Identity Jedi Newsletter 4

May the 4th be with you

Author

David Lee
September 28, 2022

Wednesday 9/28/22 - Identity Jedi Newsletter - Subscribe

Welcome everyone to the fourth edition of the Identity Jedi Newsletter!

Here's what we've got this week

  • Fixing those pesky AWS permissions

  • Machines on the rise

  • Thoma Bravo Update

  • Shameless Plug..I wrote an article for Solutions Review. Check it out in the Good Reads section.

Welcome back friends! We got some interesting news from the world of identity this week as we gear up for conference season. Austin will be hosting both SailPoint's Navigate Conference, and Ping's YOUniverse next week. But don't just take my word for it:

Also be sure to check out BRAND NEW Referral program! That's right share the newsletter get free stuff!!

What's happening this week

Fixing those pesky AWS permissions

There's a new open source cloud security tool that promises to fix ALL of your AWS permission problems. Ok, I'm joking, but there is a new tool designed to help with managing cloud permissions. This has been a huge problem for administrators as learning the ins and outs of AWS permissions is like going for a Doctorate in theoretical physics. It's possible, but who has the time? Enter NUVOLO, a command line tool that dumps your current AWS permissions into a graph database and then let's see the relationships between the objects. Interesting, to say the least. Full details here:

    NUVOLA: the new Cloud Security tool

    nuvola is the new open-source cloud security tool to address the privilege escalation in cloud environments. nuvola is the new open source security tool made by the Italian cyber security researcher Edoardo Rosa (@_notdodo_), Security Engineer at Prima Assicurazioni. The tool was released during the RomHack 2022 security conference in Rome. The tool helps the […]

    https://securityaffairs.co/wordpress/136336/security/nuvola-cloud-security-tool.html

    Machines on the rise

    They are coming for us all! Or not, but according to a recent report from our friends over at SailPoint. Machine identities now make up 43% of all identities in the average enterprise. Which begs the question, are you really slacking who you think you're slacking? The article below gives some brief information on this, but all the good stuff is in SailPoint's report, which of course is hidden behind a marketing wall for now. We'll see if they release the full report post Navigate. Regardless, this is something we've seen for the past couple years as we've relied more on automation tools. The real questions is how are platforms like SailPoint helping customers address these issues.

    Machines make up 43% of digital identities on enterprise networks

    The Horizons of Identity report from SailPoint Technologies Holdings, Inc. surveyed around 300 global cybersecurity executives about the state of identity management.

    https://www.securitymagazine.com/articles/98401-machines-make-up-43-of-digital-identities-on-enterprise-networks

    Thoma Bravo Update

    Some interesting news from Thoma Bravo. The article below is your typical press release about the update of their purchase.. Blah, blah, blah. Here's the interesting part. Chip Virnig a partner at Thoma Bravo was asked the following question: Do you see some consolidation, eventually?

    Here's his response

    Our thesis is that this is going to remain heavily siloed for the foreseeable future. You will certainly have some large category killers that dominate a market and some adjacencies, but you will not see any vendors successfully serve as a “one-stop shop” for all things cyber. That thesis has failed multiple times over the past decade and the stakes are now higher than ever.

    Chip Virnig

    That's a pretty bold statement in my opinion. Given the movement we've already seen in this industry for companies to build all in on solutions ( Okta, CyberArk, OneIdentity) I'm surprised that Chip would take should a strong stance. I for one, don't believe it. Did they really spend 10 Billion dollars ( that's the combined price for SailPoint and Ping) just to keep the companies as they were? How much more revenue can you squeeze out of an IGA product, or SSO product alone? Time will tell.

    M&A Technology Stalwart Goes All in on Cybersecurity — Mergers & Acquisitions

    An Interview with Thoma Bravo’s Chip Virnig.

    https://www.themiddlemarket.com/feature/technology-stalwart-goes-all-in-on-cybersecurity

    Good Reads

    A Roadmap for Achieving Comprehensive Identity Management

    As part of Solutions Review’s Premium Content Series—a collection of contributed columns written by industry experts in maturing software categories— David “The Identity Jedi” Lee of Se…

    https://solutionsreview.com/identity-management/a-roadmap-for-achieving-comprehensive-identity-management/

    What Is Digital Identity and Why It Is Important?

    Digital identity is the online or digital presence that an individual or organization presents to the world.

    https://www.coinspeaker.com/guides/what-is-digital-identity-and-why-it-is-important/

    The Top 6 Identity and Access Management Trends From the Gartner IAM Summit

    The time to plan for the next generation of identity and access management (IAM) strategies is now. The post The Top 6 Identity and Access Management Trends From the Gartner IAM Summit appeared first on Keyfactor.

    https://securityboulevard.com/2022/09/the-top-6-identity-and-access-management-trends-from-the-gartner-iam-summit/

    Convenience and Security: A High Wire Act

    As part of Solutions Review’s Premium Content Series—a collection of contributed columns written by industry experts in maturing software categories— Kimberly Biddings of BIO-Key tiptoes carefully …

    https://solutionsreview.com/identity-management/convenience-and-security-a-high-wire-act/?utm_source=rss&utm_medium=rss&utm_campaign=convenience-and-security-a-high-wire-act

    Podcasts

    ‎Liminal Podcasts on Apple Podcasts

    ‎Technology · 2022

    https://podcasts.apple.com/us/podcast/liminal-podcasts/id1183881265

    ‎IDentity Today on Apple Podcasts

    ‎Technology · 2022

    https://podcasts.apple.com/gb/podcast/identity-today/id1499769451

    ‎Identity, Unlocked. on Apple Podcasts

    ‎Technology · 2022

    https://podcasts.apple.com/gb/podcast/identity-unlocked/id1529010471

    Last Word

    We tend to get caught up in the latest products and tools that can help us solve or problems in identity, but don't forget about your strategy. Big picture matters in this world, make sure you are tracking against strategic goal for how you want to handle identity within your enterprise, both from a security standpoint, and a revenue generation standpoint. Make it a living breathing part of your business. In Austin all next week, so if you're in town let's connect! Until then

    Be Good to each other, be Kind to each other, and Love each other. I'll see you next week Jedi

    -Identity Jedi

    Reply

    or to participate.