#329 - Discovering Effective User Access Reviews with Stephen Washington

#329 - Discovering Effective User Access Reviews with Stephen Washington

In this episode of the Identity at the Center podcast, hosts Jeff and Jim discuss the vital role of user access reviews, device identity, and the evolving landscape of Identity Access Management (IAM) with guest Stephen Washington, Head of IAM at Discover Financial. The conversation delves into regulatory compliance, the use of AI in IAM, and practical steps for improving user access certifications. They also explore the importance of managing service accounts, innovations in IGA, and the role of identity in modern cybersecurity frameworks. The episode wraps up on a lighter note with a chat about fitness challenges like Tough Mudder and personal cheese preferences for grilled cheese sandwiches.


Chapters

00:00 Introduction to Regulatory Compliance in Financial Services 01:54 Welcome to the Identity at the Center Podcast 02:07 Exploring Device Identity 03:19 The Role of Identity in Modern Security 06:44 Engaging with the IAM Community 10:31 Upcoming Conferences and Events 13:58 Interview with Stephen Washington 25:36 The Importance of User Access Reviews 33:55 Backend Changes in IGA Systems 35:04 The Concept of Identity Data Lake 36:37 AI and Identity Fatigue 37:22 Importance of Identity Hygiene 38:32 Challenges with Access Reviews 39:42 Regulatory Compliance and Policy Changes 41:06 Advice for Practitioners on Access Reviews 45:47 NYDFS and User Access Reviews 47:41 The Role of NIST Cybersecurity Framework 52:35 Training Auditors and Policy-Based Access Control 57:38 Fitness and Stress Relief 01:05:38 Grilled Cheese and Final Thoughts


Connect with Stephen: https://www.linkedin.com/in/stephen-washington-jr-5569b57/


Gartner IAM Summit - Code IDAC425 saves 425€: https://www.gartner.com/en/conferences/emea/identity-access-management-uk

European Identity and Cloud Conference 2025 - Use code idac25mko for 25% off: https://www.kuppingercole.com/events/eic2025?ref=partneridac

Identiverse 2025 - Use code IDV25-IDAC25 for 25% off: https://identiverse.com/


Connect with us on LinkedIn:

Jim McDonald: https://www.linkedin.com/in/jimmcdonaldpmp/

Jeff Steadman: https://www.linkedin.com/in/jeffsteadman/

Visit the show on the web at http://idacpodcast.com

Jaksot(393)

Identity At The Center #17: The 2019 Gartner IGA Magic Quadrant

Identity At The Center #17: The 2019 Gartner IGA Magic Quadrant

In this episode, Jim and Jeff discuss the recently released Gartner Identity Governance & Administration Magic Quadrant. Visit any of the IGA leaders (SailPoint, Savyint, Omada, IBM, or One Identity) and you can probably get a copy via their homepage in exchange for your contact info. Want to join the conversation? Leave us a message here: anchor.fm/identity-at-the-center/message or email us at questions@identityatthecenter.com

18 Loka 201938min

Identity At The Center #16: The IAM Garbage Plate

Identity At The Center #16: The IAM Garbage Plate

In this episode, Jim and Jeff have a bit of an IAM garbage plate of random items in honor of their visit to Rochester, NY. There is some IT Service Management (ITSM) and service catalog talk along with a smattering of other items. Want to join the conversation? Leave us a message here: anchor.fm/identity-at-the-center/message or email us at questions@identityatthecenter.com

11 Loka 201936min

Identity At The Center #15: KuppingerCole Consumer Identity World Conference Part 2

Identity At The Center #15: KuppingerCole Consumer Identity World Conference Part 2

In this episode, Jim and Jeff recap the KuppingerCole Consumer Identity World conference in Seattle, WA. Part 2 of 2. Want to join the conversation? Leave us a message here: anchor.fm/identity-at-the-center/message or email us at questions@identityatthecenter.com

4 Loka 201938min

Identity At The Center #14: KuppingerCole Consumer Identity World Conference Part 1

Identity At The Center #14: KuppingerCole Consumer Identity World Conference Part 1

In this episode, Jim and Jeff talk about the first day of the KuppingerCole Consumer Identity World conference in Seattle, WA. Part 1 of 2. Want to join the conversation? Leave us a message here: anchor.fm/identity-at-the-center/message or email us at questions@identityatthecenter.com

2 Loka 201938min

Identity At The Center #13 - Conference Attendance Strategy with Jaime

Identity At The Center #13 - Conference Attendance Strategy with Jaime

In this episode, Jim and Jeff talk with special guest Jaime Lewis-Gross, Global Director of Solution Strategy at Saviynt, about how they pick which conferences to attend, how they figure out which sessions to attend, and their personal strategies for conference swag collection. Top IAM Conferences: RSA Conference Identiverse Gartner IAM Summit Want to join the conversation? Leave us a message here: anchor.fm/identity-at-the-center/message or email us at questions@identityatthecenter.com

27 Syys 201929min

Identity At The Center #12: Battling the Resistance

Identity At The Center #12: Battling the Resistance

For this episode, Jim and Jeff talk about how to identify and battle against resistance to change that can happen when introducing IAM to an organization. Top 12 Reasons Why People Resist Change: https://www.torbenrick.eu/blog/change-management/12-reasons-why-people-resist-change/ Top 10 Common Pitfalls Of An IAM Program: https://www.identropy.com/blog/new-ebook-top-10-common-pitfalls-of-an-iam-program Want to join the conversation? Leave us a message here: anchor.fm/identity-at-the-center/message or email us at questions@identityatthecenter.com

20 Syys 201940min

Identity At The Center #11: Managing IAM in the Hybrid Cloud

Identity At The Center #11: Managing IAM in the Hybrid Cloud

On this episode, Jim and Jeff talk with Morgan McNamara, a member of Identropy's crack engineering team, about a question submitted by listener Neil on approaches to manage identities across multiple cloud environments. Want to join the conversation? Leave us a message here: anchor.fm/identity-at-the-center/message or email us at questions@identityatthecenter.com.

13 Syys 201936min

Identity At The Center #10 - South of the Border with Arturo Cordoba

Identity At The Center #10 - South of the Border with Arturo Cordoba

On this episode, Jim and Jeff talk with Arturo Cordoba, Senior Advisor on the Cyber Security team with Cemex in Mexico, about the differences in IAM in Mexico compared to the United States, building IAM teams, and a hint of blockchain identity use cases. Want to join the conversation? Leave us a message here: anchor.fm/identity-at-the-center/message or email us at questions@identityatthecenter.com.

6 Syys 201943min