#356 - Mr. NHI, Lalit Choda, on Securing the Exploding World of NHI

#356 - Mr. NHI, Lalit Choda, on Securing the Exploding World of NHI

Join Jim McDonald and Jeff Steadman on the Identity at the Center podcast as they welcome Lalit Choda, founder and CEO of the Non-Human Identity Management Group. Lalit, also known as "Mr. NHI," shares his journey from investment banking to becoming a leading expert in non-human identities. This episode delves into the critical and often overlooked world of NHI, exploring why it's such a hot topic now, the challenges practitioners face in managing these identities, and how to approach the problem from a risk-based perspective. Lalit discusses the limitations of traditional PAM and IGA tools for NHI, the importance of foundational controls, and the alarming implications of AI on non-human identity management. Plus, hear a fun segment about vinyl records and some surprising finds!

Chapter Timestamps:00:00:00 - Introduction to Lalit Choda and the NHI Community00:02:31 - Welcome to the Identity at the Center Podcast & IdentiVerse Discussion00:06:18 - Lalit Choda's Identity Origin Story: From Mr. SOX to Mr. NHI00:12:03 - Why Non-Human Identities Are a Big Deal Right Now00:15:37 - Defining NHI and the Practitioner's Framework00:19:13 - The Scale and Challenges of NHI Management00:23:01 - New Types of NHI and Tooling Limitations00:27:12 - The Lack of a Single Source of Truth for NHI00:33:57 - Prioritizing NHI Management and the Role of PAM00:38:58 - A Risk-Based Approach to NHI and Foundational Controls00:48:15 - What Scares Lalit Most About NHI (and AI)00:50:54 - Lalit's Impressive Vinyl Collection00:56:38 - Jim and Jeff's First, Best, and Favorite Albums01:01:15 - The Intersection of Music and Non-Human Identities01:02:00 - Wrapping Up & Where to Find More Information

Connect with Lalit: https://www.linkedin.com/in/lalit-choda-5b924120/

Non-Human Identity Management Group: https://www.nhimg.org/

Connect with us on LinkedIn:

Jim McDonald: https://www.linkedin.com/in/jimmcdonaldpmp/

Jeff Steadman: https://www.linkedin.com/in/jeffsteadman/

Visit the show on the web at http://idacpodcast.com

Keywords:Lalit Choda, Non-Human Identity, NHI, Machine Identity, Workload Identity, Identity Management, Cybersecurity, PAM, IGA, Privilege Access Management, Identity Governance and Administration, Secrets Management, Cloud Security, AI, Artificial Intelligence, DevSecOps, Risk-Based Approach, Identity Security, Service Accounts, Identity at the Center, IDAC, Jeff Steadman, Jim McDonald, IdentiVerse, Vinyl Collection, Podcast, Mr. NHI

#idac #nonhumanidentity #machineidentity #cybersecurity #identityaccessmanagement #IAM #infosec #digitalidentity #workloadsecurity #devsecops #cloudsecurity #privilegedaccessmanagement #identitygovernance #zerotrust #nhi #mrnhi

Jaksot(392)

#272 - IDAC Sponsor Spotlight - Salto

#272 - IDAC Sponsor Spotlight - Salto

In this sponsored episode, our hosts Jim and Jeff have an in-depth conversation with Gil Hoffer, the Co-Founder and CTO of Salto. They explore Gil's journey into the world of identity, the inception of Salto, and how the company is setting new standards in the field. The discussion delves into the unique features and benefits of Salto's services, as well as how organizations can measure their success with Salto. Listen in to learn about Salto's role in managing configurations and their vision for the future. Connect with Gil: https://www.linkedin.com/in/gilhoffer/ Learn more about Salto: https://www.salto.io/idac Salto on YouTube: https://www.youtube.com/@salto-io Connect with us on LinkedIn: Jim McDonald: https://www.linkedin.com/in/jimmcdonaldpmp/ Jeff Steadman: https://www.linkedin.com/in/jeffsteadman/ Visit the show on the web at idacpodcast.com and follow @IDACPodcast on Twitter.

3 Huhti 202449min

#271 - Identity Management Day 2024 with Jeff Reich of the IDSA

#271 - Identity Management Day 2024 with Jeff Reich of the IDSA

In this episode, hosts Jim McDonald and Jeff Steadman welcome Jeff Reich, Executive Director at the Identity Defined Security Alliance (IDSA), back to the IDAC Podcast for his third appearance. The main topic of discussion is Identity Management Day 2024. They deep dive into what's new with the IDSA, the exciting content to expect on Identity Management Day, and Jeff Reich shares his rapid-fire thoughts on AI, the Change Healthcare Cyberattack, converged identity vs. best of breed, and the top trends for identity tech firms. Connect with Jeff Reich: https://www.linkedin.com/in/jreich/ Learn more about the IDSA: https://www.idsalliance.org/ Identity Management Day 2024: https://www.idsalliance.org/event/identity-management-day-2024/ Connect with us on LinkedIn: Jim McDonald: https://www.linkedin.com/in/jimmcdonaldpmp/ Jeff Steadman: https://www.linkedin.com/in/jeffsteadman/ Visit the show on the web at idacpodcast.com and follow @IDACPodcast on Twitter.

1 Huhti 20241h 1min

#270 - A Public Conversation About Privacy with Hannah Sutor of GitLab and IDPro

#270 - A Public Conversation About Privacy with Hannah Sutor of GitLab and IDPro

In this episode, hosts Jim McDonald and Jeff Steadman sit down with guest Hannah Sutor, a Principal Product Manager at GitLab and IDPro Board Member, for a public conversation about privacy. They explore various topics such as the right to anonymity on the internet, privacy expectations as an employee and a consumer, and the interpretation of privacy policies. Hannah also shares her experience and insights from her role as a "privacy evangelist". Connect with Hannah: https://www.linkedin.com/in/hannah-sutor/ Safeguarding Identity and Privacy: Fundamental Human Rights in the Digital Age - https://idpro.org/safeguarding-identity-and-privacy-fundamental-human-rights-in-the-digital-age/ Learn more about IDPro: https://idpro.org/ Connect with us on LinkedIn: Jim McDonald: https://www.linkedin.com/in/jimmcdonaldpmp/ Jeff Steadman: https://www.linkedin.com/in/jeffsteadman/ Visit the show on the web at idacpodcast.com and follow @IDACPodcast on Twitter.

25 Maalis 20241h 3min

#269 - IDAC Sponsor Spotlight - Zilla Security

#269 - IDAC Sponsor Spotlight - Zilla Security

This episode of the Identity at the Center podcast, a Sponsor Spotlight, is fully sponsored by Zilla Security. In this episode, hosts Jim McDonald and Jeff Steadman sit down with Deepak Taneja, CEO & Co-founder of Zilla Security. The trio discuss a variety of topics including how Zilla Security differentiates itself in the crowded IAM market, the role of Robotic Process Automation (RPA) in the identity lifecycle, and the various personas within an organization that would use Zilla. Deepak also shares some insights about the onboarding process for new Zilla clients and what the future holds for Zilla Security. Connect with Deepak: https://www.linkedin.com/in/tanejadeepak/ Learn more about Zilla Security: https://zillasecurity.com/ Connect with us on LinkedIn: Jim McDonald: https://www.linkedin.com/in/jimmcdonaldpmp/ Jeff Steadman: https://www.linkedin.com/in/jeffsteadman/ Visit the show on the web at idacpodcast.com and follow @IDACPodcast on X/Twitter.

20 Maalis 202455min

#268 - Identiverse 2024 Preview with Andi Hindle

#268 - Identiverse 2024 Preview with Andi Hindle

In this episode, hosts Jim McDonald and Jeff Steadman welcome back Andi Hindle, Conference Chair for Identiverse. The trio dives into an in-depth discussion about the planning and unique aspects of the Identiverse conference. The conversation explores whether Identiverse is a Digital Identity conference or an IAM conference, and how these terms intersect. Andi also shares details about an upcoming Identiverse online seminar and elaborates on a wide array of non-traditional IAM topics covered at the conference. From Identity Standards to the role of IDPro, this episode provides a comprehensive look into what's in store at Identiverse 2024. Connect with Andi: https://www.linkedin.com/in/ahindle Identiverse Webinar Content: https://identiverse.com/idv24/content-resources/ LinkedIn Article “Who should be in charge of IAM? And what's the role of the CISO?” by Martin Kuppinger: https://www.linkedin.com/pulse/who-should-charge-iam-whats-role-ciso-martin-kuppinger-vpncc/?trackingId=94hCoE7ifcjDrxv93V72lw%3D%3D Identiverse 2024: As an IDAC listener, you can register with 25% off by using code IDV24-IDAC25 at https://events.identiverse.com/identiverse2024/register?code=IDV24-IDAC25 Connect with us on LinkedIn: Jim McDonald: https://www.linkedin.com/in/jimmcdonaldpmp/ Jeff Steadman: https://www.linkedin.com/in/jeffsteadman/ Visit the show on the web at idacpodcast.com and follow @IDACPodcast on Twitter.

18 Maalis 202459min

#267 - PAM & IGA with Paul Mezzera

#267 - PAM & IGA with Paul Mezzera

In this episode, hosts Jim McDonald and Jeff Steadman welcome back Paul Mezzera. Paul, who last joined us in November of 2022, takes us through what has been happening in his world since then. The conversation delves into the rapidly evolving field of Privileged Access Management (PAM), where Paul unpacks the driving forces behind these changes and shares his predictions for the future of PAM. Paul shares his extensive experience with Identity Governance and Administration (IGA), including his time at Saviynt, and offers his thoughts on the current state of the IGA market. He also shares his experiences and challenges while working in Identity and Access Management at UC Davis. To wrap up, Paul gives us a peek into what's coming next for him.Connect with Paul: https://www.linkedin.com/in/paulmezzera/The Least Privilege Fallacy or How I Learned to Stop Worrying and Love Zero Standing Privilege (Weave Identity Blog Article): https://weaveidentity.com/blog/2024/01/10/the-least-privilege-fallacy-or-how-i-learned-to-stop-worrying-and-love-zero-standing-privilege/Identiverse 2024: As an IDAC listener, you can register with 25% off by using code IDV24-IDAC25 at https://events.identiverse.com/identiverse2024/register?code=IDV24-IDAC25Attending Identity Week in Europe, America, or Asia? Use our discount code IDAC30 for 30% off your registration fee! Learn more at: Europe: https://www.terrapinn.com/exhibition/identity-week/ America: https://www.terrapinn.com/exhibition/identity-week-america Asia: https://www.terrapinn.com/exhibition/identity-week-asia/Connect with us on LinkedIn:Jim McDonald: https://www.linkedin.com/in/jimmcdonaldpmp/Jeff Steadman: https://www.linkedin.com/in/jeffsteadman/Visit the show on the web at idacpodcast.com and follow @IDACPodcast on Twitter.

15 Maalis 20241h 10min

#266 - Identity Wallets with Nick Mothershaw of The Open Identity Exchange

#266 - Identity Wallets with Nick Mothershaw of The Open Identity Exchange

In this episode, hosts Jim McDonald and Jeff Steadman engage in a fascinating conversation with guest Nick Mothershaw, Chief Identity Strategist at Open Identity Exchange (OIX). They delve deep into topics such as the concept and functionality of digital wallets, the role of governments in issuing these wallets, and the exciting future of smart and roaming wallets. They also discuss the importance of biometrics in wallet functionality. This engaging discussion provides valuable insights into the evolving landscape of identity security. Connect with Nick: https://www.linkedin.com/in/nick-mothershaw-2150436/ Learn more about the Open Identity Exchange: https://openidentityexchange.org/ Governments and Digital Wallets - An OIX Whitepaper: https://openidentityexchange.org/networks/87/item.html?id=706 Identiverse 2024: As an IDAC listener, you can register with 25% off by using code IDV24-IDAC25 at https://events.identiverse.com/identiverse2024/register?code=IDV24-IDAC25 Attending Identity Week in Europe, America, or Asia? Use our discount code IDAC30 for 30% off your registration fee! Learn more at: Europe: https://www.terrapinn.com/exhibition/identity-week/ America: https://www.terrapinn.com/exhibition/identity-week-america Asia: https://www.terrapinn.com/exhibition/identity-week-asia/ Connect with us on LinkedIn: Jim McDonald: https://www.linkedin.com/in/jimmcdonaldpmp/ Jeff Steadman: https://www.linkedin.com/in/jeffsteadman/ Visit the show on the web at idacpodcast.com and follow @IDACPodcast on Twitter.

11 Maalis 20241h 2min

#265 - IDAC Sponsor Spotlight - Veza

#265 - IDAC Sponsor Spotlight - Veza

In this Sponsor Spotlight episode, hosts Jim McDonald and Jeff Steadman are joined by Rich Dandliker, Chief Strategist at Veza, for an in-depth discussion on Veza's unique approach to identity security. They discuss Veza's market success, their 'anti-convergence' strategy, the significance of a reputable customer base, and the importance of a data-first approach to identity management. Dandliker also provides deeper insights into Veza's Intelligent Access. Don't miss this episode for a comprehensive understanding of Veza's innovative solutions in the IAM market. Connect with Rich: https://www.linkedin.com/in/rich-dandliker-591381/ Learn more about Veza: https://veza.com//?utm_campaign=IdentityAtTheCenterPodcast&utm_medium=website&utm_source=thirdparty&utm_content=link Veza Blog - Lessons from the breach: Microsoft and Midnight Blizzard: https://veza.com/blog/identity-security-lessons-from-midnight-blizzards-breach-of-microsoft/?utm_campaign=IdentityAtTheCenterPodcast&utm_medium=website&utm_source=thirdparty&utm_content=link Connect with us on LinkedIn: Jim McDonald: https://www.linkedin.com/in/jimmcdonaldpmp/ Jeff Steadman: https://www.linkedin.com/in/jeffsteadman/ Visit the show on the web at idacpodcast.com and follow @IDACPodcast on Twitter.

6 Maalis 202455min