#305 - Identity Week America with Ryan Galluzzo of NIST

#305 - Identity Week America with Ryan Galluzzo of NIST

In this episode of the Identity at the Center podcast, Jeff and Jim are live at the Identity Week America conference in Washington, DC. Welcoming Ryan Galluzzo, Identity Management Program Lead at NIST, they dive into recent NIST updates, including a mobile driver's license project, changes in public comment and revision processes, and the significance of user-controlled wallets. They also touch on self-sovereign identity, risk management, evolution in identity assurance levels, and the vital role of continuous evaluation and improvement. The episode concludes with a light-hearted discussion on the inquisitive nature of children and the spontaneous, enriching conversations that happen at industry conferences.

00:00 Welcome to Identity at the Center Podcast

01:26 Conference Highlights and Networking

02:47 Panel Discussions and Key Takeaways

05:07 Mobile Driver's License Project

07:09 Public Comment Draft and Feedback

11:40 Self-Sovereign Identity and Trust Issues

16:41 NIST Guidance and Risk Management

28:47 Introduction to RMF and Assurance Levels

29:05 Contextualizing Assurance Levels for Different Users

30:25 Continuous Evaluation and Improvement

34:28 User-Controlled Wallets and Federation

35:59 Account Recovery and Assurance Levels

37:18 Overview of NIST 800-63 Documents

51:25 Existential Questions and Personal Anecdotes

55:25 Conclusion and Final Thoughts

Connect with Ryan: ⁠https://www.linkedin.com/in/ryan-galluzzo-a100563b/⁠

Authenticate Conference - Use code IDAC15 for 15% off: ⁠https://authenticatecon.com/event/authenticate-2024-conference/⁠

Connect with us on LinkedIn:

Jim McDonald: ⁠https://www.linkedin.com/in/jimmcdonaldpmp/⁠

Jeff Steadman: ⁠https://www.linkedin.com/in/jeffsteadman/⁠

Visit the show on the web at ⁠http://idacpodcast.com⁠ and watch at ⁠https://www.youtube.com/@idacpodcast

Jaksot(394)

Identity at the Center #50 - It's Our Birthday!

Identity at the Center #50 - It's Our Birthday!

Jim and Jeff talk almost nothing about IAM and instead reflect on the show turning 1, some of their favorite episodes from the first year, a new show website, and what to expect in the future of the podcast. Visit the show at www.IdentityAtTheCenter.com and follow @IDACPodcast on Twitter.

29 Kesä 202034min

Identity at the Center #49 - Role Mining Lessons Learned

Identity at the Center #49 - Role Mining Lessons Learned

Jim and Jeff talk with IAM Architect and fellow Identropian Helio Gomez about the lessons they have all learned when it comes to role mining and engineering. Thanks to listener Andrew C. for the topic suggestion! Connect with Helio here: https://www.linkedin.com/in/helio-gomez-1507765/ Connect with Jim and Jeff on LinkedIn here: Jim McDonald: https://www.linkedin.com/in/jimmcdonaldpmp/ Jeff Steadman: https://www.linkedin.com/in/jeffsteadman/ Email the show at questions@identityatthecenter.com or send us a message on LinkedIn.

22 Kesä 202042min

Identity at the Center #48 - Eve Maler, IAM UMAnitarian

Identity at the Center #48 - Eve Maler, IAM UMAnitarian

Jim and Jeff talk with Eve Maler, CTO at ForgeRock about her work in the IAM space which includes helping found standards like XML and UMA, why we think blockchain identity is over-hyped, and some of the highlights of the recently released ForgeRock 2020 Consumer Identity Breach Report. 2020 ForgeRock Consumer Identity Breach Report: https://www.forgerock.com/resources/2020-consumer-identity-breach-report ForgeRock ROI Calculator: https://www.forgerock.com/roi-calculator/ Find Eve here: Twitter: https://twitter.com/xmlgrrl LinkedIn: https://www.linkedin.com/in/evemaler/ Connect with Jim and Jeff on LinkedIn here: Jeff Steadman: https://www.linkedin.com/in/jeffsteadman/ Jim McDonald: https://www.linkedin.com/in/jimmcdonaldpmp/ Email the show at questions@identityatthecenter.com or send us a message on LinkedIn.

15 Kesä 202050min

Identity At The Center #47 - IAM Program Drivers & Requirements

Identity At The Center #47 - IAM Program Drivers & Requirements

Jim and Jeff talk about IAM Program Drivers & Requirements and which comes first. LastPass Report: https://www.lastpass.com/identity-and-access-management-by-industry Connect with Jim and Jeff on LinkedIn here: Jim McDonald: https://www.linkedin.com/in/jimmcdonaldpmp/ Jeff Steadman: https://www.linkedin.com/in/jeffsteadman/ Email the show at questions@identityatthecenter.com or send us a message on LinkedIn.

8 Kesä 202052min

Identity At The Center #46 – The 2020 KuppingerCole Leadership Compass for Privileged Access Management

Identity At The Center #46 – The 2020 KuppingerCole Leadership Compass for Privileged Access Management

Jim and Jeff talk about some of the findings in the recently released 2020 KuppingerCole Leadership Compass for Privileged Access Management. Grab the report from any of these leading vendors (in alphabetical order): BeyondTrust: https://www.beyondtrust.com/resources/whitepapers/kuppingercole-leadership-compass-privilege-management CyberArk: https://lp.cyberark.com/kuppingercole-leadership-compass-pam-2020.html Thycotic: https://thycotic.com/why-thycotic/analysts-opinions/kuppingercole-leadership-compass-report/ Identiverse 2020 Conference Link: https://identiverse.com/ Connect with Jim and Jeff on LinkedIn here: Jeff Steadman: https://www.linkedin.com/in/jeffsteadman/ Jim McDonald: https://www.linkedin.com/in/jimmcdonaldpmp/ Email the show at questions@identityatthecenter.com or send us a message on LinkedIn.

1 Kesä 202056min

Identity At The Center #45 - The 2020 Verizon Data Breach Investigations Report

Identity At The Center #45 - The 2020 Verizon Data Breach Investigations Report

Jim and Jeff talk about some of the findings in the recently released 2020 Verizon Data Breach Investigations Report (link below). Report link: https://enterprise.verizon.com/resources/reports/dbir/ Identiverse 2020 Conference Link: https://identiverse.com/ Connect with us on LinkedIn: Jeff Steadman: https://www.linkedin.com/in/jeffsteadman/ Jim McDonald: https://www.linkedin.com/in/jimmcdonaldpmp/ Email your questions, suggestions, and topic requests to the show at questions@identityatthecenter.com

25 Touko 202050min

Identity At The Center #44 - IDSA Report-Identity A Work In Progress

Identity At The Center #44 - IDSA Report-Identity A Work In Progress

Jim and Jeff talk about some of the findings in the recently released Identity Defined Security Alliance (IDSA) report "Identity Security: A Work In Progress" Want to join the conversation? Leave us a message here: anchor.fm/identity-at-the-center/message or email us at questions@identityatthecenter.com.

18 Touko 202035min

Identity At The Center #43 - Passwords and Phishing in the COVID Era

Identity At The Center #43 - Passwords and Phishing in the COVID Era

Jim and Jeff talk about passwords for World Password Day (May 6th) and a Barracuda Networks commissioned study about the security concerns businesses are seeing during the COVID-19 pandemic. Want to join the conversation? Leave us a message here: anchor.fm/identity-at-the-center/message or email us at questions@identityatthecenter.com.

11 Touko 202042min