Identity at the Center #386 - InfoSec World 2025 - CISO Tradecraft for IAM
8 snips
Nov 17, 2025 Join Ross Young, a seasoned cybersecurity leader and co-host of the CISO Tradecraft podcast, alongside G Mark Hardy, a veteran cybersecurity expert and instructor. They dive into pressing CISO concerns, including AI security, identity management, and the challenges of deep fakes. The duo discusses identity as the new perimeter in security and offers practical strategies for securing funding for identity initiatives. They also speculate on AI's impact on cybersecurity careers and share insights about non-human identities and the importance of governance.
AI Snips
Chapters
Transcript
Episode notes
Require MFA And Use Contextual Factors
- Prioritize MFA and multi-factor signals for any system users touch.
- Extend identity factors to include location and device behavior to detect impossible travel.
Identity Costs Don't Scale Down Automatically
- IANZ found no economies of scale in identity costs; larger firms may pay more per person.
- That gap signals opportunity to innovate and reduce per-user identity costs.
Identity's Ownership Has Shifted Upward
- Identity moved from help desk/network to CISO ownership and is now a core security pillar.
- Yet identity often ranks below AI and product security in immediate CISO priorities.