This is the identity at the center podcast.
This is a show that talks about identity and access management
and making sure you know who has access to what?
Let's get started. Welcome to the identity of the
center podcast I'm Jeff and that's Jim.
Hey Jim hey Jeff. How's it going pretty.
Good yourself, good. I've got a Confession to make so
or lunch? Yeah.
For lunch today, had buffalo cauliflower and I liked it
Buffalo college. So is that just cauliflower with
like wing sauce on it basically? Well, there was a breading shell
and it was quite wonderful. And, you know, I mean, if I ever
did become a vegan, that would definitely be either.
Use it everyday for every meal. You know, we have a restaurant
around here that does bang bang, cauliflower, which is Basically
the same thing. It's like lightly breaded
cauliflower with basically wing sauce on it, but I didn't have
that for lunch. I had a deconstructed chicken
pot, pie, courtesy of my wife and the leftovers that we had
from last night, which was absolutely fantastic.
Yeah, well, my meal want to show that you care about you.
If anybody's out there is vegan or playing to go vegan, you can
do it in an unhealthy fashion. If you'd like, yeah, you can
deep fry. Anything is what?
I've what I've come to understand.
You know, the deep-fried, Snickers.
Hers Oreos, deep fried green. Beans are really good actually.
So yeah, you can make anything you want as healthy, or as
unhealthy as you want, we're recording on hump day.
So you have to find some way to kind of get over the hump.
And that was it for me. Well, not only is it a hump day?
It's, you know towards the end of the year I'm planning on
hitting on vacation, hopefully, sometimes towards the end of
next week. It's going to be our last show
of the year or for the podcast itself.
So You know, hopefully, we leave on a good note here, I'm sure we
will. We had some, some great episodes
throughout the year and this will be.
This will be it for us in 2020 and will see you guys again in
2021. But before we get too far along,
because I don't think anyone wants to hear about our lunch
habits and our culinary desires. Why don't we talk a little bit
about privileged? Access management, are you cool
with that if that fits into the theme of this being an?
I am podcast so sure. Well you know we try so to help
us with that conversation. We do Have a guess we've got
Katie mccroskey, she's the director of Knowledge Management
and training at psychotic. Welcome to the show.
Katie, thank you for having me. What did you have for lunch?
I had a breakfast sandwich actually sausage or bacon.
Bacon American cheese, not chatter, of course.
Yeah. All right, I guess you could
stick around, I can eat anytime of day.
So with with, with our lunch out of the way, why don't we talk
about your background? Katie before we get into some
some Sexy. Pam talk.
Maybe we can talk through what your background is and you I am
space. How did you get into?
I am? Is it something that you chose
or did it choose you? I am chose me actually I call
it. The Luck of the Irish.
I stumbled into it. I'm actually an MBA by trade.
I applied to join a small psychotic startup almost 12
years ago at the time we were actually A focused on helping
organizations build software. So there was an agile focus and
a Consulting practice. We did have secret server as a
product and a few other products.
But at that time it was more of an Ops tool.
Interestingly enough secret server in some of our other
products were born from our own needs and as the product
capability is matured and the organization changed became more
and more of a focus for identity and access management.
And for me being an MBA I joined psychotic not knowing what a
server was. So I really needed to teach
myself and understand the market and all the different new tech
terms and Concepts. I was learning and being
introduced to working at a security software company.
So yes, I very much stumbled into identity and access.
That, that story is almost hard to believe because Katie we
Interacted with you on on a couple of calls and you're very
technical now, very capable and I just assume that you're
installing servers when you were like six years old, or some
things but interesting, my, you know, when I first heard about
psychotic and found out, they had a product called Secret
Service. Like, oh, that's so funny.
I used to work with a product called secret server and it was
awesome. Well, it turned out, it was the
same product and You know, I was using it to manage Windows
service accounts, way back in the day.
I couldn't give you an exact year.
But yeah, that's how that that's really from that, that product
which was, you know, price try just for like a, you know, a
specific use case. It's really become kind of a
Enterprise, Pam solution, not any kind of commercial for
psychotic, but that just was my own personal experience with
secret server. So, anyway, Katie one of The
things that I thought we could, maybe kind of talk about today
is more or less of like a privileged access management 101
for those of those of our listeners who are, you know, not
steeped in privileged access management, maybe start off with
kind of some of the bread-and-butter use cases like
shared account management, service accounts session
monitoring and you know session elevations.
So maybe kind of talk us through.
From the basic bread and butter 101 stuff for privileged access
management. Sure.
I think a lot of it often starts with vaulting, right?
Just kind of a secure place to store and then of course,
delegate access ought to access privileged access.
I think traditionally, folks, look at the infrastructure, you
look at local administrative privileges domain privileges
shared accounts, service accounts.
Any type of database networking infrastructure accounts that
they want for their controls on now, it doesn't always have to
be very complex things. Sometimes I preach about simple,
security steps. I can exponentially increase in
organization's overall security posture.
So for example, a password, right?
Having a long password. So 50 characters, 100
characters, completely random and rotating that password every
Week every day, every hour, things like that are really the
core use cases of privileged access management.
Now, once you start to get into, you know, more security driven,
initiatives, or on the flip side, more audit and compliance
initiatives, that's where things like monitoring video.
Monitoring key logging proxy. Jump box, jump server type of
Technologies. And then if you are on the audit
and compliance, that's where reporting and analytics and
those types of details really are important.
So just a few of those core use cases and core components that
organizations look to when they think about privileged access
management. You know, I often work with
clients who are at a fairly basic level of privileged access
management and one of the recommendations that I like to
make like you can do this right away is not having
administrators have like their main user account and do made
administrator so that if they do get They do fumble, their
password and kind of a phishing attack or something that that
person doesn't get their domain admin account.
So then the question becomes now that I've got two accounts, I've
got my Jim McDonald account, Jim McDonald admin account.
My question for you would be, does it make sense to use my
privileged access management tool to manage that domain
admin? Jim McDonald account?
Absolutely. Yes.
And that's where, you know, Dated privileges come in.
They should be just on time. They should be need to have on
specific tasks relevant to an individual's role.
And like you said, you know, these accounts are targets for
hackers and sometimes things happen and they do get
compromised. And that's where you need robust
security controls in place that can help, you know, stop that
breed. Shut that bridge down prevent
any type of lateral movements from that bridge.
Isolate any type of monitoring that can be done for friends, I
can Alice's and things like that.
That is really where the benefit and the criticality of Pam
tools, come and play. Yeah, I mean I feel the same
way. I also think like if you think
about privileged access management for me, the bread and
butter is about human beings, not knowing passwords, right?
So that the system knows, the passwords are vaulted, they get
changed behind the scenes and people.
People don't go home and have the password.
Exactly. That's very important.
And I often describe it, as if a human knows, the password is
probably not a safe password or a good password.
Yeah. Right.
I mean, you know what human could remember, 32 character,
random digit password, so, that's a good point as well, you
know? I'm thinking about some of the
newer use cases that I'm seeing, you know, BC have come up over
the past few years and what the role of privileged access
management would be in. So what I'm specifically
thinking about is like Cloud infrastructure and platform as a
service. So AWS, Microsoft Azure things
like that. I'm also the about devops and,
you know, automation through Bots, for rolling out
infrastructure and they often have hard-coded passwords and
then iot use cases. So, I'm kind of wondering, are
you seeing a lot of that as well?
Kind of All into the privileged, access management facing.
Is that the right? Is privileged access management,
the right place to kind of handle, those use cases.
Absolutely. I think more and more
organizations are looking at different areas or different
aspects of privilege. And looking to, you know,
privileged access management organizations or vendors to help
them solve those new challenges that are emerging with things
like iot and devops and the explosion of cloud adoption I
think You that is familiar with these AWS and Azure or whatever
flavor of infrastructure as a service, you know, you prefer.
These environments have very, very granular types of
permissions. And you know what?
I often have experienced talking to organizations is, it's just
too much. They often don't have a good way
of approaching it. It's, you know, that idea of,
you know, too much complexity. I firmly believe in usable
security and complexity being the enemy.
Of security. You guys are familiar with that,
Bruce schneier idea, but again, I think, you know, more and more
organizations are changing how they Define privilege and it's
absolutely including some of these cloud devops and and
non-human types of accounts like Robotics iot and another types
of accounts that we see. And there's so much to learn
when it comes to privileged access management and a lot of
these newer use cases, you know, you can spend you know, almost
all your time. Figuring out what's next and how
to tackle some of these new challenges, I'm curious because
what you mentioned earlier that you know you didn't really know
a search media was going into this.
And now here you are, you know, you know an expert on Pam and
privileged access management those sorts of things, right?
And you're responsible for Knowledge Management and
training with psychotic, how do you go about?
Well, first of all, how did you get into that?
Type of rule, is that something that you start off with or was
it something that you kind of accumulated?
A as a as a responsibility as you went through that kotik, it
very similarly to my you know, experience in.
I am I stumbled into the trainer role for years and years I was
doing different types of roles at psychotic whether it was
sales or marketing or Channel and as we would hire I would
always help train and teach people things because as one of
the Employees at psychotic. I had to kind of teach myself
these Concepts and understand what was going on from a
technical perspective. And so I think I really focused
on taking these technical complex topics and simplifying
them and it made it a natural fit for me to then transition
into the trainer role. And as we grew, it became
abundantly clear that we needed a dedicated person that was
going to help with. With the massive amount of
growth that psychotic is experienced.
So yeah, I really just kind of fell into it, so it would be a
twenty20 conversation without mention of pandemic and covid
and things like that. How has, how has the pandemic
impacted the way that either you deliver or think about, you
know, training for four different concepts that are out
there prior to the pandemic, all the training I would do on most
of the training, I would do was in person.
So whether that was, you know, in-house, our staff training,
whether it was new hires or just start our weekly training,
Cadence that we pull off. It was always in person.
I also would attend a lot of partner events and conferences
and things like that to help educate and evangelize on
privileged access management and those days are on pause.
So there's no more days of showing up in person.
Everything is now done digitally.
So, we are very much focused on webinars and podcasts and video
enabled. Many learning enablement.
And just, you know, different forms of Education and Training
other than the live in person. Because, you know, right now,
that's not safe, but I'm hopeful that sooner or later, we will be
able to re-establish in-person training because I do see value
in having that face-to-face. I think, you know, some things
are just easier to Understand when you're all in a room
together and as an educator, I feel a closer connection with
the students when I can see the look in their eyes.
And, you know, read their facial expressions to really understand
our they comprehending. What I'm saying or do I need to
use, you know, different way of explaining or, you know, Draw
Something on the Whiteboard or whatever the case may be.
Yeah, there's no substitute for kind of like the hallway
conversations and, you know, the site side stuff that kind of
takes place right in between sessions, things like that.
I feel the same way about that, what's been, the hardest thing
or challenge that you've had to overcome kind of adopting or
adapting? I should say into this, new, new
model, with remote delivery, I think scalability, I mean,
everyone's online. Now, I'm sure everyone has
experienced some sort of resource constraints.
And so really just setting up our program transferring,
everything we would do in person face-to-face.
Digital environment and then empowering that program to scale
that has also been a challenge. You know, that kind of gives a
global organization cybersecurity threats are
Global. So we're always thinking about,
you know, our customers, and partners in the media or in a
pack, or last time wherever it is that, you know, we're helping
folks so. So I'm sure you have some pretty
good stories, around different training sessions, may be, that
you've conducted orbit at least been a part of any time, feel
free to protect the names of the LT and or Innocent.
But do you have, you know, what was kind of like the best
training Story You've Got and maybe what's one?
That would be. Let's call it less than ideal.
So this is actually pretty crazy story if you're ready for this
one. So I was privileged enough to
deliver a training session at the US Embassy in London.
And I was working with a partner.
We were presenting in the basement of the US Embassy and
we were talking Insider threat and I was literally in the
middle of my presentation standing out talking showing
slides, engaging with it, the group and the power went out
only we were in the basement, so there's no windows and at first,
I wasn't quite sure if it was the power that went out.
You know, God forbid if it was like terrorist attack or I
didn't, I didn't know what had happened at the US Embassy, but
I knew that all of a sudden I was presenting and then split
seconds later. I was in the dark and we were
all in the dark and everyone just kind of froze.
And no one said a thing for a few seconds and it was probably
only three or four or five seconds.
It was very, very short if and then the power kick back on and
we all just kind of acknowledge that we were still there and we
didn't really know what happened and we We weren't going to ask
what happened, but we kind of put aside the training and just
kind of talked and moved onto the coffee phase.
And yeah it was it was a really interesting session so you went
from from from Village access management to an episode of
Homeland and exactly what exactly
We got to figure out Jim, how we can get to, you know, some some
International location and and do something on those lines
because I feel got a little of a James Bond, kind of themed that.
It's so DC. I feel like, I've been very
blessed. I have luckily been invited to
lots of embassies here in DC. And, of course, when I travel
abroad, I usually get the invited as well.
It's a, it's a, it's a DC thing, I'm telling, you are the
Beltway, right? So if if I am, you know, Part of
an Enterprise. I am program somewhere, and I'm
running either Pam, or maybe just even, I am General as part
of a program at my organization. What are some tips that I could
use to develop my own, either in-house training or some ideas.
You might have to help kind of bring along parts of my
organization that maybe aren't as you know, tech savvy when it
comes to I am or even Pam specifically.
So I think, you know, security training and Weekly identity and
access management training for all levels and all shades of
grey when it comes to technical capabilities is so important.
And in my opinion, is a milestone of maturity within the
program because all people need to be educated on why why you
don't click the link. Why you don't open the
attachment, right? Why you need a long and complex
password? Why we're asking you to change
your password every 90 days or 45 days.
Days or whatever. The case might be based on the
organization and then again, as you scale up to the more
complex, technical use cases and audiences.
Again, they need to be part of the process.
They need to have buy-in and in my experience, especially, you
know, with some of the tools and capabilities that we work with.
It's not a barrier because we're providing a lot of Automation
and hopefully we're taking a lot of manual processes off.
Plate once they kind of understand from a security
perspective of why that's so important.
And why you know, the organization is asking them to
do X Y or Z people buy into it and you know, I did a training
for what I call the math team which is really our controller
and our accountant and our billing people I call them the
math team. So I was doing a training for
them. This might have been here to
ago, but I started talking about you.
No, the nature of breaches and how these threats, you know,
play out and some of the tools and how hackers hack and people
are so interested in that they asked me to come back, they
asked if they could have another training session just to talk
more and to learn more about, you know what the iconic does
and what I do and you know, what's going on in the industry.
And so I think people are genuinely interested and they're
curious and so, you know, simplifying training, that's
very important, but having that all inclusive approach, For all
your different areas of the business and your different
shades of grey when it comes to technical audiences and your
different areas and aspects of privilege and identity are very
important. Does that make sense?
Guys make science to makes a lot of sense, your KD, I think
there's probably a lot of our listeners out there like hearing
you and thinking man, what a cool job Katie has and I'd like
to do something like that. So I'm wondering, you know,
obviously Lee, there's many paths to get to the end but do
you have any advice for for someone who might be interested
in doing what you do? Don't be shy.
Be proactive. I think that's, you know, one of
the most important parts is you have to, you know, take action
to get into this industry. I've seen lots and lots of
people start like me where they get in the door in a completely
different role. So maybe they come.
Is a tech support person or maybe they come in as a sales
person, or a marketing person, or a developer, you know,
whatever the case may be and then just through natural
education and evolution their position changes.
And you know, they have the ability to do something
different and focus on cyber security.
So I would say, you know, show up Reach Out connect on
LinkedIn. If there's a local group that
you want to, you know aisaka or some of the other industry
groups I think are so important. I'm sure lots of over holding
digital events when Global pandemic whole thing going on.
But I think there's lots of ways to just kind of force yourself
into the community and be proactive about it.
Yeah, I feel so fortunate that I've ended up in this industry.
I think it's such a cool industry and I know when I've
been attending, I am conferences.
When we still had in-person conferences, you know, 15 years
ago. Look left and look right and
more than likely people on both sides, you were were men.
And now I'm seeing many more women enter this industry which
I think is a very positive development but wondering you
know what advice you might have. For women who are in, I am or
are looking to get into. I am to kind of make that move.
Well, what kind of advice might you have for them?
Confidence is Is key, do not let the men in the room intimidate.
You it is very often that I am. The only woman in the room and
some women are not comfortable with that.
And I think it's a mean there's the old adage, right?
That the magic happens when you step outside your comfort zone.
But I truly believe that in some ways I think on some level you
just have to fake it until you really are comfortable with it.
And it's also important to be on top of your game.
So I think, you know, part of the reason why I have such a
depth and breadth of knowledge is because I've forced myself to
develop this, I always want to be able to answer a question and
it's okay to not have an answer, right.
But I pride myself on having a very few questions that I cannot
answer. Yeah, and I can vouch for you.
Kind of speaking with confidence and I think that's important.
Whoever you are like to go in there when you speak with
confidence. I think that people are more
likely to agree with what you say and I always say it's like
it's like sharks can smell blood in the water.
You don't sound confident? What?
You have to say whether it's true or not.
People are going to think that maybe it's not true.
I'm also wondering, you know. Okay.
Did you have Mentors in your career either, you know, formal
mentors or just people in formerly mentored you.
And I'm wondering how that that helped you in terms of building
your career, this is a little cheesy and very personal but my
mom has always been my mentor. So, for years and years and
years, she was a very Savvy businesswoman, she was a
trendsetter within her own industry.
So she was one of the first women Eamon hired into the
financial management program at GE, she was one of two and she
was just a very driven Savvy educated business woman and I
think I've always strived to have her same sort of business
success. And again, I just kind of got
lucky and stumbled into Tech and cyber security and identity and
access management. Didn't I don't think I'll ever
do anything else. I think I have found my passion
and my career choice. This is it this is it this is
where we're going, you know, the confidence thing I think is
interesting for me, confidence comes from knowing subject
matter and you know then come from other things like being
able to articulate etcetera. Would you would you agree with
that approach? Or do you think that there's a
different way that people can approach kind of building that
confidence if they don't necessarily have it?
I think it's absolutely about, you know, building that and
developing that through education and just knowing your
stuff. But I also think especially for
women their newer to this industry, there's some sort of
fake it until you got it. That has to happen.
It's in most circumstances. Anyways, just because of the
male-dominated industry that is Tech.
And is really you know, cyber security and identity and access
well in still inside. Secret.
I think everybody gets to some degree is Faking it until it
gets up. So I think that's good stuff.
I know we're kind of getting here towards the end of the
topic but what I wanted to talk through here with you is some
predictions, maybe that you might have in the privileged
access management space for 21. Is there anything that that you
think is going to be kind of something that you want to throw
out there, as hey, this is coming in 2021 and folks should
be aware About it or at least be thinking about, you know, how to
approach it. I think, you know, some of the
things we've touched on during this call and my I think
prediction for 2021 is that the definition of privileged access
management is going to change. It's no longer going to be that
traditional infrastructure since of Pam.
I think it's going to be cloud and devops and iot and you know,
all these other types of Privilege in areas of privilege.
And I think that that is really going to be, you know, under a
magnifying glass as the pandemic, right?
Because the digital transformation is forced, you
know, people are no longer in the office.
I don't think people will ever go back to the office, the way
they were. And so I think that traditional
Pam infrastructure security is going to be less and less, you
know, of a priority and more and more people are going to To be
thinking about these different aspects and arrogance, a
privilege. And it's interesting.
So I have a couple items on that.
Cutthroat, you rapid-fire format here for 21, and I'm glad you
brought up the definition change.
I'm going to put you on the spot here because this ties right in
nicely. And there's my question will
Social logins be more widely considered privileged accounts?
Yes. Anything that shared should be a
privileged account and has visibility for the corporate
social media. Absolutely, that's something
that I don't see considered very often right now.
I think the traditional approach is, yeah, of course, server
accounts and shared accounts on things like that.
But when I asked how social logins are being managed, it's
usually kind of like, uh, and it really kind of thought about
that. I kind of feel like closely
related to that are accounts that maybe are managed by a
group like accounting to log into their Bank of America
portal or something. I'm using that as an example.
But you know, maybe five people In the accounting department,
login to a third-party web application.
They kind of share that password.
That's one of the probably the most dangerous passwords in the
organization. HR systems, accounting systems
Financial systems, even LMS systems.
Like what I manage there's an abundance of intellectual
property in our LMS. There's so many areas of risk.
It's just that in most senses of privileged access management,
you know, It's and folks like us, we're only talking to the
Ops and the infrastructure in the security.
Folks were not talking to the other areas of the business and
helping them Define and understand what risks exist
there. And what areas are privileged
they actually have. Because I think there's a lot
there and we're going to see it more and more.
Yeah, you're right. It comes down to risk, right?
I mean, the risk is there, it might not be the most
straightforward account to manage, but that doesn't mean
that you shouldn't be doing. Think about it.
How about vaults? I feel like those are fairly
traditional at this point, almost kind of a commodity
amongst, you know, the the vendors in this space.
Are we going to see more advanced functions being adopted
things like session recording application, password
management, devops Integrations, you know, for whatever it may be
things like that. Do you see more adoption of
that, or do you think that there are still a lot of companies
that maybe don't have? Have the basics of privileged
access management place and that will still see kind of vaulting
as the first or most predominant step in 2021, you know, I think
there's a good mix of both. I do think there's a lot of
organizations out there that are still using sticky notes and
Excel spreadsheets and do need a vault, I think and I could
literally probably talk about this for like 10 minutes.
So I will try not to go off on a tangent but everyone needs.
A vault, my hundred year old grandpa needs involved.
Children need a vault. Everyone has a past.
Last word problem, everyone has a digital identity nowadays.
I mean, if you think about literally children that are
logging in to their school using Chromebooks and they have
different passwords for their different school systems and and
everything is digital. Now all of those need to be
password protected and all of those should be unique, strong
passwords that should be in the vault.
So I think there's lots and lots of use for Vaulting.
But I also think that more and more organizations have kind of
check that checkbox. And now they're starting to
realize that there are other areas of privilege.
They need to address because of that risk that we just
mentioned. Where do you see artificial?
Intelligence intersecting with some of the use cases that are
traditionally privileged access management, like vaulting or
session recording or you know analytics those sorts of things.
Do you see AI or machine learning?
Taking a step forward in the Pam space.
I think they have to, I think those types of Technologies are
going to be critical for the vendors, in our space to
embrace, because the adversaries, and the hackers are
absolutely going to embrace these Technologies.
And especially when it comes to like, AI stuff.
It's very, very scary to me for a threat.
That doesn't get you the first time to learn, why it didn't get
Get you and to get you the second time.
And so for things like that, also as Security Professionals
and as vendors in this space need to be aware of that need to
be thinking about that. And using those exact same tools
and tricks to defend after list is something that has, you know,
been the topic du jour. It seems like for the last
couple of years, and there seems to be another Focus around
trying to become password list at least in an Enterprise
situation. How do you think this affects
Access management. I called, can I say this?
I call bullshit. I call, I call malarkey.
I do not think that we are ever truly going to get to a password
list State. And a great example is the other
day, I was logging into my Verizon app on my phone because
I wanted to pay my Verizon bill and the action method that I
have set up is facial recognition on the app and it
wasn't working. So I needed the password, I had
to pay my bill and so I had to log into my Vault and get my
password and authenticate the old school way and there's
always going to be that need when you know MFA or SSO or
whatever, type of authentication people are using you know,
doesn't work or even you know basic other tasks like restoring
from backups, right? You're going to need the
password. I think there's, you know,
circumstances for not using passwords but I also think that
it's never going to completely just my two cents.
What's the next Frontier for privileged access management?
I think it's what we've kind of touched on which is this area of
privilege, that is expanding and evolving these Cloud assets.
These different areas of privilege, iot non-human and
Counts robotics I think you know it's very scary when people ring
doorbell, cameras, get hacked every seems like almost every
single day. I watched, you know, the evening
national news and they have some story about this device or that
device or you know what you need to do to better secure yourself
from this cyber security threat. So I think, you know, all of
these areas of privilege are going Continue to be more and
more relevant, not only in a business environment, but also,
you know, in a consumer and you know, end-user at whatever you
want to call it non-technical way as well.
Yeah, I think I think it was back, right?
That definition evolving and you know this as definitions evolved
for privileged access. The scope will most likely have
Hall with that, right? What's included as part of that
and then making sure that you're taking the right steps to secure
those keys to the castle. So, Well, I certainly appreciate
the conversation and I know that we're kind of coming up here on
time before we close things out for the year.
Are there any, you know, final words of wisdom that you want to
share with the group Katie, um, get your shot, don't be scared,
don't be scared to do your part to help us shut down the
pandemic. Exactly.
But more importantly, you know, change your password, if you can
do one thing, In 2021 that will help keep your digital identity
secure. It is definitely make sure you
change your password at the start of the new year.
That's always a good best practice and then put that in a
vault and make sure that you're using a different password for
as many sites as you can no daisy chain.
Having different passwords and having strong passwords and not
even have to remember that is a big Advantage for folks.
So definitely agree with that. Jim is there anything that you'd
like to toss out there? Before we let these fine folks
go for the year? Well, a few things, so personal
that was the most practical advice.
I think any, including you, and I have give any one of our
guests. I've given what cages said about
the password, Changing. I mean New Year, like, that's a
great practice to get into, but the other thing I was thinking,
is I very much feel like I would have been great as a writer on
Seinfeld because my observations are about, you know, nothing
partner there about like the smaller things.
So Jack, you always say keys to the castle.
I always say keys to the kingdom and I'm wondering Katie, which
of us is, right? Is a key step.
Cast of piece of the Kingdom, but isn't the castle?
The kingdom. I don't know.
I'm starting to worry keys to the city or something keys to
the Galaxy. I just want to throw out there.
Just remember, who is editing this podcast?
I'm just gonna throw that out there.
Okay, what's your answer? Katie keys to the castle that
was, that was not peer pressure or any type of blackmail or
extortion at all for editing. Versus Jeff is right, okay?
So, the last thing I just wanted to say is I hope everybody and
gets to have a little bit of a break here at the end of the
year. Comes back with their batteries
recharged for. For me personally, 2020 was
busier than most years while we weren't doing as much travel.
Not nearly as much trouble. Our project load was increased,
and I think it's just that, you know, It's probably a natural
progression that information security and therefore I am is
becoming more and more on the front burner of it.
Budgets and organizations are needing help to, you know,
improve their security posture, improve their management of who
gets access to what. So I'm not hoping that 2021
necessarily slows down on that front but I would like to be
able to take a few Vacations, I guess if you will.
So hopefully everybody has an opportunity to kind of recharge
and blasted the 2021. And then also, you know,
constantly looking to communicate with our listeners
and anybody who's following the podcast, please connect on
LinkedIn, you know. Share your ideas for what you
like hearing about, even what you don't want to hear about any
more. Stations for guests for future
podcasts, or open all that. But definitely, please send
LinkedIn connections of unless the network.
Yeah, definitely. This is a show, you know, for
the People by the people. And we want to make sure that
the topics were covering our what's interesting out there.
So if you've got ideas suggestions feedback criticism
whatever maybe send it all our way and you know, we're happy to
take it and you know improve and get better out bad at this and
hopefully may you continue to make the show grow and get
better topics and or more interesting topic.
You know, over time and folks like that.
So I think that's a good way to end it.
You know, I think I'll be glad to see 20/20 kind of in the
rearview mirror and start start fresh again in 21.
I hope that everyone enjoys the holidays again will be taking a
few weeks break here and we back in, you know, early mid January
thing with with another round of identity and access management
talk. So with that happy Holidays,
happy New Year and we'll talk with you all next year.
You've been listening to the identity at the center podcast,
if you like what you heard, don't forget to subscribe and
visit us on the web at identity at the center.com.
You've been listening to the identity at the center podcast,
if you like what you heard, don't forget to subscribe and
visit us on the web at identity at the center.com.