Identity and access management. Welcome to the identity of the
center podcast. I'm Jeff.
And that's Jim. Hey, Jim.
Hey. Jeff.
How's it going? It's good.
It's Friday. And Friday night was a good
thing Mother's Day. And it's looked at looking like
this. Crazy weather throughout the
u.s. There's a snowstorm, hit the
Northeast. I think.
I think we'll be okay here in Chicago, but it's been kind of
rainy the last few days. Yeah.
I'm the southeast. Look like it.
Son. Seasonably cool.
Usually it's the time of year where it starts getting.
I'm sure you'd be uncomfortable to sit down with normally right
now. Low humidity and I mean this is
this is great living. Whether yeah, the high heat and
humidity is something that really are my Is My Kryptonite
and I think I think you know that well, I know the humidity
is, I mean, you know, I might as well share their story with
everybody Jeff Perry. Yeah.
I know. I always tell it which is the
time. We went to Orlando in January
for Lando. It's humid.
It was In the 80s, I think but humidity is always the thing
that I really hate about Florida and really kind of any human
location. Pretty sure it was 74 degrees
away man. It was like 100 degrees and it
was like a thousand percent humidity.
And it was not not my favorite type of whether that's for sure.
That's very so, it's Friday. And today is May 8th.
Yesterday though was May 7th. And that was world s word day.
How did you celebrate? I mean, you know, it's like
Christmas for me. I just I celebrate the password
but up a password tree. No, I just reminded myself that
that quote from From Office Space.
I celebrate his entire collection.
I celebrate all of my password. I mean, you know, I think that
I'm just gonna sound so original here, but passwords are crap.
They really should have been eliminated long ago because now
the internet is such an integral part of our everyday life and
her. So ingrained in how we
authenticate over the internet. They're almost barely imagine a
world without passwords yet. That's where we need to head.
Yeah. Password is not modern
authentication. That's for sure.
You know, once you get a hold of a password, it's really just a
matter of time. Even if it's encrypted, right,
you're running. If you gotta encrypted hash
somewhere, you're running rainbow tables and once that has
been cracked, once it's cracked everywhere.
And that's you know, why? The guidance is always have a
different password for each website, but The reality of the
world, right? That's very hard to do.
Most people pick, you know, one, two or three different passwords
and they just start adding numbers to it.
The becomes very easy to solve for.
I like the concept of moving towards, you know, password
list, but I don't think we're quite there yet though.
It is gaining in popularity. I've had a couple of passwords
that I reuse. So one of the, one of the things
that I read a long time ago that I thought was, Good advice.
Was that because I don't use a password safe to have kind of a
framework for how you use password, think so, or really
kind of critical applications that I want to make.
Sure, never get cracked. I either ensure that one.
They have multi factor or two that I'm using a unique path.
In other words. They invest the Life Energy and
making sure I have a unique password for that.
Site, I like that. The Life Energy.
Yeah. Well, I've had I think some of
my energy to have like, you know extra passwords that you don't
have elsewhere and to remember them.
And then there are sites where it's like, okay, I am not going
to store my credit cards with this, you know, online Commerce
site. I'm probably going to buy
something or here once or twice. I'm, they're making me create an
account. So I'm just going to reuse that
same password of used million time.
And so I do that. And one thing I've noticed is
that Google Chrome now has a feature to kind of Shame you.
And it's I think it's a really cool feature which is like, oh,
hey boss, you're you know, this pastor is already on the dark
web. Holy moly.
Wow, because I need to go make a change.
Yeah. Yeah, like, okay.
Maybe I should stop using that one from now on.
But yeah, you know, that's that's kind of been my Approach.
Is that either ensure the multi-factor or I'm using a
fresh new password. He really taking a risk based
approach, then to ask for it is it is a risk-based approach and
partially the laziness because they know if I were to use a
password safe, I could be doing something much more secure by I
find that there's a certain level of inconvenience involved
with doing that especially when you have many devices.
And those devices span different ecosystems.
We've got like, you know, some apple stuff, and you grab some
Microsoft stuff, and some Google stuff.
And you want to just be able to log into something.
I'm making excuses, specially for somebody to use in this
industry, but it kind of shows. Chose the problem, even somebody
who understands all the risks of doing things, exactly.
The way I do them. I do them my way.
Anyhow, you accepted the risks. I fall on the other side of it.
I use a password manager. I use LastPass.
And, you know, I wouldn't say I've always done it, but since
I've become more involved with security, I've tried to go more
random passwords and the struggle of, you know, cross
devices and different. Since between Apple and
Microsoft IOS and Android, I'm someone who is constantly
jumping around between all of those services.
So, I've settled on LastPass as my password manager, because
they have an app, basically for everything.
And that lets me really kind of tame the Beast a little bit.
So I use, you know, randomized passwords and, you know, all the
different complexity things and I try and I been trying to make
a more conscious effort of having a different password for
each website. If I have it as I come across
it, you know, I've been going to the password change process to
kind of get it synced up and that so far has worked pretty
well for me. You know, my my workflow
stretches across Windows machines back Mac OS and iOS or
phone and tablet. And I found LastPass has made it
a lot easier for me. So obviously we don't have
sponsors on this show. Otherwise, we'd have a better
dream situation as Ron mentioned.
Weak. But, you know, it's something
that I've been using for years and it's free at least the
version, you know that I'm using and it works.
Well, so now we work in the company of under 100 employees
and so we don't have managed devices, but I can imagine that,
you know, if you were working in a corporation, you could have a
number of passwords for the corporation and personal may, or
may not be allowed to install last.
Passing the corporate devices. Yeah.
Yeah, that's why you've got to make sure that I mean, you know,
use MFA even on that your I'm using, you know, a password by
itself that is not used anywhere else just facility for that.
I mean, it is a lot of work and I think it covers up the problem
which is passwords just inherently are insecure and I'm
excited about password lists, you know, future, whether you
know, how often or how quickly that comes along, you got things
like Windows. Hello, and you know that akator
apps and so forth. I Recently, there was an article
that at Microsoft's ignite, 2019, which is about six months
ago. There were 100 million people
that were using password, password list of logins every
month and that includes things like Windows.
Hello. It's gonna cater app, you know?
Push-based and then different security type.
He's like, etcetera and they've seen as of a couple days ago
that's grown by 50% already. So now 150 million people are
using Capital. So I think it's great.
You know, I think it's a step in the right direction, but I'll be
happy when we can finally say. Yeah, the password truly is
dead. But I have a feeling that's
going to be your carrying something else.
That's your password. Right?
It's a lot of companies are focusing on your phone as kind
of, like, your secondary off, or even maybe even primary
authentication in some cases, right?
And having a session of tiger over who was with earlier this
week and we're talking about, you know, the whole idea behind
like why? Don't companies or why don't
more folks invest in, you know, hard tokens.
And part of it is that it seems like something is like there.
It's hot. It's the now, but the next thing
is right around the corner. And so, how much, how many
dollars would you invest in something?
Like that? Knowing is probably going to be
obsoleted in a couple of years. Yeah, I can imagine, you know,
going back to my operations days having to manage RSA tokens and,
you know, having to deal with the logistics of Hardware Keys,
is a challenge, right? I mean, you've got to get them
out to people, people lose them. They break, you know, they're
not configured, right? And accomplish the things going
wrong. Now, that was admitted really 15
years ago, roughly. So now, the process has gotten a
lot better right now. It's now it's more of a
app-based thing on your phone, but I think it'll be interesting
to see how this space of all is because there's also other
things to right. There Li keyboard analysis,
you're typing Cadence, right? Can be a way to biometrically
authenticate, which I find interesting.
I'm trying to remember a typing. DNA was one of the examples that
we've looked at in the past as brand of evaluate space, but I'm
waiting for, you know, natural language.
You know, when is the computer from Star Trek going to be there
and be able Bill natural language queries of the negate
based on voice patterns and prints Pollock.
Good stuff has kind of routine, you know, absolutely anything we
can do to get closer to. What did they have in Star Trek,
where it was a room where it was like a virtual reality Beyond
Holodeck. I mean, that is like, that's
everything right there. I don't think I've ever heard.
Well, that's why I think that's kind of where VR is right now
and You know, I've I've dabbled around with it here and there
and it is very good. But your it's still for the most
part. Unless you've got a really good
set up a tethered experience. So we are stuck in a room or you
have a wire something connected to you.
And there's there's Wireless versions of it out there too.
But you're still very limited by the space.
I have seen that there are some like, you know, like laser tag
type style games right that take place in giant warehouses where
it's a VR experience, but man, I'd hate to be running, you
know. Headfirst and correction tool
wall or something like that, right?
Exactly boundaries, but I think you know, it's the beginnings of
it. It's like anything else at some
point. It'll miniaturize and get
cheaper and become standard. Microsoft been trying to make
hololens a thing for years and hasn't caught on the consumer
space. But this is all things that we
are PR is going to to go the route of 3D TV.
Well, I don't know. I know a lot of people were like
with 3D TV was hot. A lot of I don't care about
that. I don't want that.
I thought it was the coolest thing ever.
I think it's very cool. But a lot of people it makes a
lot of people sick. Yeah, they it's not good enough
to the Quality, where the experience in the Fidelity, can
trick the mines for all people. The other thing too, is the
discomfort people who wear glasses, have to put something
over there, you know, over that to be able to see things.
It's and I used to wear glasses, but right before I had, you
know, Like done in that. Struggle is real.
Trust me, you know, putting a VR mask over your glasses is not
the most comfortable thing in the world and there's a lot of
different things that kind of go into the comfort of it.
Who knows, maybe maybe Holograms will become, you know, the thing
at some point when you have first are working together, you
were really into VR useful. A lot of money on it.
What were you saying with that? Now?
Are you doing much? I'm staring at it right now.
It's in a box underneath my, my computer desk.
Here. It's kind of a hassle for me to
kind of pull out and put together.
The technology definitely works but it is like I mentioned have
a tethered experience and I really haven't been using it.
It's probably time for me to say goodbye to it.
But for those wondering, I have the eight of the HTC Vive
there's Oculus, which is owned by Facebook.
Now, they have another, you know, product out there as well.
That's pretty good. But yeah, I find myself not
using it and it's not for Anything other than I guess,
General laziness. Let's put it that way.
Yeah, that's what I mean. It has to be worth the time
investment for you. Otherwise, you're not going to
do it. Yeah.
I mean there's there's a lot to set up for that one.
I think the newer versions are a lot better where you don't have
to put these base station ups. And you know, you don't have
wires come over the place. I think Oculus is has gotten
that part, right? The experience is a lot better
and you know, who knows from a virtual workspace perspective,
you know, that might be A method to look at maybe.
Maybe your mask your VR mask will become your device.
Right? Right.
Or yeah. So, with the vrms word, did they
have any kind of facial recognition or daddy Mac?
Yeah, I think the one that would make the most sense would
probably be some sort of retinal scan, because you've got your
eyes with in this enclosed area. You know, that would probably
Drive the cost up quite a bit. So, you know, as the prices come
down might make sense to when you put your mask on it, you
know, it does a nice can and authenticate you that way.
It'd be tough to do. Facial recognition because mask
is covering half your face at least at this point, based on
current technology. So, I think it's the same
problem that a lot of people are having wearing masks out right
now because of covid. You know, face ID, doesn't work
because you're you got a mask covering up and Apple has
recognized as a problem and, you know, supposedly in the next iOS
Point update that they're releasing, you know, they'll
have a solution for that which will find find interesting to
see how they're going to keep the security.
But also, you know, make it still user friendly.
So I think that's that's something to kind of keep an eye
on punished and ha ha. Yeah, right.
So you keep this on the password K conversation.
And you know, I think that they would multi-factor.
Here's the way I look at multi factor is yes.
Usually one of those factors is a password, which is going to
complete. But then the second factor is
usually something out of band or some biometric.
And while we know a lot of the out of Baron methods can be
cracked, I take from many, many use cases this to still try up.
In other words. It creates an open for her role.
That going ahead and crack the is too much effort for what
you're feeling. Now.
I think of you are National Secrets or potentially even like
financial data. You know, SMS text is a second
factor is not strong enough. However, if you're protecting,
you know, their ability to upload to Facebook or something,
it probably is The problem with Facebook.
This one came to my name's Facebook has become an identity
provider that people under so many different things that it
kind of concerns me that, you know, game.
So active. Somebody's Facebook isn't about
just doing their pictures are putting up a, you know, stupid
Post-its. What can you then Branch off to
do when you have hijacked a Facebook account?
So find out the best. Example, but if you thought of
something else, save more trivial, you're having a second
factor is an SMS text or an authenticator app name of
authenticator app, like, for me and you and probably most people
listening to this. We don't think of authenticator
app to his company not far and but I keep the person I use them
in my world who is a non computer person is my dad.
I just imagine trying to explain to him how to set up Google
Authenticator. Yep, I get I get a panic attack,
even thinking about trying to have a conversation with him.
Yeah, there is definitely a hurdle to get to gain entry be
able to do that easily and I always pick on Apple as a good
example of how they've kind of common eyes and Fa.
For example, you know iOS specifically has MFA built into
the OS itself. It's very easy to Use and
they've kind of people are used to.
Okay. I'm going to get a code summer
right on my phone or whatever it is.
Whether it's SMS or a popup on the device and Android does
something similar as well and other devices as well.
But or other voices, I should say, but yeah, trying to explain
here. I want you to load the OCTA app,
right? And then register the app to app
with systems. It's easy for you and I because
we get it. But yeah, I can see how, you
know, people struggle with that. I've been trying to get my wife
to use LastPass, you know, for years because Constantly, you
know, having her log in a different machines, you know,
what's my Microsoft s approval? I don't know what's your
password and then, you know, she's sitting there kind of
thinking about it. Like, well, why don't you use a
password manager? And she's like, well, why don't
we just use the same password for everything?
All right, so she knows that much, I think, as far as you
know, me educating her, she knows that's bad and, you know,
when she spots something that's weird at her company, you know,
she'll tell me about, I'm like, oh, you wouldn't believe this.
So, I've kind of turned her into a little bit of password or
identity. Kind of, you know, evangelist,
but worry, it's not easy right to spotting things that are
weird companies. And obviously, I think the thing
that I see every day. I want to send you money or this
time scanners like oh my God believe.
Right. The IRS is wants to refund your
money and you need to pay them back and Apple gift cards or
Google. Now.
Those are those are obviously legitimate because you know, the
IRS accepts a gift cards has been.
Yeah, of course, I mean, what would take a couple gift cards
because hey at some point there might be working for more than
US currency. That's another, that's another
conversation. So some of them are ones,
especially And when they were persistent, like, you know, this
is the final warning, your Apple ID is about to be disabled got
like seven of these now maybe and you think, no, you know,
anything do you open them? And by the way, when you open an
email, a lot of times has been reached email email or have a
tracking bit is what you usually call it.
Other words. It's like some image that wanted
to need one. Solar to be an image.
It's like it's a unique URL that says, you know, this particular
email is open by this particular user.
Now. They know they have somebody on
the other end who potentially always, at least billable enough
to open their email and now they've got someone, they're
going to keep sending those spam emails.
Do, some of them are looking great.
I mean, they take but you just have to be diligent.
Agent to follow certain rules, not click on links that are in
those emails. I mean if you just simply from
PayPal, be redirected to your PayPal app or go directly to
paypal.com., Don't trust the email, the link in the email and
usually, you know, if you really know you're doing you can tell
if it's a fake URL, but it's just better to be pushing
talking about educating. And I think there's a big thing
that companies do is come up with cyber.
Security awareness, training, education, programs to get,
people, especially around phishing attempts, to be able to
spot them and not fall, prey to them.
And then I know a lot of companies are going out and
trying to screw fissuring users and Spearfish.
That's a very intense, very technical particular individual
and trying to convince them that an email from somebody else
within the organization that may be is their boss or somebody
higher up and say, it's directed directly at them and, you know,
versus regular fishing, which is where you can send it to
everybody in the company for fishing is kind of like I see is
like, you know, you're you're just cast on the line and
whatever. B.
B spearfishing, you know, you're going after a Big Tuna.
Right? That's really very specific,
specific thing. You're looking for specific
person. Yeah, usually there's somebody
who's high up in the organization, who would have
access to sensitive data or might have some information in
their email. Those are usually people who can
be correct. Sometimes they go out for system
administrators and system administrators.
You would hope are a little more sophisticated than to fall for
phishing attempt. But I think that obviously, if
you are able to get your hands in there, credential could be
much. More valuable.
Yeah, I'm glad you brought this fishing thing because came
across an article this week and it's it's from Barracuda
networks, and they had commissioned a research Company
by name of census wide. With I've never heard of,
hopefully this isn't any type of fake news or whatever they
surveyed. They went out and surveyed 1,000
different business decision makers across the United
Kingdom. U.s.
France and Germany, so obviously not Global, but enough.
Representation, I think the draw some conclusions and one of the
things that they saw was over half of them. 51 percent had
seen an increase in phishing attacks since this whole
covid-19 and shift to the remote working model took place.
So I think it's definitely a, you know, on the rise, you've
got Bad actors who are trying to take advantage of the situation.
And, you know, part of that is the train that goes along with
it. Over half again, said that their
Workforce wasn't proficient or properly trained in cyber risk
associated with remote working. So, remote working is brand new
for a lot of companies, right? This is not something that
they've had to consider, you know, in the past and now all of
a sudden, you know, within a span of a week, two weeks right
now. They've got most of our courses
working from home. They've had to put in, you know,
very tactical probably processes to kind of keep the business
running. You know, throughout this up and
demek. So I think it highlights some of
the things that maybe people are already seeing or, you know,
should be aware of. But there's always more training
that can be done. But I thought it was interesting
that, you know, over half basically are saying yeah, we're
seeing a rise in fishing because of the whole pandemic and I
would expect that that number will continue to grow.
Because I expect that, you know, most companies, at least big
ones have announced that they're going to extend, you know, work,
From home as a primary method through the, at least the end of
this year, you know, some are already saying, you know, for
summer of next year, you know, full you're out.
So it's something I think that as people in the identity space.
We need to make sure that are communicating to the folks that
we work with colleagues Etc. Right?
To be able to hopefully improve level of security that's out
there and at least just make people aware of hey, you know
what, you may see, you know, an uptick in and phishing attacks.
Yeah, and then a couple things, I mean, you little my radar of
the key things there and I'm going to pick on the
non-security thing for our. So it's the increase and semi at
least semi permanence of work from home.
I've been a proponent of this for a long time.
I've worked from home for a decade and I feel like it's
probably not for everybody and there's definitely some benefit
to everybody being in the same place.
So I'm going to make that statement.
However, from a quality-of-life perspective and the ability for
a company to I think retain employees allowing work from
home. Look what's the average commute
in the United States to and from work.
It's probably more than a half hour each way, right?
It's probably a half hour to an hour.
Each way. People are sending a an hour to
two hours a day. Ten, you know, five to ten hours
a week of their light sitting in their car.
Burning fossil fuels spending money on parking wear and tear
on their car. And and it's just a reduced
quality of life. I think versus the ability to
work from home. Now, every job.
I understand all the caveats. I'm not going to Go through them
all. But to me this up, that could be
a positive development to come out of this is that I think a
lot of companies were afraid to even try it and maybe I've maybe
companies out. There may be some situations or
finding this is very suboptimal. But I bet you there are some
organization or anything or, you know, we could, we could
actually do this. We just save money on
Commercial, Real Estate and improve the lives of our
Hawaii's by you know allowing work from home either more or
all the time. Yeah.
I feel like there's a lot of people who I've been told over
the years. The job that they can't do.
Remotely can absolutely be done remotely.
Yes, the technology is there now.
It is, you know, not something that's, you know, new or Cutting
Edge and you're waiting for other people to take out all the
bugs and wrinkles for it. You know, it's like anything
else that's out there. It's Infrastructure is
configured correctly in your following good hygiene on
security and you know identity management than I feel like the
most most people could probably do some if not all of their work
from home and I'm a big fan of it.
I've worked for companies in the past that did not have work from
home and have slowly, you know, at least when I was there kind
of come to an agreement. Okay, you can work from home,
one Friday a month, right? And It became okay every Friday
right or something along those lines and this has really
thrust. I think that decision-making
back to the Forefront to say look.
What are we? You know, what are we doing
here? I think I think life is a lot
easier when you can do from home, but it is not definitely
not for everybody. Like you mentioned.
I think there is some discipline that needs to be there because
you know, you may have deadlines or there's work that needs to
get done within a certain amount of time and you may have
distractions at home or, you know, there's two Any other
things that might be competing for time, especially right now
with kids at home from school, right?
I can see that being an issue when you're trying to manage
children in the house as well as work responsibilities.
So I think fortune on a companies are recognized that
and kind of working around it, but there is definitely things
to consider just from that side, but I am, I am a huge proponent
of being able to work from home, when it makes sense for all the
reasons you listed. I think that the biggest thing
that I'm seeing since the pandemic started is that people
who maybe even wear work from home folks, traditionally now
have her kids home either because schools have been
canceled or a closed and you know where they might be able to
rely on even you know, other family members watching their
kids or however they had child. Care who seems dried up.
And so now you've got a four-year-old and five-year-old
kids hanging on their parents while they're trying to work.
Also, totally different situation than what I've run
into traditionally with people who are work from home, who
designed their life around, making sure that that doesn't
happen or event. Only happens on, you know, weird
things like snow days or whatever, not thinking, like
it's like the everyday occurrence.
Mercer people that I've been working with, who were working
for other companies, where they work from home.
They've worked out a situation. So say, you know, Mom and Dad
are both room working from home now.
And now the kids are there. They're figuring out some way to
split the working hours, so that there's somebody's watching the
kids and keeping them away. So I saw a really funny video.
The other day was a guy doing a television interview and and one
of his kids boss. through the gears, you know, the mom like
That was good those golden. But yeah, I so I mean and now to
pull it all together. So I think one of the biggest
risks overall with working from home is if you rely on passwords
to get to as your only form of authentication to get the
services, whether they be proud services or to get back into the
internal Network, I mean then it's huge.
Obviously, you've got open to the outside world at those
passwords are weak, because, I think what's happening, is that
companies are now having to open things up in a way.
They haven't in the past, and one of the things I'm going to
put it on in there. We don't like our podcasts to be
a commercial, but it is that being, who's one of our partners
have been male and female that, I think it's either for the
current customers or I'm not sure if anybody can use it.
For anybody where you can essentially start leveraging,
their multi-factor authentication Service for free
to help, secure your remote Workforce during the pandemic.
So I mean, to me that's like if you're in a situation now where
you're humming ha I'm head sleeping at night because, you
know, your, your entry from the outside world is just secured by
password. Look into this, looking to
whether or not this free service is something that That you could
Leverage The you to protect ya. If ya if your work from home, I
don't think you could seriously say that you're, you're, you
know, have the right security for just using password.
I think that that is a no-brainer.
Hey, if you're doing any type of remote work, there needs to be
that second Factor somewhere to make sure you've got the proper
level Purity or, you know, what something that I found
disturbing in that same report and I'll put this report into
the show notes. So that people can find it
wherever they get their podcast. That usually is some sort of
detail page. We also get questions on that.
It'll be in there. 40% of respondents have cut their
cybersecurity budgets. As a cost-saving measure measure
to help tackle. The covid-19 crisis.
So I think that's scary because now you're you know, you've got
more people working from home. And theoretically you're
spending Less on security to cover those people.
Not not a direct one-to-one correlation, but people cutting
cybersecurity has time when there's going to be more
phishing attacks more, you know, everything else that goes along
with with that. I think it's just a terrible
combination. And you know, the other thing I
think that was really interesting was half of them
would consider asks, what would half of the the companies would
consider making Workforce reductions if it meant company,
data protection, could be properly funded.
So they're cutting funding. But the way that they see,
Buying back that funding is by doing reductions in an already
terrible job market because of you know, all the shutdown that
are happening. So I think it's I think it's a
really interesting and you know, unfortunate approach to it.
I think this is a time when security should not be on the
table for cuts, especially if you are doing the work from home
type stuff that is become so prevalent.
Well, I think yeah, I mean we could do it.
In the airline industry, how can you not uncover front?
Turn over every stone. Look for places to God, you
know, they put their businesses in the tank.
At the same time. It just creates a perfect job
for me to talk to you. So bright, you know, you don't
if you do and damned if you don't, I do think a couple of
things because, you know, you've got to expect that this and
done. Was going to end at some point
and that things will shift back to normal.
And one of the things that we saw was that cybersecurity
professionals were in high demand for this habit and you
know, higher than them other field.
And so if you wind up cutting Workforce and on the way funding
Workforce isn't free is not like we're paying you, you know a
thousand dollars a week. Week and then we're going to get
rid of you and it's going to cost us nothing.
There's there's some kind of residual cost people paying, you
know, on a separate offense or thumping, get rid of somebody.
If you have turn around, six months later.
Hire somebody back into that position.
Are you got the cost of recruiting somebody?
I'm being realistic. Just seeing what's going on in
certain industries. They might not have any choice.
So that might be enough to you for a company.
The mountain is better place to eat.
You feeling pain, higher, the price of cyber security.
People are pretty good out on the streets right now.
I don't think there's not many Industries hiring a they were
released the unemployment numbers today and something like
16 percent unemployment in the United States must have great
has been that low or that high since the Great Depression, but
it feels like it's going to be a temporary.
Things are starting to open back up, but I have talked to people
who are extremely worried that I'm not that worried about it,
but other people. I'm sorry.
I'm turning to see restaurants, open up and the Mexican
restaurant. That's been my house.
Was, they had a line outside on Cinco de Mayo.
I think people are ready to get back to things or move.
A lot of people are worried about things.
So I feel like a lot of people, I think, the next we will be
listed in a month or two months. I'm doorbell and see if the
pandemic spikes again. If it doesn't, then maybe a safe
to go out again. To feel like there's different
levels of passion that people are following depending on their
risk tolerance. Yeah, I think everybody's making
a risk-based decisions. And you know, I'm happy staying
at home, letting all the guinea, pigs out.
Figure it out. I'm definitely one of your
guinea pigs definitely. But yeah, I think going back to
the point of, you know, talent. I think there will definitely be
Talent available, but I think security, you know, security has
always been a hot Market. It or positions and for people
looking to get into the space and I don't see that dropping
any time soon because I think if anything right this, this
current situation highlights the need for good security,
especially these as these companies get hit, whether it's
fishing or ransomware, you know, or even just taking in.
Now, a flood of, you know, e-comm customers that weren't
there before because you were a traditional brick and mortar
restaurant. Right, or some other type of
business. I see a lot of a lot of
companies that have now gotten into the consumer.
I am game and have no idea what they're doing, right?
And are figuring out as they go. So I think, I think, you know,
the, the identity space, specifically, than security is
very strong position right now. I don't see that going going
down anytime soon. Right here, advice for somebody
who's just getting into. This industry would be Continue
to do so, it's okay to do. So get some experience in your
watch YouTube videos, check out ID Pro, which is an organization
specifically for identity professionals.
That voice that I'm a member of. They have a good body of
knowledge that's designed for people to get into and start to
learn things. You know, it's not and it's not
just for newbies. It's, you know, for people who
maybe focus on one specific area, but want to brush up on
another area. Maybe you're, you're great on
the identity governance, but you need to bone.
Up on the sonication or offers a right.
I think there's something out there but it's like any other
job. You've got to keep your skills
relevant and current and be able to adapt to the changes that are
that are part of the natural ebb and flow of business.
And as long as you do that, you know, I feel like you'll you'll
have done everything within your power.
To make yourself, marketable, and hireable and relevant to an
organization. Absolutely.
And listen to the podcast. That's a no-brainer.
Jim. I mean, we you know, we should
obviously be the number one source for all have any
information. All right.
Well, I think that's probably a good spot to leave it for this
week. Anything else you want to bring
up Jim before we wrap up? No, I think, you know, just
yeah, shout out to all the mothers out there who know
Mother's Day. We all have one and most mothers
do an amazing job. Abso shout out to all the
mothers, especially identity and access management mother's right
on. So if you Mother's Day everyone
stay healthy and I think with that we'll leave it and we'll
talk to y'all in the next one. You've been listening to the
identity of the center podcast for more episodes of visit
identity at the center.com.