#329 - Discovering Effective User Access Reviews with Stephen Washington

#329 - Discovering Effective User Access Reviews with Stephen Washington

In this episode of the Identity at the Center podcast, hosts Jeff and Jim discuss the vital role of user access reviews, device identity, and the evolving landscape of Identity Access Management (IAM) with guest Stephen Washington, Head of IAM at Discover Financial. The conversation delves into regulatory compliance, the use of AI in IAM, and practical steps for improving user access certifications. They also explore the importance of managing service accounts, innovations in IGA, and the role of identity in modern cybersecurity frameworks. The episode wraps up on a lighter note with a chat about fitness challenges like Tough Mudder and personal cheese preferences for grilled cheese sandwiches.


Chapters

00:00 Introduction to Regulatory Compliance in Financial Services 01:54 Welcome to the Identity at the Center Podcast 02:07 Exploring Device Identity 03:19 The Role of Identity in Modern Security 06:44 Engaging with the IAM Community 10:31 Upcoming Conferences and Events 13:58 Interview with Stephen Washington 25:36 The Importance of User Access Reviews 33:55 Backend Changes in IGA Systems 35:04 The Concept of Identity Data Lake 36:37 AI and Identity Fatigue 37:22 Importance of Identity Hygiene 38:32 Challenges with Access Reviews 39:42 Regulatory Compliance and Policy Changes 41:06 Advice for Practitioners on Access Reviews 45:47 NYDFS and User Access Reviews 47:41 The Role of NIST Cybersecurity Framework 52:35 Training Auditors and Policy-Based Access Control 57:38 Fitness and Stress Relief 01:05:38 Grilled Cheese and Final Thoughts


Connect with Stephen: https://www.linkedin.com/in/stephen-washington-jr-5569b57/


Gartner IAM Summit - Code IDAC425 saves 425€: https://www.gartner.com/en/conferences/emea/identity-access-management-uk

European Identity and Cloud Conference 2025 - Use code idac25mko for 25% off: https://www.kuppingercole.com/events/eic2025?ref=partneridac

Identiverse 2025 - Use code IDV25-IDAC25 for 25% off: https://identiverse.com/


Connect with us on LinkedIn:

Jim McDonald: https://www.linkedin.com/in/jimmcdonaldpmp/

Jeff Steadman: https://www.linkedin.com/in/jeffsteadman/

Visit the show on the web at http://idacpodcast.com

Jaksot(393)

Identity At The Center #33 - IAM for IoT

Identity At The Center #33 - IAM for IoT

Jim and Jeff talk about a topic suggested by listener Kerem B.; How to approach IAM for IoT (Internet of Things). For more IoT Security info, visit www.iotsecurityfoundation.org Want to join the conversation? Leave us a message here: anchor.fm/identity-at-the-center/message or email us at questions@identityatthecenter.com.

2 Maalis 202029min

Identity At The Center #32 - Talking IAM with Binod at Ilantus

Identity At The Center #32 - Talking IAM with Binod at Ilantus

Jim and Jeff talk with Binod Singh, Founder and CEO of Ilantus Technologies, about where the IAM market was, is, might go, and why the mid-market space for IAM is hot right now. For more information about Ilantus, visit ilantus.com. Want to join the conversation? Leave us a message here: anchor.fm/identity-at-the-center/message or email us at questions@identityatthecenter.com.

24 Helmi 202043min

Identity At The Center #31 - Confusing and Misleading IAM Terms

Identity At The Center #31 - Confusing and Misleading IAM Terms

Jim and Jeff talk about some of the terminologies that can be misleading in the IAM space if people are not on the same page. Want to join the conversation? Leave us a message here: anchor.fm/identity-at-the-center/message or email us at questions@identityatthecenter.com.

17 Helmi 202045min

Identity At The Center #30 - Biggest Challenges of CIAM

Identity At The Center #30 - Biggest Challenges of CIAM

Jim and Jeff talk about some of the biggest challenges organizations (and vendors) face when implementing a Consumer/Customer Identity & Access Management (CIAM) program and technology. Want to join the conversation? Leave us a message here: anchor.fm/identity-at-the-center/message or email us at questions@identityatthecenter.com.

10 Helmi 202036min

Identity At The Center #29 - Big Game IAM Chat With Katy, Amanda, and Marcie

Identity At The Center #29 - Big Game IAM Chat With Katy, Amanda, and Marcie

Jim and Jeff visit with their friends Katy, Amanda, and Marcie at Winterfell (aka Stevens Point, WI) to talk about why the 49ers will beat the Chiefs, why the Chiefs will beat the 49ers, how they got into the IAM space, and what they wish the business knew about IAM. Want to join the conversation? Leave us a message here: anchor.fm/identity-at-the-center/message or email us at questions@identityatthecenter.com.

3 Helmi 202047min

Identity At The Center #28 - IAM Metrics

Identity At The Center #28 - IAM Metrics

Jim and Jeff talk about why IAM metrics are important and some ideas for the basic reporting of an IAM program. This was sparked by a recent Forbes article titled "Nine Cybersecurity Metrics Every CEO Should Track" which is worth checking out. Want to join the conversation? Leave us a message here: anchor.fm/identity-at-the-center/message or email us at questions@identityatthecenter.com.

27 Tammi 202031min

Identity At The Center #27 - What makes a good IAM Program Manager

Identity At The Center #27 - What makes a good IAM Program Manager

We are back and ready to tackle 2020! In the first episode of this decade, Jim and Jeff talk about what it takes to be a good IAM program manager as well as some of the mistakes they made in their IAM careers and mistakes they see organizations making today. Want to join the conversation? Leave us a message here: anchor.fm/identity-at-the-center/message or email us at questions@identityatthecenter.com.

20 Tammi 202052min

Identity At The Center #26 - IAM in Monterrey with Arturo

Identity At The Center #26 - IAM in Monterrey with Arturo

In the final episode of 2019, Jeff talks with Arturo Cordoba, Senior Advisor on the Cyber Security team with CEMEX in Mexico. They discuss the PEMEX ransomware attack, the ups & downs Arturo experienced with his IAM program this year and starting an IAM group in the Monterrey, Mexico area. If you are in the Monterrey area and want to be part of the group, reach out to Arturo on LinkedIn! Jim and Jeff hope you have a happy holiday season and will be back in January 2020 with new episodes. Want to join the conversation? Leave us a message here: anchor.fm/identity-at-the-center/message or email us at questions@identityatthecenter.com.

20 Joulu 201926min