Cyber Attacks are world-wide.   Germany is not immune to these attacks.  In fact Deutsche Bank in Sept 2024, stated that “Cyber-attacks alone cost the German economy an enormous 148 billion euros every year.”

At the same time Germany and the rest of EU is struggling to enact the Digital Operational Resilience Act (Regulation (EU) 2022/2554) solves an important problem in the EU financial regulation. DORA mandates that enterprises augment their protection, detection, containment, recovery and repair capabilities against ICT-related incidents. 

But what does this mean for your enterprise - and what does this mean for your identity and identity governance efforts?

To answer these questions - YouAttest invites a foremost authority in EU regulations: Ralf Mennegatti, CEO of the Luxembourg-based DAQS. 

To learn more about YouAttest and how we can help secure your identities, contact us at [email protected]     

Welcome to today’s AuditTuesday - this YouAttest podcast highlights the YouAttest offering for Identity security and compliance for managed service providers

To help with the discussion we have 

• Bill Lauterbach, YouAttest Channel Director
•  Kashif Mehmood, YouAttest Field Services Director

To learn more about YouAttest and how we can help secure your identities, contact us at [email protected]                       

HR systems for many enterprises is the identity store of record (ISoR). This is where identities are created, roles are assigned, and privileges are entitled.  

But these HR systems (HRS) are NOT enforcement points – they are the container of entitlements. The enforcement of these entitlements usually falls to identity and access management (IAM) systems.   

Hence comes the identity variance between:

• What roles/entitlements are created/documented in the HR system?
• What roles/entitlements are ENFORCED by the IAM?

Contact us at YouAttest - https://youattest.com/ - we will identify the anomalies between your HR and IAM systems and create a better identity audit experience for your enterprise.
https://youattest.com/contact/

Lots of products out there for MSPs to review and deploy - that’s why the market appreciates those that review the products for the consultants and managed service providers.

This is exactly what Christophe Foulon and CPF Coaching did.

They reviewed the products in the identity attestation and identity governance category  - specifically w/ an eye to how MSPs would utilize the offering.   

The offering needed to be:

• Multi-tenanted
• Easily deployed
• Intuitive
• And no-code

The solution that met these criteria was YouAttest.   

#AuditTuesday will talk to Christophe Foulon and ask him about his work and why he recommended YouAttest.   We will also have Bill Lauterbach to discuss how the MSP and consulting practice works and how they can make money with YouAttest.

Most enterprises are under compliance, be it in healthcare, finance, insurance, government, education or defense.

And most of the enterprises have compliance projects that need to be started or re-started. And thus the quandary... how to get these projects under way!

YouAttest is fortunate to have Karina Klever, GRC expert and the team at CloudPSO to help out on how to get your GRC project started.

Topics will include:

• What are the key compliance projects?
• How to get started?
• Where enterprise go wrong w/ starting their GRC projects?
• What if/any tools should be used?
  
  

To learn more about YouAttest and how we can help secure your identities, contact us at [email protected]

AWS is the predominant cloud service for most enterprises w/ over $90B a year and growing.

Which warrant security products that are not only designed to work in the AWS marketplace, but could be sold on the AWS marketplace.

That’s why YouAttest, the fastest time-to-value next-gen identity governance tool, with dedicated functionality to AWS - is now offered on the AWS marketplace.

So let’s learn:
What is the AWS marketplace?
Why is it important?
What are the challenges of securing identities on AWS?
How does YouAttest meet these identity security and audit challenges?

The panel will review these topics and show a live demo of how to get to YouAttest on the AWS marketplace and what it does to secure and audit identities in AWS. 

Special guests will include Chris Kesik, CTO of CloudArmee.

In fiscal year 2023, the federal government spent around $759 billion on contracts with outside companies and organizations. In 2024 there are over 200,000 government contractor firms that generate $1.1 trillion in annual revenue.

But the U.S. government wants the supply chain secured - and to this end has asked these suppliers especially those in the defense industrial base (DIB) to know and follow the guidelines and frameworks that come from the National Institutes of Standards and Technologies (NIST).

This webinar will address:

What are key frameworks that the suppliers should know & follow?
What are the ramifications of non-compliance?
What are the key controls?
What about my identities and how does it relate to these controls?

YouAttest will discuss how identities matter to all of these frameworks and guidelines and how YouAttest/ShortArm can automate your identity compliance. 

Our guests, Jeff Chao and Rick Mischka are experts in assisting federal suppliers in compliance and security - and will help drive the conversation.  

Special cybersecurity guest, Wes Jones will be speak on how his enterprise utilizes YouAttest to implement identity security and compliance.

The Managed Service Provider (MSP) space is experiencing significant growth, with the global market currently valued at around $299 billion and projected to expand at a compound annual growth rate (CAGR) of 13.6% through 2030, indicating a substantial increase in demand for MSP services across various industries.

But with this growth - comes responsibility. MSPs are expected to be able to manage the risk in the enterprise - and the biggest risk to the enterprise is identity.   

Identity the MSP holds for the enterprise
Permissions and entitlements for the enterprise
Access the MSP grants to resource for enterprise

And the truth is we know NO ONE, including the MSPs, are doing that well at this job.  According to Palo Alto’s hacking team,

To help address this, we have lauded entrepreneurs and MSP expert, Eldon Sprickerhoff. Who was not only the founder of E-Sentire, but of a new category of service called MDR, Managed Detection and Response.

To learn more about YouAttest and how we can help secure your identities, contact us at [email protected]

Transcript

More than 20,000 professionals will go to Black Hat 2024 this year. The who’s who of cyber security, hacking and prevention.    

Let’s get two professionals’ thoughts on this:

• Mel Reyes - everyone’s favorite cyber spokesperson
• Shaun Walsh,  Chief Marketing Officer at Peak Nano

Need to automate your identity audits?  Contact us at YouAttest - we will show you how -  https://youattest.com/contact/

The world is finally becoming aware of the danger of excess privileges and unmanaged users. These are the accounts that the attackers love to take over and then stay resident in our enterprises and exfiltrate data while going undetected.

NIST, the National Institute of Standards and Technology, has created a concept to remedy this situation. They label it the Principle of Least Privilege (NIST CSF 1.1. PR.AC-04, NIST CSF 2.0 PR.AA-05), which guides companies to limiting logical, physical and system access to specific job functions. 

To get the word out – #AuditTuesday has invited David Worthington with ample IAM and identity expertise.

The discussion will also include 13 U.S.-patented Garret Grajek, who will explain how YouAttest enables enterprises, big and small, to meet the principles of least privilege.

To learn more about YouAttest and how we can help secure your identities, contact us at [email protected]