{"id":6125,"date":"2022-10-10T10:22:48","date_gmt":"2022-10-10T14:22:48","guid":{"rendered":"https:\/\/solutionsreview.com\/identity-management\/?p=6125"},"modified":"2022-10-10T10:25:22","modified_gmt":"2022-10-10T14:25:22","slug":"least-privilege-reimagining-identity-in-the-workforce","status":"publish","type":"post","link":"https:\/\/solutionsreview.com\/identity-management\/least-privilege-reimagining-identity-in-the-workforce\/","title":{"rendered":"Least Privilege: Reimagining Identity in The Workforce"},"content":{"rendered":"

\"least<\/p>\n

As part of Solutions Review\u2019s Premium Content Series\u2014a collection of contributed columns written by industry experts in maturing software categories\u2014 Chip Hughes of ForgeRock<\/a> reimagines identity in the workforce, with least privilege and zero trust at the center.<\/strong><\/em><\/p>\n

\"PremiumThe shift to hybrid and remote work, along with \u201cThe Great Resignation,\u201d has changed the face of the workforce as we know it. Gartner reported that \u201cmacroeconomic, organizational and technology changes\u201d for organizations are leading to \u201cdisjointed architectural decisions\u201d as businesses onboard and offboard thousands of workers; workforce identity must evolve with the current landscape and cannot be an afterthought.<\/p>\n

As talk of a possible recession continues, IT and business leaders face difficult decisions around technology investments. Still, it\u2019s now more critical than ever for security to remain top of mind. Identity investments can help protect enterprises as workforces continue to evolve. If security gets overlooked, doors could open for cyber-criminals to access company data and applications through unauthorized access. With breaches costing $9.5 million in the U.S. alone, enterprises need to stay vigilant in protecting valuable data and maintaining customer trust.<\/p>\n

To address these challenges, organizations must better align on the principles of least privilege and Zero Trust and use AI and Machine Learning (ML) to springboard least privilege initiatives and drive broader identity governance success.<\/p>\n


Widget not in any sidebars
<\/p>\n

Enforcing Least Privilege Should Be at the Top of Your Security List<\/strong><\/h3>\n

Roughly 350,000 employees entered the U.S. economy in August 2022. As these employees join new organizations, IT must focus on enforcing least privilege, which gives users the access they need to perform their job. However, maintaining least privilege is a continuous challenge \u2013 people change jobs, get promoted, work on special projects, and gain (and lose) responsibilities. Instead of reviewing, granting, and taking away users\u2019 access based on these events, most users only acquire additional access, and inappropriate access is never removed. This leads to high levels of unnecessary access, particularly for employees who have been with a company for many years and across multiple job functions.<\/p>\n

Instead of having a good understanding of the access required to do a particular job, organizations often follow a \u201cmodel me after\u201d paradigm, where a new hire is given the exact same access as their peers with similar titles or at similar levels. The paradigm does not factor in variables of experience across peers, which means that one person could be a long-tenured employee with experience and roles in multiple parts of the organization while another just joined the company. This \u201cmodel me after\u201d approach immediately creates security risks and can become an access snowball.<\/p>\n

Many organizations try to solve over-provisioning challenges by adding processes such as human approvals and access reviews, often making managers part-time security experts, which isn\u2019t a best security practice. Additionally, security reviews are rolled out on a semi-regular basis to address compliance requirements and ensure inappropriate user access is removed. Over time, these processes are ineffective because they are based on human input, and humans can become fatigued, confused, or overwhelmed by the sheer volume of requests. This leaves the door open for hackers to continue to find ways to exploit over-provisioned accounts.<\/p>\n

Organizations need to take every opportunity to limit cyber threats. The goal is to alleviate as many tasks as possible from end-users and only require reviews on the riskiest and most anomalous access permissions. To do so successfully, organizations should have corporate-wide alignment on these access policies and use modern tools that leverage AI and ML. AI and ML are very valuable in helping organizations quickly and accurately determine what access should be reviewed by an individual and what access can be automatically granted-\u2013 resulting in more effective controls, better least privilege enforcement, and much less work for end-users.<\/p>\n

The path forward: Strategically Implement AI to Make Sense of Data<\/strong><\/h3>\n

Implementing a least privilege model can be challenging, and organizations often don\u2019t know what steps to take. It can be a complex task. Users have existing access and need to be able to continue performing their day-to-day jobs, but AI and ML can help. Effectively leveraging these technologies can analyze an organization’s environment in a matter of minutes and quickly identify good and bad access. This type of processing would take humans months to years with marginal success. AI and ML gives technologists a much faster path to success and drives better ways to manage user identities, especially in an exceedingly hybrid working world.<\/p>\n

Ultimately this type of technology can have a huge organizational impact, freeing employees up to focus on more strategic initiatives. This can also save companies a significant amount of money and reinforce the notion that security reviews should be taken seriously.<\/p>\n


Widget not in any sidebars
<\/p>\n","protected":false},"excerpt":{"rendered":"

As part of Solutions Review\u2019s Premium Content Series\u2014a collection of contributed columns written by industry experts in maturing software categories\u2014 Chip Hughes of ForgeRock reimagines identity in the workforce, with least privilege and zero trust at the center. The shift to hybrid and remote work, along with \u201cThe Great Resignation,\u201d has changed the face of […]<\/p>\n","protected":false},"author":356,"featured_media":6126,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[5,1],"tags":[142,2053,2054,16,132,76,1242,1252,1095,309,1094],"acf":[],"yoast_head":"\nLeast Privilege: Reimagining Identity in The Workforce<\/title>\n<meta name=\"description\" content=\"Chip Hughes of ForgeRock reimagines identity in the workforce, with least privilege and zero trust at the center.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/solutionsreview.com\/identity-management\/least-privilege-reimagining-identity-in-the-workforce\/\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Chip Hughes\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/least-privilege-reimagining-identity-in-the-workforce\/\",\"url\":\"https:\/\/solutionsreview.com\/identity-management\/least-privilege-reimagining-identity-in-the-workforce\/\",\"name\":\"Least Privilege: Reimagining Identity in The Workforce\",\"isPartOf\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/least-privilege-reimagining-identity-in-the-workforce\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/least-privilege-reimagining-identity-in-the-workforce\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/solutionsreview.com\/identity-management\/files\/2022\/10\/Reimagining-Identity-in-The-Workforce.jpg\",\"datePublished\":\"2022-10-10T14:22:48+00:00\",\"dateModified\":\"2022-10-10T14:25:22+00:00\",\"author\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/87f59ca2b773a4d4cbb0ffb1fa24a3ae\"},\"description\":\"Chip Hughes of ForgeRock reimagines identity in the workforce, with least privilege and zero trust at the center.\",\"breadcrumb\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/least-privilege-reimagining-identity-in-the-workforce\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/solutionsreview.com\/identity-management\/least-privilege-reimagining-identity-in-the-workforce\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/least-privilege-reimagining-identity-in-the-workforce\/#primaryimage\",\"url\":\"https:\/\/solutionsreview.com\/identity-management\/files\/2022\/10\/Reimagining-Identity-in-The-Workforce.jpg\",\"contentUrl\":\"https:\/\/solutionsreview.com\/identity-management\/files\/2022\/10\/Reimagining-Identity-in-The-Workforce.jpg\",\"width\":800,\"height\":400,\"caption\":\"least privilege\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/least-privilege-reimagining-identity-in-the-workforce\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/solutionsreview.com\/identity-management\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Least Privilege: Reimagining Identity in The Workforce\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#website\",\"url\":\"https:\/\/solutionsreview.com\/identity-management\/\",\"name\":\"Identity and Access Management Solutions | Solutions Review\",\"description\":\"Evaluating Enterprise IAM Software, Identity Governance & Access Control Tools.\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/solutionsreview.com\/identity-management\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/87f59ca2b773a4d4cbb0ffb1fa24a3ae\",\"name\":\"Chip Hughes\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/430444ddf83adeef810152066c468d38?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/430444ddf83adeef810152066c468d38?s=96&d=mm&r=g\",\"caption\":\"Chip Hughes\"},\"description\":\"Chip is responsible for driving the strategy and growth of ForgeRock\u2019s workforce business. He is passionate about working with customers and driving products\/solutions that solve the toughest authentication, authorization, and governance challenges. Chip has almost 20 years of experience in the Identity and Access Management industry. Prior to this role, Chip held various leadership positions within ForgeRock and was the RVP leading the America\u2019s South Sales Team. Additionally, Chip has held positions at Oracle and PwC focused on sales, sales management, technical pre-sales, and consulting.\",\"url\":\"https:\/\/solutionsreview.com\/identity-management\/author\/chughes\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Least Privilege: Reimagining Identity in The Workforce","description":"Chip Hughes of ForgeRock reimagines identity in the workforce, with least privilege and zero trust at the center.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/solutionsreview.com\/identity-management\/least-privilege-reimagining-identity-in-the-workforce\/","twitter_misc":{"Written by":"Chip Hughes","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/solutionsreview.com\/identity-management\/least-privilege-reimagining-identity-in-the-workforce\/","url":"https:\/\/solutionsreview.com\/identity-management\/least-privilege-reimagining-identity-in-the-workforce\/","name":"Least Privilege: Reimagining Identity in The Workforce","isPartOf":{"@id":"https:\/\/solutionsreview.com\/identity-management\/#website"},"primaryImageOfPage":{"@id":"https:\/\/solutionsreview.com\/identity-management\/least-privilege-reimagining-identity-in-the-workforce\/#primaryimage"},"image":{"@id":"https:\/\/solutionsreview.com\/identity-management\/least-privilege-reimagining-identity-in-the-workforce\/#primaryimage"},"thumbnailUrl":"https:\/\/solutionsreview.com\/identity-management\/files\/2022\/10\/Reimagining-Identity-in-The-Workforce.jpg","datePublished":"2022-10-10T14:22:48+00:00","dateModified":"2022-10-10T14:25:22+00:00","author":{"@id":"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/87f59ca2b773a4d4cbb0ffb1fa24a3ae"},"description":"Chip Hughes of ForgeRock reimagines identity in the workforce, with least privilege and zero trust at the center.","breadcrumb":{"@id":"https:\/\/solutionsreview.com\/identity-management\/least-privilege-reimagining-identity-in-the-workforce\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/solutionsreview.com\/identity-management\/least-privilege-reimagining-identity-in-the-workforce\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/solutionsreview.com\/identity-management\/least-privilege-reimagining-identity-in-the-workforce\/#primaryimage","url":"https:\/\/solutionsreview.com\/identity-management\/files\/2022\/10\/Reimagining-Identity-in-The-Workforce.jpg","contentUrl":"https:\/\/solutionsreview.com\/identity-management\/files\/2022\/10\/Reimagining-Identity-in-The-Workforce.jpg","width":800,"height":400,"caption":"least privilege"},{"@type":"BreadcrumbList","@id":"https:\/\/solutionsreview.com\/identity-management\/least-privilege-reimagining-identity-in-the-workforce\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/solutionsreview.com\/identity-management\/"},{"@type":"ListItem","position":2,"name":"Least Privilege: Reimagining Identity in The Workforce"}]},{"@type":"WebSite","@id":"https:\/\/solutionsreview.com\/identity-management\/#website","url":"https:\/\/solutionsreview.com\/identity-management\/","name":"Identity and Access Management Solutions | Solutions Review","description":"Evaluating Enterprise IAM Software, Identity Governance & Access Control Tools.","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/solutionsreview.com\/identity-management\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/87f59ca2b773a4d4cbb0ffb1fa24a3ae","name":"Chip Hughes","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/430444ddf83adeef810152066c468d38?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/430444ddf83adeef810152066c468d38?s=96&d=mm&r=g","caption":"Chip Hughes"},"description":"Chip is responsible for driving the strategy and growth of ForgeRock\u2019s workforce business. He is passionate about working with customers and driving products\/solutions that solve the toughest authentication, authorization, and governance challenges. Chip has almost 20 years of experience in the Identity and Access Management industry. Prior to this role, Chip held various leadership positions within ForgeRock and was the RVP leading the America\u2019s South Sales Team. Additionally, Chip has held positions at Oracle and PwC focused on sales, sales management, technical pre-sales, and consulting.","url":"https:\/\/solutionsreview.com\/identity-management\/author\/chughes\/"}]}},"_links":{"self":[{"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/posts\/6125"}],"collection":[{"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/users\/356"}],"replies":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/comments?post=6125"}],"version-history":[{"count":0,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/posts\/6125\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/media\/6126"}],"wp:attachment":[{"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/media?parent=6125"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/categories?post=6125"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/tags?post=6125"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}