Full Segment Notes
Practices around identity and managing credentials have improved greatly since the days of infosec mandating 90-day password rotations. But those improvements didn't arise from a narrow security view. Hannah Sutor talks about the importance of balancing security with usability, the importance of engaging with users when determining defaults, and setting an example for transparency in security disclosures.Segment resources00:00 Welcome to Application Security Weekly!01:49 Meet the Experts03:28 What Are Non-Human Identities?06:17 Balancing Security & Usability08:24 MFA Challenges & Admin Security12:09 Navigating Breaking Changes16:05 Security by Design in Action18:42 Identity Management for Startups20:18 Secure by Design: Real Impact24:03 Transparency After a Critical Vulnerability31:39 Looking Ahead to 202532:45 Application Security in Three Words
Guest
Hannah Sutor is passionate about all things digital identity and security. She currently works as a Principal Product Manager at GitLab, focusing on authentication and authorization in a DevSecOps context.
Hannah has spoken at various conferences on digital identity, privacy, cybersecurity, and devops workflows. She is passionate about balancing security and usability, and building secure software. She is a participant in OpenSSF working groups and serves on the board of IDPro. She lives outside of Denver, Colorado, USA, and decompresses with nature and vigorous workouts.
Announcements
- Want to shape the future of identity? Identiverse 2025 is looking for dynamic speakers like you to share groundbreaking ideas with over 3,000 identity and access management leaders. Join the most influential voices in IAM and help drive innovation in our industry. Submit your presentation proposal today at securityweekly.com/idvcfp
