business ultimately becomes an embarrassing headline in the news, such as the recent breach at Verkada where credentials were compromised.\u201d<\/span><\/p>\n \u201cOrganizations need to look at where identity management and data security meet. First and foremost, developing a working relationship between data security and IAM teams is key. Furthermore, deploying data-aware cybersecurity solutions will significantly minimize the risks, because even if an adversary has \u201clegitimate\u201d access to data through stolen credentials, they are prevented from copying, moving, or deleting it. Also, the roll-out of multi-factor authentication (MFA) is another component to fighting the growing tide of compromised credentials.\u201d<\/span><\/p>\n Thank you to these experts for their time and expertise on Identity Management Day. For more, check out the <\/span>Identity Management Buyer\u2019s Guide<\/span><\/a> or the <\/span>Solutions Suggestion Engine<\/span><\/a>.\u00a0<\/span><\/p>\n\t\t\t![\"IAM](\"https:\/\/solutionsreview.com\/identity-management\/files\/2021\/02\/Identity_Suggestion_Engine_Horiz_800.gif\" "\\"\\"")
<\/a><\/p>\n<\/div>\n\t\t<\/div><\/div>\nExpert Commentary on Identity Management Day 2021<\/b><\/h2>\n
Doug Davis<\/b><\/h3>\n
Anurag Kahol<\/b><\/h3>\n
Jasen Meece<\/b><\/h3>\n
Tim Bandos<\/b><\/h3>\n
<\/div><\/p>\n