Let's Talk About Digital Identity

In episode 33, Oscar's on home turf talking to Petteri Ihalainen about the identity landscape in Finland and all about the Finnish Trust Network (FTN) – what it is, why it came about and what the benefits are for Finland's population. They also discuss Katso, Finland's business-to-government national delegation solution (read more about Katso on our website), and eIDAS, a regulation that Petteri is deeply involved in.

"You get basically the whole population of Finnish people through a single contract."

Petteri Ihalainen has an extensive information security background, having worked for organisations like SSH, Ubisecure, the EU Commission, Gemalto and GlobalSign. During his career he has participated in advanced initiatives and digital identity programmes in various roles. He's currently working as a senior specialist at the National Cyber Security Centre of Finland (part of Traficom – the Finnish Transport and Communications Agency) in a team that supervises and advises organisations deploying digital identity solutions. Petteri also acts as one of the country's representatives at the EU-level in eIDAS related tasks and programmes.

Find Petteri on LinkedIn and on Twitter @Ihalain.

Read more about 'What is the Finnish Trust Network' in our blog: ubisecure.com/authentication/finnish-trust-network-ftn

We’ll be continuing this conversation on LinkedIn and Twitter using #LTADI – join us @ubisecure!

In episode 32, Andrew fills us in on the main trends and challenges for digital identity in New Zealand, its national Digital Identity Trust Framework and the importance of interoperability between identity systems. He also gives us an excellent tip for individuals and organisations on reframing identity, inspired by Maori identity validations - trusting and respecting identities as a precious gift.

"The strange thing with digital identity is most of the technology that's needed is already there – we're not really inventing anything new. The key to digital identity working is actually in collaboration."

Andrew Weaver is the Executive Director of Digital Identity New Zealand, an organisation whose mission is to create a digital identity ecosystem that enhances privacy, trust and improves access for all people in New Zealand.

Andrew is a strategic specialist with over 30 years hands-on management, consultancy and systems development experience built throughout New Zealand, Australia, Asia and the Middle East. He is also an active and passionate supporter of social enterprises and charities working in New Zealand and overseas.

Connect with Andrew on LinkedIn.

Digital Identity NZ is a purpose driven, inclusive, membership funded organisation, whose members have a shared passion for the opportunities that digital identity can offer. Digital Identity NZ supports a sustainable, inclusive and trustworthy digital future for all New Zealanders.

Find out more about Digital Identity NZ at digitalidentity.nz.

We’ll be continuing this conversation on LinkedIn and Twitter using #LTADI – join us @ubisecure!

In episode 31, Oscar talks to Miikka and Rami about expanding identity beyond IAM and CIAM to privileged access management. Listen for: what exactly privileged access management (PAM) is; PAM benefits and use cases; the complexity and challenges with cloud, hybrid, and multi-cloud environments; ephemeral certificates; the principle and application of zero trust; and SSH's PAM product – PrivX.

"Ideally you want to have a single pane of glass through which you control access to your whole estate."

Miikka Sainio is CTO at SSH.com. He has been successfully building services and products for over 20 years as a coder, architect and product owner. Find Miikka on LinkedIn.

Rami Raulas is Vice President EMEA at SSH.com. He has a wealth of experience in IT, working at Fujitsu prior to joining SSH. His specialist area is in building successful customer experiences. Find Rami on LinkedIn.

SSH.COM (SSH Communications Security Oy) is an encryption specialist for safe data communications and a pioneer in data and internet security since its incarnation, when founder Tatu Ylönen invented the SSH Secure Shell Protocol in 1995. It is a global company with headquarters in Helsinki, Finland.

Find out more about SSH at www.ssh.com. SSH.com is a Ubisecure partner; view more information in this press release: https://markets.businessinsider.com/news/stocks/ssh-com-and-ubisecure-partner-to-drive-higher-automation-for-privileged-access-management-1027774339

We’ll be continuing this conversation on LinkedIn and Twitter using #LTADI – join us @ubisecure!

Katryna Dow talks to Oscar about her career (including inspiration from Minority Report), Meeco's personal data & distributed ledger platform, the importance of data minimisation to inspire trust in organisations, and cultural differences in attitudes towards digital identity.

"The greatest way to overcome this privacy paradox is transparency."

"Where regulators have moved to increase the data transparency and data rights of individuals, these need to actually be part of the solution architecture."

Katryna is the founder and CEO of Meeco; a personal data & distributed ledger platform that enables people to securely exchange data via the API-of-Me with the people and organisations they trust. Katryna has been pioneering personal data rights since 2002, when she envisioned a time when personal sovereignty, identity and contextual privacy would be as important as being connected. Now within the context of GDPR and Open Banking, distributed ledger, cloud, AI and IoT have converged to make Meeco both possible and necessary.

Find out more about Meeco at meeco.me.

For the past three years, Katryna has been named as one of the Top 100 Identity Influencers. She is the co-author of the blockchain identity paper ‘Immutable Me’ and co-author/co-architect of Meeco’s distributed ledger solution and technical White Paper on Zero Knowledge Proofs for Access, Control, Delegation and Consent of Identity and Personal Data. Katryna speaks globally on digital rights, privacy and data innovation.

Follow Katryna on her blog at katrynadow.com, on LinkedIn and on Twitter @katrynadow.

We’ll be continuing this conversation on LinkedIn and Twitter using #LTADI – join us @ubisecure!

In episode 29, Oscar talks to Lisa about her fascinating journey to cybersecurity, the lucrative schemes that hackers and scammers have been employing since the start of the pandemic, the group of volunteers she led to help protect hospitals against cyber-attacks with the onset of COVID19 in Europe, and top tips for individuals and organisations on cybersecurity and identity.

They also discuss a new Tomorrow Unlocked documentary that Lisa appears in - Ha(CK)c1ne. It explores the shocking cyber-attacks that have hit vulnerable hospitals, healthcare supply chains and vaccine labs since the COVID-19 pandemic. Released on 25th September, watch Ha(CK)c1ne on YouTube and Vimeo now.

"The pandemic is a crisis, but security has to continue. Even though we're fighting a biological virus at the moment, security still has massive ramifications If you ignore it."

Lisa Forte is a social engineering and insider threat expert. She is a partner at Red Goat Cyber Security and Host of the Rebooting YouTube Channel. Lisa is a regular on TV shows, documentary films and news broadcasts. Her career started in a very unlikely place, working to stop pirates off the coast of Somalia! She worked in one of the UK Police Cyber Crime Units before starting Red Goat Cyber Security. Lisa is also one of the very proud co-founders of the Cyber Volunteers 19 (CV19) initiative providing free help and intelligence to healthcare providers in Europe during the pandemic, an organisation that has been recognised and praised by Governments around Europe.

Find Lisa on Twitter @LisaForteUK and LinkedIn.

Find out more about Red Goat Cyber Security at red-goat.com.

We’ll be continuing this conversation on LinkedIn and Twitter using #LTADI – join us @ubisecure!

In episode 28, Jurgita and Oscar discuss digital transformation, particularly in light of COVID19, and the critical role of identity in any digital transformation project. The conversation also explores the importance of digital identity in customer experience and how companies are approaching digital identity in light of that, including who has ultimate influence over digital identity projects within the organisation and the popularity of Identity-as-a-Service (IDaaS, SaaS-delivered IAM).

"Digital identity is part of every digital transformation project because it would be impossible to do without it"

Jurgita Sarkovaite is Innovation and Strategy Manager at NEO Consulting. She’s also Professor of Digital Marketing and Digital Transformation courses at Pacífico Business School, Peru. Jurgita has 8+ years of project management experience in digital strategy consulting, technology and software development. Her research covers digital culture, entrepreneurship and innovation. She has a passion for education.

You can contact Jurgita on LinkedIn or email jurgita.sarkovaite (at) neoconsulting.ai.

We’ll be continuing this conversation on LinkedIn and Twitter using #LTADI – join us @ubisecure!

A note for our English-speaking listeners: this week's episode is in Spanish, talking about the challenges of digital identity in Latin America with Josselyne Abarca, CEO and founding partner of Seguridad América.

“Las empresas y organizaciones están migrando todos sus servicios al ámbito digital y uno de los desafíos con los que se encuentran es certificar o ratificar la identidad de las personas que ingresan en sus sistemas y servicios”

Josselyne Abarca es Gerente General y socia fundadora de Seguridad América. Josselyne se encuentra ligada a la seguridad y autenticación digital desde los tiempos de VeriSign, donde comienza su carrera comercial.

Para Josselyne, uno de los mayores retos en América Latina es la necesidad de proveer a los usuarios con una identidad global, robusta, flexible y verificada tanto en el ámbito público como privado para que puedan acceder con total seguridad y confianza a aquellos sistemas más susceptibles de sufrir ataques cibernéticos.

Seguridad América es una organización con sede en América Latina con una cartera de soluciones destinadas a ayudar a las organizaciones con requisitos crecientes para la gestión de la seguridad cibernética y permitir a las empresas expandirse de manera eficiente y segura. Su compromiso es facilitar el acceso de la empresa privada y los organismos públicos a soluciones digitales robustas y seguras, así como entregar a sus clientes soluciones flexibles que permitan el fácil ingreso a los portales y manejo de las identidades para que el entorno sea productivo.

Find Josselyne on LinkedIn.

Find out more about Seguridad America at www.seguridadamerica.com.

We’ll be continuing this conversation on LinkedIn and Twitter using #LTADI – join us @ubisecure!

In episode 26, Oscar talks to Schehrezade about Tricerion's neurographic authentication solution – picture-based passwords. They discuss how neurographic authentication solves the risks of alphanumeric passwords and spoof phishing, the benefits for users who find it hard to remember and input alphanumeric passwords, and its use cases.

"None of us like passwords, we want something simple. But individuals understand they need something secure."

Schehrezade Davidson is the CEO of Tricerion, whose innovative SafeLogin product provides strong mutual authentication with picture-based passwords.

Find out more about Tricerion and watch videos of how it works at tricerion.com.

Schehrezade has 30 years' experience in financial services and equity fund management, where her expertise covered investing in large and small cap companies. She has over 10 years' experience in early stage technology investing, especially in companies on the cusp of commercialisation. Schehrezade was an early stage investor in Tricerion.

Find Schehrezade on LinkedIn.

We’ll be continuing this conversation on LinkedIn and Twitter using #LTADI – join us @ubisecure!

And we're back with series 2! Kicking us off is Debbie Reynolds, looking at privacy in contact tracing apps around the world. Debbie walks us through the potential issues with contact tracing apps with regard to regional laws, security risks which must be mitigated against and the practical effectiveness of the apps themselves. Debbie and Oscar also dive into the world of facial recognition – including the importance of accuracy and transparency around public practices and relevant regulations (GDPR, CCPA, BIPA etc.).

"For me, contact tracing is a profession, not an app"

Debbie Reynolds, “The Data Diva,” is a world-renowned technologist, thought-leader, and advisor to Multinational Corporations for handling global data privacy, cyber data breach response, and complex cross-functional data-driven projects. Ms. Reynolds is an internationally published author, highly sought speaker, and top media presence about global data privacy, data protection, and technology issues. Ms. Reynolds has also been recognised as a Technology Visionary and as a top leader in the Data Privacy industry worldwide.

Find out more about Debbie at www.debbiereynoldsconsulting.com and connect with her on LinkedIn.

We’ll be continuing this conversation on LinkedIn and Twitter using #LTADI – join us @ubisecure!

In episode 24, Clare and Oscar delve into the world of the Legal Entity Identifier (LEI) – what exactly is an LEI; the GLEIF's role in ensuring the operation of the Global LEI System and promoting LEI engagement; and the specific, quantifiable benefits that the LEI can bring to the banking sector.

"Consumer protection, greater transparency in the supply chain, and the detection and prevention of fraud can be achieved only through full transparency of counterparties."

Clare Rowley is the Head of Business Operations at the Global Legal Entity Identifier Foundation (GLEIF). Prior to working with GLEIF, Ms. Rowley worked at the United States Federal Deposit Insurance Corporation where she led technology initiatives improving bank resolution programs and contributed to research on subprime mortgages.

Find Clare on LinkedIn.

Established by the Financial Stability Board in June 2014, the Global Legal Entity Identifier Foundation (GLEIF) is a not-for-profit organisation created to support the implementation and use of the Legal Entity Identifier (LEI). GLEIF is headquartered in Basel, Switzerland. GLEIF services ensure the operational integrity of the Global LEI System. GLEIF also makes available the technical infrastructure to provide, via an open data license, access to the full global LEI repository free of charge to users. GLEIF is overseen by the LEI Regulatory Oversight Committee, which is made up of representatives of public authorities from across the globe. GLEIF has obtained the ISO/IEC 20000-1:2011 certification in October 2019 for its Partnership Program Services to the LEI issuing organisations (LOUs).

For more information, visit the GLEIF website at https://www.gleif.org/en

Ubisecure is a Local Operating Unit (LOU) for the GLEIF through its RapidLEI service and is the number one issuer of LEIs worldwide. Find out about becoming a RapidLEI partner at rapidlei.com/partners.

We’ll be continuing this conversation on LinkedIn and Twitter using #LTADI – join us @ubisecure!