Managing identities may be the most difficult and complex task facing any organization today. Often treated as an afterthought in system development, mishandling identity management can lead to serious consequences.

Because identities aren’t just people — they’re also systems and facilities, and managing them effectively requires more than just technology. From powerful service accounts to poorly defined access controls, identity management is the frontline of doing security right.

On this episode, we break down the following:

• Why identity is the most important security function
• The unique risks posed by non-human identities (service accounts)
• How to define and prioritize assets using a risk-based approach
• Practical strategies for managing identities and their privileges
• Why perfection isn’t required

Today’s guest is Terry McGraw. Terry is a retired Lieutenant Colonel from the United States Army and now serves the CEO of Cape Endeavors, Inc, with over 20 years of providing expertise in cyber security threat analysis, security architectural design, network operations and incident response across both commercial and government sectors.

Links:

• Fido-2 Alliance
• Kerberoasting Attack
• Microsoft’S Enterprise Access Model