Careers

Diversity, Equity & Inclusion

Experience

Innovation

Interactive Maps

Locations

About

Pages

Meet our team of innovators
Ask us how we do it

Professionals

Insights

Services

Home | Thompson Hine LLP

Atlanta

Chicago

Cincinnati

Cleveland

Columbus

Dayton

Los Angeles

Minneapolis

New York

Washington, D.C.

core/separator

Date: August 30, 2022 Time: 8:00 a.m. - 11:30 a.m. ET Location: Thompson Hine LLP, 127 Public Square, 3900 Key Center, Cleveland, OH 44114

core/paragraph

The concept of a privileged identity used to be clear. Now attackers use lesser credentials to get inside and move laterally to gain access to higher privileged credentials. They also attack users of relevance such as company Executives that we have not traditionally thought of as privileged users. It begs the question: “Should we adjust our definition of “privileged identity?” In this series we will look at this question and many other identity-centric challenges.

contentpilot/introduction

How do we make Identity our core control and use it as our new perimeter? What are the common traits of successful IAM implementations that provide both security and business enablement?

Security Controls Covered: IGA, SSO, MFA, Risk-based Access,Password-less Authentication, PIM/PAM, UEBA

In 2021 our members told us that IAM controls are CRITICAL to their security architectures moving forward. As companies digitally transform and push all of their applications and data out to both employees and customers, stronger validation of WHO is accessing those apps and data becomes our core security control point. Verifying not just the identity of the user but also of the device is becoming common. Attackers continue to be adept at getting credentials and making their way onto our systems.Once access is achieved our adversaries can move laterally to get to the most valuable data and assets. In this series we will dive into the latest and greatest methods of using identity and access controls to manage risks more effectively.

Identity as a Core Control for Security

Services