The 41st Edition of the Identity Jedi Newsletter

A look back on the first half, Mini ITDR Deep Dive, Book Update, and what's on the horizon for the rest of the year

Author

David Lee
June 28, 2023

Wednesday 6/28/23 - Identity Jedi Newsletter - Subscribe

Hey Jedi welcome to the 41st edition of the Identity Jedi Newsletter. We are now over 500 subscribers and growing folks.

WE DID IT!

Actually, YOU DID IT Jedi! So take a bow and pat yourself on the back because you deserve it. We’re building a great community, and I’m so glad to have you here.

Earlier this week, I called for blogs and WOW. I was overwhelmed by the number of people excited to contribute. I believe I got to everyone, but if I didn’t, I will be reaching out today. For those of you that don’t read my emails ( no judgment…well..maybe a little) As we continue to grow this community, I want to make sure we are hearing from everyone, so if you’ve got a topic you want to write about, let me know and let’s get you posted in the Community Blogs section!

Some good stuff this week we take a look back on the first half of the year, we go through some ITDR stuff, an update on the book, and some forward-looking stuff.

Sponsored By

Fast and Secure
Cloud-Based Identity Auditing

You know that one thing you now have to do but don’t necessarily want to do. Access reviews are kinda like that thing. But YouAttest makes it easier. Not saying you’re going to like doing them, but at least you can get them done faster.

Let’s Get to the Good Stuff!

  • ITDR Defined

  • Is ITDR just good security?

  • 1st Half Reflections

ITDR Defined

And I for one, LOVE IT!

The key takeaway that got me giddy ( yes I do get giddy) was the following:

ITDR needs to cover both a posture and runtime angle as access management demands so.

Simon M

10000 times YES! We can’t just count on proper configuration to save the day. News’ flash: it hasn’t worked. It has to be both. We’ve been playing this game with one hand behind our back for two decades and we wonder why we’re losing. Is ITDR the savior? No, but it’s a start.

ITDR: Why It's a Game of Two Halves

I wanted to expand to this based on conversations I've had over past 4-5 months as part of a research report coming out soon from The Cyber Hut on ITDR - what it is and why it's important now. The last thing I want to do however, is create more confusion and definitions! In order to avoid that I want to break down the term bit by bit.

www.thecyberhut.com/itdr-why-its-a-game-of-two-halves

ITDR..Just good security?

Think about this for a second. If you wanted to protect your house would you have a system that just tells you that something is wrong or would you have system that tells you and does something about it. Like for instance if you had the choice of having an alarm system that not only notified you of someone lurking at your house, but then fired bright pink paintballs at them and captured footage ( because let’s be honest that would be hilarious to look at later) so you can identify said assilaint. Which one would you choose?

My point here is that while there is hype around ITDR, and much deserved hype. The basic of it come down to activating the principles and best practices we’ve been saying for years.

ITDR Combines and Refines Familiar Cybersecurity Approaches

Identity threat detection and response adds user entity behavioral analytics to fraud detection, creating a powerful tool for real-time protection.

www.darkreading.com/dr-tech/itdr-combines-and-refines-familiar-cybersecurity-approaches

1st Half in Review

Ok so looking back on the 1st half of this year ( can you believe it’s summer already) and we’ve had a very interesting ride. The year starting off with a bang with Platform Wars in full effect. Here’s a quick list of the acquisitions we saw:

  • SailPoint acquires SecZetta

  • RaidantLogic acquires BrainWave

  • Simieo acquires PathMaker

  • Socure acquired Berbix ( Yesterday!)

And those are just a couple. Add that to a start of the year with massive layoffs and we round ourselves in very weird environment. Companies are gearing up to provide consolidated offerings to customers, in an economy where spending is down, yet demand still seems be high for IAM needs.

Let’s look at the venture side we saw $55 Million dollars invested in new companies entering the space. 75% of these were seed rounds. Some notable companies in this grouping:

  • Entitle ( I like their vision)

  • Darshana ( Verifiable credentials play)

ITDR became a hot topic. Not going to beat this dead horse as I’ve talked about it plenty already, but what’s interesting is the fact that we are having the discussion. There is a real movement to move identity to the forefront of security discussions, we just aren’t sure how to do it yet.

So what will we see second half?

Honestly…I haven’t a clue…lol.

I think we have a lot to digest as an industry right now, and as we’ve settled into what this economic market is going to be, the focus is moving towards getting shit done. Organizations have goals they need to deliver and budgets they need to figure out.

52% of reported breaches came through third-party partners

According to a report by ForgeRock, identity theft and fraud remains a top concern for security leaders as it leads to large data breaches.

www.securitymagazine.com/articles/99552-52-of-reported-breaches-came-through-third-party-partners

The 10 Coolest Cybersecurity Tools and Products In 2023 (So Far) | CRN

New cybersecurity tools and products from companies including Palo Alto Networks, Zscaler and CrowdStrike have debuted during the first half of 2023, in areas such as cloud security, SASE and identity security.

www.crn.com/news/security/the-10-coolest-cybersecurity-tools-and-products-in-2023-so-far-

Chinese Hackers Using Never-Before-Seen Tactics for Critical Infrastructure Attacks

New cyber espionage threat! Chinese group Volt Typhoon, aka Bronze Silhouette, employs advanced techniques to infiltrate and maintain access.

thehackernews.com/2023/06/chinese-hackers-using-never-before-seen.html

‎Identity at the Center: #219 - Identiverse 2023: Identiverse Themes with Ian Glazer of Weave Identity on Apple Podcasts

‎Show Identity at the Center, Ep #219 - Identiverse 2023: Identiverse Themes with Ian Glazer of Weave Identity - Jun 26, 2023

podcasts.apple.com/us/podcast/219-identiverse-2023-identiverse-themes-with-ian/id1471899975?i=1000618338275

‎Mistaken Identity: Securing Digital Identities on Apple Podcasts

‎Show Mistaken Identity, Ep Securing Digital Identities - Jun 26, 2023

podcasts.apple.com/us/podcast/securing-digital-identities/id1690619228?i=1000618348397

Just want to call out that the Okta team TOTALLY stole the name of this podcast from me and Mike Kiser. For those of you that remember we were the OG’s of the Mistaken Identity Moniker. Granted the podcast has ended and all is fair in podcast and marketing..but just had to make that point. 😀 

Identity Jedi Show Podcast

The Last Word

Quick Book Update: Those of you that ordered your signed copy the books have been printed and are on their way to me this week. Should have them tomorrow. So I’ll get to signing and get them ready to ship by early next week. If you would like to get your hands on one, currently have 17 unspoken for, you can claim yours here:

I’ve had a very interesting conversation this week about the state of our industry and bringing in new faces. I came away with two fundamental questions.

How do we market this industry we love?

How do we create a pathway for people to enter?

It inspired me to create a content series around this. Still putting together the outline but here’s what I have so far:

1) Let’s showcase our IAM rockstars. Talk about why we love this industry and the fun we have in it.

2) Let’s talk about recruiting and path building. Identity talent isn’t born, it’s made. How do we do that?

More on this very soon; I’m thinking I should be able to launch the series in August. Until then,

Be Good to each other, Be Kind to each other, Love each other

-Identity Jedi

The JEDI COUNCIL

EARLY ACCESS CONTENT

My identiverse recap and interviews have arrived, and I’ve got early access for you

Subscribe to Identity Jedi Newsletter to read the rest.

Become a paying subscriber of Identity Jedi Newsletter to get access to this post and other subscriber-only content.

Already a paying subscriber? Sign In

A subscription gets you:
Blogs
Expert Interviews
Expanded Commentary
Early Access to Identity Show content

Join the conversation

or to participate.