#382 - Sponsor Spotlight - HYPR

#382 - Sponsor Spotlight - HYPR

This episode is sponsored by HYPR. Visit hypr.com/idac to learn more.

In this episode from Authenticate 2025, Jim McDonald and Jeff Steadman are joined by Bojan Simic, Co-Founder and CEO of HYPR, for a sponsored discussion on the evolving landscape of identity and security.

Bojan shares his journey from software engineer to cybersecurity leader and dives into the core mission of HYPR: providing fast, consistent, and secure identity controls that complement existing investments. The conversation explores the major themes from the conference, including the push for passkey adoption at scale and the challenge of securely authenticating AI agents.

A key focus of the discussion is the concept of "Know Your Employee" (KYE) in a continuous manner, a critical strategy for today's remote and hybrid workforces. Bojan explains how the old paradigm of one-time verification is failing, especially in the face of sophisticated, AI-powered social engineering attacks like those used by Scattered Spider. They discuss the issue of "identity sprawl" across multiple IDPs and why consolidation isn't always the answer. Instead, Bojan advocates for a flexible, best-of-breed approach that provides a consistent authentication experience and leverages existing security tools.


Connect with Bojan: https://www.linkedin.com/in/bojansimic/

Learn more about HYPR: https://www.hypr.com/idac


Connect with us on LinkedIn:

Jim McDonald: https://www.linkedin.com/in/jimmcdonaldpmp/

Jeff Steadman: https://www.linkedin.com/in/jeffsteadman/

Visit the show on the web at idacpodcast.com


Chapter Timestamps:

00:00 - Introduction at Authenticate 2025

00:23 - Sponsored Episode Welcome: Bojan Simic, CEO of HYPR

01:11 - How Bojan Simic Got into Identity and Cybersecurity

02:10 - The Elevator Pitch for HYPR

04:03 - The Buzz at Authenticate 2025: Passkeys and Securing AI Agents

05:29 - The Trend of Continuous "Know Your Employee" (KYE)

07:33 - Is Your MFA Program Enough Anymore?

09:44 - Hackers Don't Break In, They Log In: The Scattered Spider Threat

11:19 - How AI is Scaling Social Engineering Attacks Globally

13:08 - When a Breach Happens, Who's on the Hook? IT, Security, or HR?

16:23 - What is the Right Solution for Identity Practitioners?

17:05 - The Critical Role of Internal Marketing for Technology Adoption

22:27 - The Problem with Identity Sprawl and the Fallacy of IDP Consolidation

25:47 - When is it Time to Move On From Your Existing Identity Tools?

28:16 - The Role of Document-Based Identity Verification in the Enterprise

32:31 - What Makes HYPR's Approach Unique?

35:33 - How Do You Measure the Success of an Identity Solution?

36:39 - HYPR's Philosophy: Never Leave a User Stranded

39:00 - Authentication as a Tier Zero, Always-On Capability

40:05 - Is Identity Part of Your Disaster Recovery Plan?

41:36 - From the Ring to the C-Suite: Bojan's Past as a Competitive Boxer

47:03 - How to Learn More About HYPR


Keywords:

IDAC, Identity at the Center, Jeff Steadman, Jim McDonald, Bojan Simic, HYPR, Passkeys, Know Your Employee, KYE, Continuous Identity, Identity Verification, Authenticate 2025, Phishing Resistant, Social Engineering, Scattered Spider, AI Security, Identity Sprawl, Passwordless Authentication, FIDO, MFA, IDP Consolidation, Zero Trust, Cybersecurity, IAM, Identity and Access Management, Enterprise Security

Jaksot(392)

Identity at the Center #88 - Identity Management Day with Julie & Kelvin

Identity at the Center #88 - Identity Management Day with Julie & Kelvin

Jim and Jeff talk with Julie Smith, Executive Director, Identity Defined Security Alliance, and Kelvin Coleman, Executive Director National Cyber Security Alliance, about Identity Management Day, their organizations, and what is next for IAM. Connect with Julie on LinkedIn: https://www.linkedin.com/in/juliaesmith/ Connect with Kelvin on LinkedIn: https://www.linkedin.com/in/kelvin-coleman/ Identity Management Day 2021: www.identitymanagementday.org National Cyber Security Alliance: https://staysafeonline.org/ Connect with Jim and Jeff on LinkedIn here: Jim McDonald: https://www.linkedin.com/in/jimmcdonaldpmp/ Jeff Steadman: https://www.linkedin.com/in/jeffsteadman/ Visit the show at www.IdentityAtTheCenter.comand follow @IDACPodcast on Twitter.

12 Huhti 202143min

Identity at the Center #87 - IAM Workforce Planning with Ken Myers

Identity at the Center #87 - IAM Workforce Planning with Ken Myers

Jim and Jeff talk with Ken Myers who is pursuing a doctorate that is focused on developing an IAM competency model. We talk about his research that includes how to hire, train, and retain IAM professionals. Connect with Ken on LinkedIn: https://www.linkedin.com/in/idmken Ken's Github Research: https://idmken.github.io/ More on ICAM: https://www.cisa.gov/safecom/icam-resources NIST NICE: NICE Framework Resource Center | NIST Awesome-IAM GitHub: https://github.com/kdeldycke/awesome-iam Identity Management Day 2021: www.identitymanagementday.org Identiverse 2021: https://identiverse.com/ Connect with Jim and Jeff on LinkedIn here: Jim McDonald: https://www.linkedin.com/in/jimmcdonaldpmp/ Jeff Steadman: https://www.linkedin.com/in/jeffsteadman/ Visit the show at www.IdentityAtTheCenter.comand follow @IDACPodcast on Twitter.

5 Huhti 202151min

Identity at the Center #86 - IAM and the Business with Bryan and Pierce

Identity at the Center #86 - IAM and the Business with Bryan and Pierce

Jim and Jeff talk with Bryan Macleod, a Global Head of Identity & Access Management, and Pierce Chakraborty, a fellow colleague with Protiviti's Digital Identity practice about how to engage and partner with the business and some of the challenges that come up as part of an IAM Program. Connect with Bryan on LinkedIn: https://www.linkedin.com/in/bryanmacleod/ Connect with Pierce on LinkedIn: https://www.linkedin.com/in/pierce-c-61aa57116/ Identity Management Day 2021: www.identitymanagementday.org Identiverse 2021: https://identiverse.com/ Connect with Jim and Jeff on LinkedIn here: Jim McDonald: https://www.linkedin.com/in/jimmcdonaldpmp/ Jeff Steadman: https://www.linkedin.com/in/jeffsteadman/ Visit the show at www.IdentityAtTheCenter.comand follow @IDACPodcast on Twitter.

29 Maalis 202140min

Identity at the Center #85 - Privacy & Consent with Katie Stevens

Identity at the Center #85 - Privacy & Consent with Katie Stevens

Jim and Jeff talk with Katie Stevens, Director with Protiviti's Security & Privacy practice about privacy, consent, data residency, and how to start thinking about these in the context of IAM. Connect with Katie on LinkedIn: https://www.linkedin.com/in/katie-stevens-7357433/ Identity Management Day 2021: www.identitymanagementday.org Identiverse 2021: https://identiverse.com/ Upcoming Protiviti Privacy Webinars: https://event.on24.com/eventRegistration/EventLobbyServlet?target=reg20.jsp&referrer=https%3A%2F%2Fwcc.on24.com%2F&eventid=2923973&sessionid=1&key=8ABE3AD1B4B4471026683EA5BC713C10&regTag=1341729&V2=false&sourcepage=register Connect with Jim and Jeff on LinkedIn here: Jim McDonald: https://www.linkedin.com/in/jimmcdonaldpmp/ Jeff Steadman: https://www.linkedin.com/in/jeffsteadman/ Visit the show at www.IdentityAtTheCenter.comand follow @IDACPodcast on Twitter.

22 Maalis 202143min

Identity at the Center #84 - Solorigate Recap with Robb Reck

Identity at the Center #84 - Solorigate Recap with Robb Reck

Jim and Jeff talk with Robb Reck, Chief Information Security Officer at Ping Identity, about the Solar Winds breach aka Solorigate, Zero Trust, and Identity Management Day 2021. Connect with Robb on LinkedIn here: https://www.linkedin.com/in/robbreck/ Robb's Colorado = Security Podcast: https://www.colorado-security.com/ Identity Management Day 2021: www.identitymanagementday.org Identiverse 2021: https://identiverse.com/ Connect with Jim and Jeff on LinkedIn here: Jim McDonald: https://www.linkedin.com/in/jimmcdonaldpmp/ Jeff Steadman: https://www.linkedin.com/in/jeffsteadman/ Visit the show at www.IdentityAtTheCenter.comand follow @IDACPodcast on Twitter.

15 Maalis 202144min

Identity at the Center #83 - Penetration Testing with Krissy Safi

Identity at the Center #83 - Penetration Testing with Krissy Safi

Jim and Jeff talk with Krissy Safi, Managing Director and Global Practice Leader for Attack & Penetration Testing at Protiviti, about penetration testing - what it is and why IAM is important to it. Connect with Krissy here: https://www.linkedin.com/in/krissysafi/ Resources to learn more about hacking Pen Testing: https://HackerHighSchool.org https://OWASP.org https://www.reddit.com/r/HowToHack/ Identity Management Day 2021: www.identitymanagementday.org Identiverse 2021: https://identiverse.com/ Connect with Jim and Jeff on LinkedIn here: Jim McDonald: https://www.linkedin.com/in/jimmcdonaldpmp/ Jeff Steadman: https://www.linkedin.com/in/jeffsteadman/ Visit the show at www.IdentityAtTheCenter.comand follow @IDACPodcast on Twitter.

8 Maalis 202149min

Identity at the Center #82 - Organizational Change Management with Carlos Rodriguez

Identity at the Center #82 - Organizational Change Management with Carlos Rodriguez

Jim and Jeff talk with Carlos Rodriguez, Director IT Security & Risk at Citizens Property Insurance, about organizational change management, bringing stakeholders to the table, and Agile versus Waterfall project methodologies. Connect with Carlos on LinkedIn here: https://www.linkedin.com/in/carlosrodrigueza/ Managing Organizational change in IAM and IS Programs: https://multifactor-authentication.enterprisesecuritymag.com/cxoinsight/how-to-build-a-successful-identity-and-access-management-iam-program-nid-2225-cid-52.html Secure Application Development: When Life is a Sprint and not a Marathon: https://www.linkedin.com/pulse/secure-application-development-when-life-sprint-rodriguez-cissp-cism Connect with Jim and Jeff on LinkedIn here: Jim McDonald: https://www.linkedin.com/in/jimmcdonaldpmp/ Jeff Steadman: https://www.linkedin.com/in/jeffsteadman/ Visit the show at www.IdentityAtTheCenter.com and follow @IDACPodcast on Twitter.

1 Maalis 202140min

Identity at the Center #81 - RBAC with Jim and Jeff

Identity at the Center #81 - RBAC with Jim and Jeff

Jim and Jeff talk about what Role Based Access Control is and ideas on how to tackle these complicated projects at an organization. Connect with Jim and Jeff on LinkedIn here: Jim McDonald: https://www.linkedin.com/in/jimmcdonaldpmp/ Jeff Steadman: https://www.linkedin.com/in/jeffsteadman/ Visit the show at www.IdentityAtTheCenter.comand follow @IDACPodcast on Twitter.

22 Helmi 202149min