Reviewing shared responsibility and vendor evidence

Kia advises reviewing vendor responsibility matrices, SOC2, FedRAMP equivalents and verifying controls.

Play episode from 34:39

chevron_right

Transcript

chevron_right

Transcript

Episode notes

In this episode of the Identity at the Center Podcast, hosts Jeff and Jim delve into the intricacies of compliance, governance, and cybersecurity with special guest and colleague Kia Smith, a director in RSM's Security and Privacy Risk Consulting practice. They explore the foundational role of compliance activities such as Sarbanes-Oxley, the crucial need to align governance with security, and the rising complexity of regulatory environments driven by third-party dependencies. Kia provides valuable insights into the Cybersecurity Maturity Model Certification (CMMC) and its widespread implications for industries beyond defense. The discussion also touches upon the relevance of legal language in contracts to manage risk effectively, the role of AI in compliance frameworks, and the importance of continuous compliance validation.

Chapters

00:00 Understanding Compliance: Beyond Check-the-Box

01:58 Introduction to the Podcast

03:46 The Importance of a Well-Rounded Identity Professional

06:38 Upcoming Conferences and Discount Codes

08:51 Meet Our Guest: Kia Smith

09:36 Kia's Journey from Law to Cybersecurity

13:50 The Role of a Director in Consulting

19:37 Compliance vs. Security: A Balanced Approach

21:41 The Evolving Regulatory Landscape

25:00 Managing Third-Party Risks

32:21 Setting IAM Security Standards