Identity is the Perimeter – Jeff Reich – BSW #319
Managing identities continues to add complexity for granting access to enterprise resources. Between the increasing number and expanding types of identities, including carbon-based, silicon-based, and artificial identities, and the evolution of cloud computing and remote work, managing the perimeter is now an identity problem. What risks do each of these identity types pose and how do you mitigate them?
Jeff Reich, Executive Director at Identity Defined Security Alliance (IDSA), joins us to discuss the challenges of digital identities, how to discover risk with digital identities, and how best to mitigate those risks.
Segment Resources: IDSA's 2023 Trends in Security Digital Identities: https://www.idsalliance.org/white-paper/2023-trends-in-securing-digital-identities/
Securing Your Remote Workforce Through Identity-Centric Security: https://www.idsalliance.org/white-paper/securing-your-remote-workforce-through-identity-centric-security/
Jeff Reich serves as Executive Director of the IDSA. An active participant in the security community for 5 decades, Jeff is a well-known advocate for cybersecurity awareness & education. Previously, he served as VP of Member Success at Cloud Security Alliance (CSA), where he increased the capability of delivering and supporting benefits to members by 44%. The ISSA honored Jeff as a Distinguished Fellow and inducted him into the ISSA Hall of Fame in October 2015. He holds CISSP certification from (ISC)2, CRISC certification from ISACA and was granted a Foundation Certificate in IT Service Management from The Council for Service Management Education and The Information Systems Examination Board.
The Secrets of Top Performing CISOs as the Board Expands Cybersecurity Risk Oversight – BSW #319
In the leadership and communications section, The importance of CISOs is not recognised by senior leadership, The secret habits of top-performing CISOs, Get Free copies of two of our favorite leadership books, and more!
Security Weekly listeners: InfoSec World 2023 is just weeks away! Have you registered to join over 2,500 cybersecurity experts on September 25-27 in Lake Buena Vista, FL? InfoSec World is your gateway to a world of knowledge and growth. Don't miss the chance to enhance your career, connect with industry leaders, and make an impact on the rapidly evolving landscape.
Secure your seat using code ISW23-SECWEEK20 to save 20% off your registration. Register today: securityweekly.com/infosecworld2023
Matt Alderman
- Corporate boards expand cybersecurity risk oversight: EY
The recent study shows Fortune 100 chief information security officers are growing more closely engaged with their boards and C-suites.
- The importance of CISOs is not recognised by senior leadership
Lack of C-Level buy-in and boardroom awareness is hindering cyber security budget allocation and putting organisations at risk.
- The secret habits of top-performing CISOs – Help Net Security
“As the CISO role continues to rapidly evolve, it becomes even more critical for security and risk leaders to protect time for professional development,” said Chiara Girardi, Senior Principal, Research at Gartner. “Developing new skills and knowledge as the role changes is essential to effectively serve as a strategic advisor to the business – the new CISO paradigm.”
- “Leadership Strategy and Tactics: Field Manual” by Jocko Willink Summary
“Leadership Strategy and Tactics: Field Manual” by Jocko Willink is a comprehensive guide to leadership principles and practical strategies derived from the author’s experiences as a Navy SEAL officer and leadership consultant. In this 2,500-word summary, we will explore the key concepts and takeaways from the book.
- “The Infinite Game” by Simon Sinek Summary
“The Infinite Game” is a book written by Simon Sinek that challenges conventional thinking about business and leadership. Published in 2019, the book presents the concept of an “infinite game” as opposed to a “finite game,” highlighting the significance of adopting an infinite mindset in various aspects of life, particularly in business, leadership, and organizational strategy.
- Stop Overworking After Vacation
After a vacation, it can be tempting to double down on work in an attempt to make up for “lost” time, or to try to hurry through the time it takes to get back up to speed. Other times, the urge to overwork stems from a well-meaning effort to relieve team members of the extra work they were covering for you, or a desire to demonstrate that even though you were away, your commitment remains high and you’re still valuable to the organization. Whatever the motivation behind post-vacation overwork, it can leave you boomeranging from one extreme to the other, which increases stress and actually undermines your efforts to catch up. So how can you retain all the benefits of work recovery and resist jumping right back into the grind? The authors offer several strategies.
