In the second episode of Hello User, Richard is joined by identity security expert Andre Durand.  Andre is the founder and CEO of Ping Identity as well as founder of the Cloud Identity Summit.  They discuss the current state of digital identity security and how the pandemic may accelerate the changes needed to shape the future of digital identity security.

Key Takeaways:

[1:26] During the pandemic we digitized so many aspects of our economy without focusing on one of the most important parts; identity.

[3:07] There is a complexity to who we are online; and it’s not solely based on our own projections and declarations.

[6:20] How your digital employment identity differs from your consumer identity. 

[9:21] Currently third parties have much more control over digital identity than the individuals.

[10:45] With so many players rushing to enter the digital identity space, how we can sift through the noise.

[13:41] How shifting control of digital identity to the individual will dramatically change our current identity and access management systems.

[16:48] One of the biggest objections to changing how identity security is user behavior, but people’s behavior during the pandemic has shattered those notions.

[18:17] The mobile phone is one of the most powerful digital identity devices.

[20:00] Identity for individuals might progress in the future to create a better, more secure experience with companies.

[20:44] Outside of the user experience, companies are most concerned with the cost of fraud.

[22:24] Why identity verification is paramount.

Quotes:

• “As we’ve experienced during the pandemic, tremendous amounts of our economy have been able to move into digital pathways. The one thing that we forgot to move was people.”
• “Water always finds the path of least resistance and humans tend to find the path of least resistance, as well.”
• “You own your identity, but others own the verified record of your behavior.”
• “In some abstract way, we are the aggregate of all of our interactions with third-parties.”
• “If you wanted to know the totality of our behavior, it probably exists somewhere in the digital exhaust of the identity management systems of all the companies we interact with.”
• “The weakest link within national cybersecurity infrastructure right now is the ability to confirm that someone is who they say they are.”
• “We’ve come up with terms for identity that are absent the individual.”
• “Fraud costs money.”
• “The house of cards of strong identity cannot be built upon weak identity verification.”

Mentioned in This Episode:

Andre Durand

Ping Identity