Our NHI Mgmt Group (https://nhimg.org) hosts the NHI Global Summit at the Nasdaq Building, Times Square on February 27th 2025.Christopher Cutajar (Principal Information Security Engineer, Elastic) shared lessons learned :

• Get Leadership Onboard – need executive buy in
• Finding Owners is Hard and very time consuming
• Take a Data Driven Approach to get visibility
• Automation Helps at Scaling
• Create User Empathy e.g. through pilot groups
• Work as a Team to help with this huge challenge that spans all IT groups/processes

For more great content on Non-Human Identities, go to our portal https://nhimg.org/, where we have the most comprehensive knowledge centre on Non-Human / Machine Identities, including Research, White Papers, Breaches, Discussion Forum, Blogs and Products that support the risk management of NHIs

Our NHI Mgmt Group (https://nhimg.org) hosts the NHI Global Summit at the Nasdaq Building, Times Square on February 27th 2025.John Remo (CEO and Co-founder, Arbitium) spoke shared fascinating insights about a major breach, that left an organisation with unauthorised data access, extended breach duration and regulatory and legal consequences.What Went wrong :

• Inadequate Monitoring of NHIs
• Lack of Secure credential management
• Absence of Least Privilege
• Insufficient Lifecyle Management

Why Non-Human Identity Management matters so much?

• Expanding Attack Surface
• Complexity of Access Controls
• Automation and Scale
• Regulatory Compliance
• Reputation and Trust

Breach Implications

• Cost of reimbursement for any damages / class action lawsuits
• Crisis communication and public relations
• Legal & Regulatory Compliance – inside and outside USA (more strict)
• 3rd Party Supply Chain Risks
• Internal & External Customer / Stakeholder Trust

For more great content on Non-Human Identities, go to our portal https://nhimg.org/, where we have the most comprehensive knowledge centre on Non-Human / Machine Identities, including Research, White Papers, Breaches, Discussion Forum, Blogs and Products that support the risk management of NHIs

Our NHI Mgmt Group (https://nhimg.org) hosts the NHI Global Summit at the Nasdaq Building, Times Square on February 27th 2025.Moderated by: Larry Whiteside Jr., Co-founder and President ConfidePanellists:

• Olivia Phillips, Business Information Security Officer, Amtrak
• Harnit Singh, Founding Product Manager, P0 Security
• Art Poghosyan, CEO & Co-Founder, Britive

Larry Whiteside Jr. hosted an entertaining discussion with Olivia Phillips , Artyom Poghosyan and Harnit Singh on the challenges and opportunities of securing NHIs in the modern enterprise.

For more great content on Non-Human Identities, go to our portal https://nhimg.org/, where we have the most comprehensive knowledge centre on Non-Human / Machine Identities, including Research, White Papers, Breaches, Discussion Forum, Blogs and Products that support the risk management of NHIs.

Our NHI Mgmt Group (https://nhimg.org) hosts the NHI Global Summit at the Nasdaq Building, Times Square on February 27th 2025.Omri Green (Co-founder and GTM, Twine Security) hosted a fireside chat on the main stage with Yuval Malisov (Chief Information Security Officer, BHI), where we discussed the opportunities in #AgenticAI for the #cybersecurity industry for the financial sector and beyond.With Deloitte’s forecasts that 25% of enterprises will deploy AI agents by 2025, growing to 50% by 2027, the message is clear: adapt or fall behind.For financial institutions, this means:

• Building clear operational boundaries with AI
• Balancing productivity gains against regulatory requirements
• Implementing governance before deployment, not after
• The next step in evolution is AI employees that mimic human problem-solving abilities.

• Shifting entire workloads to AI systems
• Finally taking the strategic view they’ve been too overburdened to achieve
• Focusing on high-value decision making instead of routine operations

• When thinking about Identity, AI employees are set to augment the teams with:
• Handling day to day tasks, like Access Requests
• Finding missing owners of Non Human Identities
• Making sense of the complex entitlements, so humans can make informed decisions.

For CISOs and cyber teams, this means:Are you developing your strategy around AI, and embrace the wave, or will you be playing catch-up when your competitors gain the advantage?

For more great content on Non-Human Identities, go to our portal https://nhimg.org/, where we have the most comprehensive knowledge centre on Non-Human / Machine Identities, including Research, White Papers, Breaches, Discussion Forum, Blogs and Products that support the risk management of NHIs.

Our NHI Mgmt Group (https://nhimg.org) hosts the NHI Global Summit at the Nasdaq Building, Times Square on February 27th 2025.Mario Duarte (Chief Information Security Officer, Aembit & Former CISO of Snowflake) gave fascinating insights, having previously been CISO at Snowflake.

• 60% of CISOs in publicly traded companies state that IAM is a function owned by their team

• 65% of CISOs in privately held companies state that IAM is a function owned by their team

• Human errors are the cause of the majority of major security breaches in the past 20 years – from weak passwords and poor credential management, phishing attacks, misconfigured system and security settings, unpatched software, unauthorised software and shadow IT

• Human IAM solutions like MFA FIDO2, Zero Trust etc have created more secure access and made users lives better and more productive

• Same goals required for Non-Human Identities – find solutions that improve the overall security posture; help everyone become more productive

• What were the root causes from a huge breach : found issues/anomalies with software accessing the most sensitive systems (and there were a lot of them); monitoring and alerting wasn’t good enough; Devs were left with a terrible experience managing secrets

• By deploying Non-Human IAM you will achieve : proactive practices with automation; better developer experience, multiplier effect when integrating NHI IAM with existing security tools

For more great content on Non-Human Identities, go to our portal https://nhimg.org/, where we have the most comprehensive knowledge centre on Non-Human / Machine Identities, including Research, White Papers, Breaches, Discussion Forum, Blogs and Products that support the risk management of NHIs.

Our NHI Mgmt Group (https://nhimg.org) hosts the NHI Global Summit at the Nasdaq Building, Times Square on February 27th 2025.Oded Hareven (CEO and Co-founder, Akeyless) and James J Azar (CISO at AP4 Group & Host of the CyberHub Podcast) highlighted how reducing secrets and leveraging #SPIFFE, #SPIRE, and #OIDC tokens helps shrink the attack surface.Less secrets, more security!One great discussion was around the different generations or maturity of NHI Management – Oded shared that with most clients at the moment the focus is protecting the credentials (secrets)

• 1st Gen – Static secrets are the core issue at most orgs and the initial focus is the need to get them secured e.g. in a secrets vault, to reduce discovery etc.

• 2nd Gen – Rotation tends to be the next generation or focus, however it isnot bring implemented as much as it should have been, even though regulators and auditors expect this to happen – why because it’s very hard to rotate without potentially causing operational impact.

• 3rd Gen – moving on from rotation, and using Just-In-Time (JIT) credentials and temporary identities

For more great content on Non-Human Identities, go to our portal https://nhimg.org/, where we have the most comprehensive knowledge centre on Non-Human / Machine Identities, including Research, White Papers, Breaches, Discussion Forum, Blogs and Products that support the risk management of NHIs.

Our NHI Mgmt Group (https://nhimg.org) hosts the NHI Global Summit at the Nasdaq Building, Times Square on February 27th 2025.Vincenzo Iozzo (Founder & CEO, SlashID) shared amazing insights on tactics, techniques and procedures (TTPs) and how you can stop them

• 79% of attacks today are malware free
• 31% of all breaches involve stolen credentials
• +583% increase in kerberoasting attacks YoY
• 66% of AWS breaches are caused by leaked/stolen credentials

• Stateless tokens
• Complex protocols
• Broken permission models

• Identity attacks don’t target only NHIs - need to cover human identities also
• Posture, lifecycle management and PAM are not enough - ITDR capabilities are key to reduce dwell time
• IdP audit logs have partial visibility - need a comprehensive view of your environment
• MFA and FIDO are not enough – attackers get around both - ITDR + device bound tokens
• Over-permissioned and long-lived identities make lateral movement trivial - migrate to JIT access

Vincenzo explained the anatomy of a breachPhishing or Credential Lead - Initial Compromise - Credential Harvesting - Data Exfiltrationand the root causesFinally he spoke about how to defence against these attacks

For more great content on Non-Human Identities, go to our portal https://nhimg.org/, where we have the most comprehensive knowledge centre on Non-Human / Machine Identities, including Research, White Papers, Breaches, Discussion Forum, Blogs and Products that support the risk management of NHIs.

Our NHI Mgmt Group (https://nhimg.org) hosts the NHI Global Summit at the Nasdaq Building, Times Square on February 27th 2025.In this session Nathan Shuchami (Managing Partner, Hyperwise) shared fascinating insights on how a VC firm operates, how it evaluates companies to invest in and why they chose to invest in a NHI company.In terms of 5 leading investment criteria :

• The CEO
• Organic sales skills from day zero
• Solving real material and immediate problem
• MVP in 8 months from seed funding
• High barrier to entry, yet feasible solution

• Deep Domain Expertise
• Hands On Practitioner Experience
• Vision and Adaptability
• Ability to Execute
• Market Validation and Seamless Adoption
• Relentless Passion and Persistence

What they look for in Cybersecurity Founders

For more great content on Non-Human Identities, go to our portal https://nhimg.org/, where we have the most comprehensive knowledge centre on Non-Human / Machine Identities, including Research, White Papers, Breaches, Discussion Forum, Blogs and Products that support the risk management of NHIs.

Our NHI Mgmt Group (https://nhimg.org) hosts the NHI Global Summit at the Nasdaq Building, Times Square on February 27th 2025.In this session Kamal Congevaram Muralidharan (Co-founder and Chief Technologist, Andromeda Security) discusses "Best Practices For NHI Security: What Do I Prioritize"Kamal highlights the importance of entitlements for non-human security.He recommended the following NHI Security best practices:-

• Use short-lived credentials whenever possible to reduce risk
• Dynamically evaluate and right size entitlements to least privilege to minimize the attack surface
• Use behavioural analysis to detect anomalies and identity compromises

For more great content on Non-Human Identities, go to our portal https://nhimg.org/, where we have the most comprehensive knowledge centre on Non-Human / Machine Identities, including Research, White Papers, Breaches, Discussion Forum, Blogs and Products that support the risk management of NHIs.

Our NHI Mgmt Group (https://nhimg.org) and Entro Security co--hosts the NHI Global Summit at the Nasdaq Building, Times Square, NY on February 27th 2025.Itzik Alvas, CEO and Co-Founder of Entry Security and Lalit Choda, CEO and Founder of the Non-Human Identity Management Group, share Opening Remarks.

For more great content on Non-Human Identities, go to our portal https://nhimg.org/, where we have the most comprehensive knowledge centre on Non-Human / Machine Identities, including Research, White Papers, Breaches, Discussion Forum, Blogs and Products that support the risk management of NHIs.