Discussion with Howard Ting, CEO and Co-Founder at Opal Security

Opal: opal.dev

Howard Ting: https://www.linkedin.com/in/howardting/

Support the show and Donate to NCMEC: https://give.missingkids.org/TrustIssues

Summary

In this conversation, Howard Ting, CEO of Opal, discusses the evolution of identity and access management, sharing insights from his extensive career in cybersecurity. He highlights the challenges of managing access and authorization, particularly in the context of modern development practices and the rise of non-human identities. Ting emphasizes the need for a unified access platform that can handle both human and agent identities, advocating for just-in-time access management and fine-grained authorization to enhance security and efficiency in organizations. In this conversation, Justin Somaini discusses the evolving landscape of identity and access management, emphasizing the importance of automation, AI integration, and continuous auditing. He highlights the shift towards just-in-time access models and the need for organizations to adapt to the increasing complexity of managing both human and non-human identities. The discussion also touches on the challenges of delegating authority to agents and the future of company building in a rapidly changing technological environment.

Chapters

00:00 Introduction to Identity Management Challenges

03:13 Howard Ting's Journey in Identity and Cybersecurity

05:55 The Evolution of Authorization and Identity Solutions

09:04 The Shift Towards Just-in-Time Access Management

11:49 Understanding the Role of Agents in Identity Management

15:02 The Future of Authorization: Fine-Grained Control

17:53 Building a Unified Access Platform

21:07 Integrating Identity Solutions in Modern Enterprises

23:56 Automating Access Management Processes

29:27 Automating Access Management Workflows

33:29 Just-in-Time Access and AI Integration

36:17 Continuous Auditing and Risk Management

39:40 The Evolution of Identity and Access Management

42:52 AI's Role in Identity Management

47:12 Navigating Non-Human Identities

51:57 Delegating Authority to Agents

56:06 The Future of Company Building and Identity Management

Keywords

identity management, access control, authorization, cybersecurity, just-in-time access, identity governance, cloud security, fine-grained permissions, automation, identity solutions identity management, access control, AI integration, just-in-time access, continuous auditing, non-human identities, agentic identities, automation, risk management, security innovation