"What we're seeing now is a lot of the vendors that were traditionally one of the identity pillars are kind of expanding into other pillars,” says Kevin Converse, Vice President, Identity and Access Management, GuidePoint Security.

In this episode of The Security Strategist podcast, Richard Stiennon speaks with Converse, VP at GuidePoint Security. They discuss identity management, focusing on identity convergence, the impact of agentic AI, and the complexities of non-human identities.

The conversation also taps into ethical dilemmas surrounding AI decision-making and future predictions for digital identity in a rapidly changing technological environment.

AI’s Impact on Identity and Access Management (IAM)

Identity and Access Management (IAM) takes centre stage in this episode. The speakers spotlight two major relevant trends – identity convergence and the influence of agentic AI on digital identity.

Converse explains that traditionally, IAM was built on "three pillars—the IGA stack, the privilege access management, and the access manager." However, a change in fashion is taking place where "a lot of the vendors that were traditionally one of those pillars are kind of expanding into other pillars."

This change is a result of cybersecurity challenges that require businesses to adopt comprehensive solutions and tap into new markets. Converse further notes, "Some of it for the capabilities so they can expand on what they're doing, but it's also to hit some customers and verticals that we didn't usually do in identity."

This means moving from a multi-tool approach to a more unified platform, aiming to provide a "one-stop shop" for identity needs.

"There's a lot of focus on unified platforms for identity, particularly," Converse says, "that's a big investment piece right now." He also points out, "vulnerability management tools right now are getting in there too. You name it, they're coming into identity. Identity is the hot space at the moment."

This offers cost-saving potential, but Converse urges caution. "The question is, from an overall risk perspective, is that enough for your company?" He stresses the importance of evaluating whether integrated solutions deliver the same "functionality and the same security posture" as specialised tools.

The VP also reminds us that "the tools are all pretty capable, but it's just a matter of understanding exactly what you're trying to accomplish and what you're willing to accept as a risk."

Takeaways

  • Identity convergence is reshaping the identity management landscape.
  • Agentic AI requires a mature identity framework for effective implementation.
  • Non-human identities present unique challenges in cybersecurity.
  • Ethical considerations are crucial when allowing AI to make decisions.
  • Organisations must balance speed and security in adopting new technologies.
  • Real-time visibility and control are essential for managing non-human identities.
  • AI can automate low-level tasks but requires careful oversight.
  • The convergence of identity pillars can lead to cost savings but may compromise functionality.
  • Future technologies like quantum computing could disrupt current encryption methods.
  • Continuous adaptation is necessary to keep pace with evolving cyber threats.

Chapters

00:00 Introduction to Identity and Access Management

02:57 Understanding Identity Convergence

06:02 The Role of Agentic AI in Identity Management

08:59 Navigating Non-Human Identities

11:47 Ethical Dilemmas in AI Decision-Making

14:46 Future Predictions for Digital Identity

About GuidePoint

GuidePoint Security provides trusted cybersecurity expertise, solutions and services that help organisations make better decisions that minimise risk. Their experts act as your trusted advisors, helping you understand your business and challenges. They evaluate your cybersecurity posture and ecosystem to identify risks, optimise resources, and implement best-fit solutions.

GuidePoint’s unmatched expertise has enabled Fortune 500 companies and U.S. government cabinet-level agencies to improve their security posture and reduce risk. Learn more at www.guidepointsecurity.com.