1 00:00:09,700 --> 00:00:13,000 You're listening to the identity of the center podcast, this is 2 00:00:13,000 --> 00:00:15,600 the show that talks about identity and access management 3 00:00:15,700 --> 00:00:18,600 and making sure you know who has access to what let's get 4 00:00:18,600 --> 00:00:25,100 started. Welcome to the identity of the 5 00:00:25,100 --> 00:00:26,400 center podcast. I'm Jeff. 6 00:00:26,400 --> 00:00:29,700 And that's Jim. Hey, Jim hey, Jeff, how are you? 7 00:00:29,700 --> 00:00:31,700 Oh, not so bad yourself. There's a little bit of a delay 8 00:00:31,700 --> 00:00:33,300 there, I think. Oh, I don't know. 9 00:00:34,300 --> 00:00:38,200 But I was going to say, just got back from vacation, so I'm not 10 00:00:38,200 --> 00:00:44,300 100% tune back in, you know, is on vacation at the beach of 11 00:00:44,300 --> 00:00:50,900 rocking the SPF, 50, basically, just short of white paint. 12 00:00:51,600 --> 00:00:54,800 On my skin just to make sure I don't cook in that, you know, 13 00:00:54,800 --> 00:00:57,000 Myrtle Beach sun, which is where I was. 14 00:00:58,000 --> 00:01:01,300 But I saw talking to, you know, our old friend. 15 00:01:01,300 --> 00:01:06,100 So he has part your name apart, my name Jeffrey MacDonald and 16 00:01:07,000 --> 00:01:09,400 he's later skin than me and he's like, Jim. 17 00:01:09,400 --> 00:01:14,700 You're such a rookie SPF 50. Come on, SPF 70 at a minimum. 18 00:01:15,100 --> 00:01:17,300 So there's a rookie numbers you gotta pump those up. 19 00:01:17,800 --> 00:01:20,800 Yeah, there you go. Good movie, quote there, Jeff. 20 00:01:21,300 --> 00:01:22,100 Uh-huh. Yeah. 21 00:01:22,100 --> 00:01:25,900 I'm I'm rather pasty myself. I have like, I have two stages 22 00:01:25,900 --> 00:01:28,100 of tan either. I'm not tan or I'm burned. 23 00:01:28,100 --> 00:01:30,800 There's like nothing in between. Yeah. 24 00:01:30,800 --> 00:01:34,400 What's the skin peels off? There's plenty of untanned skin 25 00:01:34,400 --> 00:01:36,800 below it right? Yeah, exactly. 26 00:01:36,900 --> 00:01:39,900 So I try to, you know, I I try to stay indoors. 27 00:01:40,000 --> 00:01:42,600 I don't like the heat, I don't like the humidity so the beach 28 00:01:42,600 --> 00:01:46,900 is not really my favorite thing unless it is in a more, let's 29 00:01:46,900 --> 00:01:49,900 call temperate climate. I'm not not about the hot sun, 30 00:01:50,000 --> 00:01:53,200 I'll be under the I'll be Under the Umbrella, enjoying the ocean 31 00:01:53,200 --> 00:01:55,800 breeze, and that's where you'll find me while the best part 32 00:01:55,800 --> 00:01:59,300 about the trip to Myrtle Beach was, there's a concert going on, 33 00:01:59,300 --> 00:02:04,100 the Carolina Country Music Fest, a lot of great acts and the ones 34 00:02:04,100 --> 00:02:05,800 that I really wanted to see where I'd night. 35 00:02:05,800 --> 00:02:09,199 So the sum is already down. The breeze has already coming in 36 00:02:09,600 --> 00:02:11,200 it. The concert was pretty much 37 00:02:11,200 --> 00:02:15,100 right on the beach so as fantastic, that's a cool setting 38 00:02:15,100 --> 00:02:17,300 for a concert, I don't think I've ever been to a Beach 39 00:02:17,300 --> 00:02:20,800 concert like a really legit Beach concert right before. 40 00:02:22,800 --> 00:02:25,400 Which is unfortunate but I guess to each their own. 41 00:02:26,400 --> 00:02:32,700 Hey man, I enjoyed it. So, plenty of Bud Light 42 00:02:32,700 --> 00:02:36,400 available. That's not surprising one bit. 43 00:02:38,100 --> 00:02:39,400 They probably sponsored it, right? 44 00:02:40,300 --> 00:02:42,600 I think Coors Light may be sponsor it, because there are a 45 00:02:42,608 --> 00:02:47,300 lot of people on stage, showing Coors Light and you know that 46 00:02:47,700 --> 00:02:49,900 that Denver beer is pretty popular. 47 00:02:50,600 --> 00:02:52,100 Hmm. Well, speaking of Denver, why 48 00:02:52,100 --> 00:02:53,700 don't we get into our main topic today? 49 00:02:53,800 --> 00:02:57,200 She's like laughing at us like how stupid we are as we start to 50 00:02:57,200 --> 00:03:01,100 show off. But we're going to talk about a 51 00:03:01,100 --> 00:03:05,000 about a topic that we've covered before, but it's time for an 52 00:03:05,000 --> 00:03:09,200 update and to help us with that, we've got Julie Smith, she's the 53 00:03:09,200 --> 00:03:11,800 executive director at the identity to find security. 54 00:03:11,800 --> 00:03:13,700 Alliance. Welcome back, Julie. 55 00:03:14,300 --> 00:03:17,500 Thanks Jeff. Jim, it's always a pleasure to 56 00:03:17,500 --> 00:03:20,100 be here with you all so I appreciate it. 57 00:03:20,100 --> 00:03:24,200 Feel The invitation, I got a little hesitancy there. 58 00:03:24,200 --> 00:03:27,700 When you were kind of saying that I and the reason I get that 59 00:03:27,700 --> 00:03:31,400 is because the mysterious way that I introduce our topic. 60 00:03:31,400 --> 00:03:35,000 What we're going to be talking about is the 2022 Trends and 61 00:03:35,000 --> 00:03:37,900 securing digital identities, which is something that we've 62 00:03:37,900 --> 00:03:41,800 actually been doing episodes on this. 63 00:03:41,800 --> 00:03:44,700 I guess this is maybe our second or maybe third time that we kind 64 00:03:44,700 --> 00:03:47,800 of got around this. So the trends report has become 65 00:03:47,800 --> 00:03:50,900 a trend into itself but before we get too far along. 66 00:03:51,100 --> 00:03:52,500 Wrong. I want to make a note. 67 00:03:52,500 --> 00:03:54,400 You are the current record holder for number of 68 00:03:54,408 --> 00:03:57,900 appearances, on, on the podcast, use a zero fifth appearance. 69 00:03:58,300 --> 00:04:03,000 You've been with us since episode 57 and then 88 and then 70 00:04:03,000 --> 00:04:08,800 99 and then 140 and now this should be episode number 152. 71 00:04:09,300 --> 00:04:11,800 I am. And I have to say that I'm a 72 00:04:11,808 --> 00:04:15,600 little bit disappointed so far, and I'm hoping that episode 5 is 73 00:04:15,600 --> 00:04:19,300 the is the is the lucky one? Where we get to finally hear 74 00:04:19,300 --> 00:04:23,400 from Sly, the cat, Has been suspiciously quiet in previous 75 00:04:23,400 --> 00:04:27,100 episodes makes me a little concerned Sly if you're out 76 00:04:27,100 --> 00:04:29,900 there, make a noise. So we know that you're okay and 77 00:04:29,900 --> 00:04:32,700 that you actually exist. I'll just leave it at that. 78 00:04:32,700 --> 00:04:33,600 Julie. How about that? 79 00:04:37,200 --> 00:04:43,200 He does exist and he might he might make an appearance this 80 00:04:43,200 --> 00:04:48,700 time after after five episodes. It's I think it probably is time 81 00:04:48,700 --> 00:04:50,600 but let's hope maybe he doesn't justify. 82 00:04:51,200 --> 00:04:55,000 Despair the audience, but yeah. Thanks for having me. 83 00:04:55,000 --> 00:04:57,100 I appreciate it. And I'm not sure exactly why I 84 00:04:57,100 --> 00:05:01,300 have the honor of being here the most, maybe I maybe I reach out 85 00:05:01,300 --> 00:05:04,800 to you the most or not. Sure exactly why that is, but 86 00:05:05,400 --> 00:05:08,300 happy to have the reigning champion on her. 87 00:05:09,300 --> 00:05:11,900 Well, I'm happy your judges and this is this has been like 88 00:05:11,900 --> 00:05:13,200 definitely a mutual relationship. 89 00:05:13,200 --> 00:05:16,100 We actually got to you and I got to actually meet for the first 90 00:05:16,100 --> 00:05:19,200 time face to face at RSA a few weeks ago, we do the proverbial 91 00:05:19,200 --> 00:05:23,800 fist bump and chatted on the corner outside and inside the W 92 00:05:23,800 --> 00:05:26,400 Hotel there in San Francisco, which is very cool. 93 00:05:27,200 --> 00:05:31,200 But yeah, I think, you know, we Jim and I like to have good 94 00:05:31,200 --> 00:05:32,500 conversations, right? Identity. 95 00:05:32,500 --> 00:05:35,000 And every time you're on, we have a good conversation around 96 00:05:35,000 --> 00:05:37,400 it done and I think that's what we're gonna do today. 97 00:05:37,400 --> 00:05:41,300 So no pressure We had nothing whatsoever, but it was great 98 00:05:41,300 --> 00:05:43,400 meeting. You face to face and Gem, you 99 00:05:43,400 --> 00:05:48,500 were sorely missed last week at RSA, although God only knows 100 00:05:48,500 --> 00:05:50,400 what you might have taken home as apparently. 101 00:05:50,400 --> 00:05:54,500 A lot of people that wear out in San Francisco, last week did so 102 00:05:55,300 --> 00:05:57,400 be thankful that you weren't there and sounds like you were 103 00:05:57,400 --> 00:05:58,900 having a lot more fun and a beach anyway. 104 00:05:58,900 --> 00:06:03,200 So I did enjoy the beach but you know one thing I wanted to ask 105 00:06:03,200 --> 00:06:06,900 you your the other way to look at it is that you're the biggest 106 00:06:06,900 --> 00:06:11,300 repeat offender in. Terms of being on the show maybe 107 00:06:11,300 --> 00:06:13,700 you just for the audience to sake so they don't have to go 108 00:06:13,700 --> 00:06:15,600 back. Jeff did a great job of talking 109 00:06:15,600 --> 00:06:18,200 about all the different episodes you're on but in case they're 110 00:06:18,200 --> 00:06:21,400 not familiar with idea. Say, just kind of give us a 111 00:06:21,700 --> 00:06:24,300 summary elevator pitch. What is idea? 112 00:06:24,300 --> 00:06:28,800 Say, yeah, sure. So the idea say our identity to 113 00:06:28,800 --> 00:06:31,400 find security Alliance, some people even call us. 114 00:06:31,400 --> 00:06:36,600 It's a which always makes me Flinch a little bit but we are a 115 00:06:37,300 --> 00:06:38,900 an organization, a non-profit. Stop it. 116 00:06:38,900 --> 00:06:43,700 I call this a trade Association focused on creating resources 117 00:06:43,700 --> 00:06:47,000 and help organizations reduce the risk of an identity relating 118 00:06:47,000 --> 00:06:49,900 breach. So all of our content is freely 119 00:06:49,900 --> 00:06:52,400 available on our website, it's all vendor-neutral. 120 00:06:53,400 --> 00:06:59,300 We have if you incorporate all of our members, we have over 40 121 00:06:59,700 --> 00:07:05,200 members, who participate, and creating content writing blogs 122 00:07:06,100 --> 00:07:08,200 hosting webinars, or I host the webinars. 123 00:07:08,200 --> 00:07:11,500 They Provide the expert, the expert perspectives. 124 00:07:12,500 --> 00:07:15,200 And so, you know, we're really all about educating 125 00:07:15,600 --> 00:07:18,300 organizations on how they secure their digital identities. 126 00:07:19,700 --> 00:07:23,600 So membership wise, you know, I talked about more than 40 30 of 127 00:07:23,600 --> 00:07:26,900 those our vendor members but we also have membership 128 00:07:26,900 --> 00:07:32,200 opportunities for and practitioners or end end users 129 00:07:32,200 --> 00:07:35,300 if you will, in the form of contributor memberships as well 130 00:07:35,300 --> 00:07:39,400 as corporate memberships. So that's really for individuals 131 00:07:39,400 --> 00:07:42,900 who are out there, living in the trenches, in their security 132 00:07:42,900 --> 00:07:48,200 teams and, you know, trying to drive identity security in their 133 00:07:48,200 --> 00:07:51,700 organizations. And they have an opportunity to 134 00:07:51,700 --> 00:07:54,800 come and network with their peers, learn from an amazing 135 00:07:54,800 --> 00:08:00,400 group of experts. In this space can get CPE 136 00:08:00,400 --> 00:08:06,900 credits towards their cissp certification and and thought 137 00:08:06,900 --> 00:08:08,900 leaders. We have a great platform for 138 00:08:08,900 --> 00:08:13,600 people if they're looking to become a thought leader in the 139 00:08:13,608 --> 00:08:15,700 space as well. So, there's lots of benefits to 140 00:08:15,700 --> 00:08:20,100 being part of the organization and really The primary driver I 141 00:08:20,100 --> 00:08:22,400 think, is to make an impact and give back to the community. 142 00:08:23,400 --> 00:08:25,300 Yeah, I would definitely encourage folks to check out 143 00:08:25,300 --> 00:08:27,300 that contributor membership because I think it is an 144 00:08:27,300 --> 00:08:31,100 opportunity to be part of the identity Community. 145 00:08:31,100 --> 00:08:33,799 I think a lot of people have great ideas out there. 146 00:08:33,799 --> 00:08:37,000 And for the most part, this is how Jim and I contribute is we 147 00:08:37,000 --> 00:08:38,799 do this stupid podcast every week. 148 00:08:39,200 --> 00:08:41,299 Other people like to write blogs other people like to do 149 00:08:41,299 --> 00:08:44,000 webinars, write or speak at conferences or whatever. 150 00:08:44,000 --> 00:08:46,900 Maybe this is another opportunity for people to get 151 00:08:46,900 --> 00:08:51,400 involved in this space and there is plenty of room for people to 152 00:08:51,400 --> 00:08:53,800 give back and contribute. So Very cool. 153 00:08:54,000 --> 00:08:56,200 I think the other thing that that hasn't been mentioned is 154 00:08:56,200 --> 00:08:58,200 identity management day. That's something that got 155 00:08:58,200 --> 00:08:59,400 started. And know, we've had a few 156 00:08:59,400 --> 00:09:01,400 different conversations around that over the years. 157 00:09:01,800 --> 00:09:05,200 I think this was the second annual identity management day 158 00:09:05,200 --> 00:09:08,800 earlier earlier this year, but your organization also kind of 159 00:09:08,800 --> 00:09:11,400 partnered up with it, was at the national cyber security Alliance 160 00:09:11,400 --> 00:09:14,400 as well to it was. Yeah, about that. 161 00:09:15,300 --> 00:09:18,400 Yeah, and yeah. So back to your, my 162 00:09:18,400 --> 00:09:21,100 participation five times on the on the podcast. 163 00:09:21,100 --> 00:09:23,000 So at least two of those where identity management. 164 00:09:23,100 --> 00:09:25,300 Okay. So last April 12th was our 165 00:09:25,300 --> 00:09:28,400 second annual identity management day. 166 00:09:28,900 --> 00:09:31,700 We had a great virtual conference where we had five 167 00:09:31,700 --> 00:09:35,400 sessions and 25, I think speakers talking about all 168 00:09:35,400 --> 00:09:39,200 things identity from you know, how do we prevent identity 169 00:09:39,200 --> 00:09:42,400 related attacks today to what's the future of identity look 170 00:09:42,400 --> 00:09:45,200 like. So that's that is an important 171 00:09:45,200 --> 00:09:49,700 one and I think a couple of those guest spots on your 172 00:09:49,700 --> 00:09:52,500 podcast we're also related to our research which is another 173 00:09:53,200 --> 00:09:55,600 Main component, one of the things we're going to talk about 174 00:09:55,600 --> 00:10:00,400 today but we've we've published now for different research 175 00:10:00,400 --> 00:10:03,600 reports and to your point. Jeff, this will be the second 176 00:10:04,400 --> 00:10:08,000 specific Trends report although we'd kind of over the years 177 00:10:08,000 --> 00:10:11,300 pulled questions from other reports into this one. 178 00:10:11,800 --> 00:10:15,800 With the idea that maybe over time we become the Verizon data 179 00:10:15,800 --> 00:10:20,600 breach investigations report very aspirational obviously but 180 00:10:20,600 --> 00:10:23,600 just that's Focus very specifically. if eclis on 181 00:10:23,600 --> 00:10:27,400 identity related breaches and all things around bringing 182 00:10:27,400 --> 00:10:30,800 identity and security teams together Well the key to 183 00:10:30,800 --> 00:10:32,900 everything is consistency. That's how we've grown to be 184 00:10:32,900 --> 00:10:36,900 this multi-million listener, podcasts over the last several 185 00:10:36,900 --> 00:10:38,100 years. So you definitely being 186 00:10:38,100 --> 00:10:40,800 consistent important part of that you mentioned the future 187 00:10:40,800 --> 00:10:44,000 and let's talk about sort of, you know, I guess the presence 188 00:10:44,000 --> 00:10:46,600 and some of the trends we've seen around this report. 189 00:10:47,000 --> 00:10:50,200 The 2022 Trends is carrying digital identities I guess, 190 00:10:50,200 --> 00:10:52,500 before we start to get into some of the findings. 191 00:10:52,800 --> 00:10:56,200 You mentioned this is the second time that it's come out for 192 00:10:56,200 --> 00:10:58,300 kicking down to fourth wall. Here we're recording this on 193 00:10:58,300 --> 00:11:01,800 Monday, June 20th but this I won't actually go live until 194 00:11:02,000 --> 00:11:03,800 next Monday. By the time I got around to be 195 00:11:03,800 --> 00:11:06,300 able to edit it, but I believe the report comes out. 196 00:11:06,300 --> 00:11:09,800 This Wednesday was a June 20 seconds. 197 00:11:09,800 --> 00:11:12,300 Is that right correct? Yep. 198 00:11:12,300 --> 00:11:17,200 It's it'll put be published on Wednesday the full report. 199 00:11:17,500 --> 00:11:21,900 Hopefully you'll see a number of Articles and different 200 00:11:21,900 --> 00:11:24,400 perspectives on the results of the survey and its research, 201 00:11:24,400 --> 00:11:27,400 right? So the data is what the data is 202 00:11:28,300 --> 00:11:31,900 and we hope that lots of different organizations whether 203 00:11:31,900 --> 00:11:36,800 they're in the media space or member companies or other 204 00:11:36,800 --> 00:11:39,200 organizations who are interested in the data that we're 205 00:11:39,200 --> 00:11:42,600 publishing provide their commentary, their perspectives 206 00:11:42,600 --> 00:11:45,400 on it. Use the data in the report to 207 00:11:45,400 --> 00:11:50,800 support you know product releases and just perspectives 208 00:11:51,300 --> 00:11:53,600 on the on the industry as a whole. 209 00:11:53,600 --> 00:11:57,900 So you know, it's really research that we conduct kind of 210 00:11:57,900 --> 00:12:01,100 keeping a tech keeping tabs on these. the trends and securing 211 00:12:01,100 --> 00:12:04,800 digital identities and and its data that's really available for 212 00:12:04,800 --> 00:12:09,300 interpretation by the broader can So who responds to this? 213 00:12:09,300 --> 00:12:10,900 I guess Ken to kind of level set. 214 00:12:10,900 --> 00:12:13,500 So people know where this data is coming from. 215 00:12:13,500 --> 00:12:16,200 Is it coming from companies as a coming? 216 00:12:16,200 --> 00:12:19,300 From individuals, it coming from both, I guess, what, what sort 217 00:12:19,300 --> 00:12:25,100 of the typical respondent look like, yeah, so it is coming from 218 00:12:25,100 --> 00:12:30,800 individuals inside sort of end user companies across a range of 219 00:12:30,800 --> 00:12:35,800 Industries Financial Services, Healthcare technology employees 220 00:12:35,800 --> 00:12:40,200 over. And so it is really a view into 221 00:12:40,200 --> 00:12:45,000 the Enterprise, its it security and identity professionals. 222 00:12:45,000 --> 00:12:50,900 And so they have responsibility for identity and identity 223 00:12:50,900 --> 00:12:54,800 security in some way shape or form, we had over 500 224 00:12:55,600 --> 00:12:59,600 respondents to the survey. It's actually conducted by an 225 00:12:59,600 --> 00:13:01,200 organization. We've worked with for all of our 226 00:13:01,200 --> 00:13:04,700 research approach called dimensional research and they 227 00:13:05,000 --> 00:13:07,100 that, you know, part of the value that they provide, And as 228 00:13:07,100 --> 00:13:10,900 they do have a group of people that are open to taking these 229 00:13:10,900 --> 00:13:16,200 kinds of surveys. So it's, yeah, it's a good group 230 00:13:16,200 --> 00:13:20,200 and they fill it out wearing their company hats. 231 00:13:20,600 --> 00:13:23,000 And although this year, we did at sneak in a couple of 232 00:13:23,000 --> 00:13:27,000 questions to get their own personal perspectives around, 233 00:13:27,900 --> 00:13:29,700 password security and that kind of thing. 234 00:13:29,700 --> 00:13:33,600 So but otherwise they are speaking on behalf of 235 00:13:34,200 --> 00:13:35,900 practitioner inside an organization. 236 00:13:36,600 --> 00:13:38,900 So I think that is interesting taking that practitioner 237 00:13:38,900 --> 00:13:41,800 response because sometimes, you know, I think in the identity 238 00:13:41,800 --> 00:13:45,000 industry sometimes we kind of see it through our own lens of. 239 00:13:45,000 --> 00:13:48,800 Well, this is the way it should be and you know how we would 240 00:13:48,800 --> 00:13:51,000 want to see it done, but that doesn't always match up with the 241 00:13:51,000 --> 00:13:52,900 real world and I was actually getting done. 242 00:13:52,900 --> 00:13:56,800 So I always liked research like this, that is, you know, taking 243 00:13:56,800 --> 00:14:01,200 real world people and asking them real world questions and 244 00:14:01,200 --> 00:14:02,900 what are the challenges and things are coming out and it 245 00:14:02,900 --> 00:14:06,800 leads me to my next question which is you know, based on Tan 246 00:14:06,800 --> 00:14:08,300 this report that's going to be coming out. 247 00:14:08,300 --> 00:14:11,800 Is there what was the most interesting thing or finding 248 00:14:11,800 --> 00:14:15,100 that you think came out of it? Yeah I think this review this 249 00:14:15,100 --> 00:14:18,400 year's report you we continue to ask the question every year 250 00:14:18,400 --> 00:14:22,700 obviously because it's a trend report about or whether 251 00:14:22,700 --> 00:14:25,400 organization is experience and identity related breach. 252 00:14:25,400 --> 00:14:30,000 And and in this year the number was 84%. 253 00:14:30,100 --> 00:14:33,000 I compared to last year 79 percent of the time frames are a 254 00:14:33,008 --> 00:14:36,500 little bit different this year. We asked have you an experience? 255 00:14:36,600 --> 00:14:40,400 And identity related breach in the last year and the last 256 00:14:40,400 --> 00:14:44,300 report we asked in about a two-year timeframe. 257 00:14:44,300 --> 00:14:48,800 So a little bit of a difference just in terms of the timeframe 258 00:14:49,400 --> 00:14:54,900 but 84% of those organizations over 79 last year and we also 259 00:14:54,900 --> 00:15:02,200 asked could this breach have been prevented or minimized and 260 00:15:02,200 --> 00:15:07,200 we asked specifically about what we would consider some Basic 261 00:15:07,200 --> 00:15:12,400 identity and access management capabilities as well as the 262 00:15:12,700 --> 00:15:18,200 security outcomes that we recommend. 96% said, that that 263 00:15:18,200 --> 00:15:21,800 the breach could have been prevented or minimized and the 264 00:15:21,800 --> 00:15:27,300 leading Contender was MFA. So, you know, had an 265 00:15:27,300 --> 00:15:31,900 organization implemented MFA for all of their users than that. 266 00:15:31,900 --> 00:15:33,400 Breach would have been prevented. 267 00:15:33,400 --> 00:15:35,500 And my face is one of those things we've been talking about 268 00:15:35,600 --> 00:15:39,300 or I think Very long time and has been a recommendation coming 269 00:15:39,300 --> 00:15:44,500 out of the best practices organizations for quite some 270 00:15:44,500 --> 00:15:47,000 time. So if there's just a couple of 271 00:15:47,000 --> 00:15:52,900 things in the report that you'll see that are just the basics and 272 00:15:52,900 --> 00:15:55,000 you know, these breeches that end up being relatively 273 00:15:55,000 --> 00:15:57,300 significant could have been prevented had some of these 274 00:15:57,300 --> 00:16:00,500 Technologies and capabilities been implemented. 275 00:16:01,200 --> 00:16:04,200 Yeah. Want to show that 84% identity 276 00:16:04,200 --> 00:16:09,600 breaches to me that Was an alarming statistic but this 277 00:16:09,600 --> 00:16:12,400 other alarming statistic that I want to point to that was in the 278 00:16:12,400 --> 00:16:14,600 report. What I read that I was like, 279 00:16:14,600 --> 00:16:17,800 there's no, it's pretty obvious. Why this is happening. 280 00:16:17,800 --> 00:16:23,700 So it was 51 percent of organizations typically remove 281 00:16:23,700 --> 00:16:26,200 access for former employee within a day. 282 00:16:26,500 --> 00:16:30,300 But only twenty twenty six percent always do that. 283 00:16:30,300 --> 00:16:33,200 To me, is an alarming statistic, like, are you kidding me? 284 00:16:33,500 --> 00:16:38,200 20% percent of organizations. That they consistently remove 285 00:16:38,200 --> 00:16:43,100 access within a day. That's, that's not even close to 286 00:16:43,100 --> 00:16:45,600 high enough. Now, I have my thoughts on maybe 287 00:16:45,600 --> 00:16:49,200 why that is, but I'd love to hear what your thoughts are and 288 00:16:49,200 --> 00:16:52,900 also, you know, throw it over to Jeff for his comments and you 289 00:16:52,900 --> 00:16:56,300 know, what do you believe? Lisa. 290 00:16:56,300 --> 00:17:00,300 Such a low number in that area. Yeah, I from my perspective, 291 00:17:00,300 --> 00:17:04,000 it's all about automation. We, I know you guys have had 10 292 00:17:04,000 --> 00:17:08,500 Jones on the, on the show. At least once and he talks about 293 00:17:08,500 --> 00:17:15,099 automation just in general is one of the key ways that a lot 294 00:17:15,099 --> 00:17:20,800 of our problems could be solved. But you think about it the 295 00:17:20,800 --> 00:17:25,099 number of applications that and any given employee has access to 296 00:17:25,099 --> 00:17:29,300 on it on a daily basis to do their job if they decide to 297 00:17:29,300 --> 00:17:33,300 leave the organization or they change roles, probably don't 298 00:17:33,300 --> 00:17:38,800 know what applications that That employee has access to much 299 00:17:38,800 --> 00:17:43,100 less, being able to remove permissions from one place and 300 00:17:43,100 --> 00:17:45,000 have it replicate across all the application. 301 00:17:45,000 --> 00:17:48,300 So I think it's just a Time intensive exercise. 302 00:17:48,300 --> 00:17:51,200 Then in a lot of people, a lot of organizations have it 303 00:17:51,200 --> 00:17:53,200 implemented automation to make that easy. 304 00:17:54,200 --> 00:17:55,600 That's my, that's my perspective. 305 00:17:55,800 --> 00:17:57,100 Jeff. What are your thoughts? 306 00:17:58,300 --> 00:18:02,000 I I agree with Julie, I think this is not a situation where 307 00:18:02,000 --> 00:18:03,500 people don't want to do the right things. 308 00:18:03,500 --> 00:18:06,800 I think it's a lack of awareness that even these accounts exist, 309 00:18:08,300 --> 00:18:11,300 you know, removing access from all of the different places that 310 00:18:11,300 --> 00:18:14,500 a person might have access to, in an organization, the large, 311 00:18:14,500 --> 00:18:17,800 the organization, the harder that becomes, the more 312 00:18:17,800 --> 00:18:20,700 decentralized, the organization when it comes to Identity and 313 00:18:20,700 --> 00:18:25,000 access management as either a program or provisioning, 314 00:18:25,000 --> 00:18:27,900 whatever it might be, also May comes much more. 315 00:18:28,100 --> 00:18:30,900 Difficult. I didn't want to get into this, 316 00:18:31,000 --> 00:18:33,900 but now I feel like I have to because this has affected me 317 00:18:33,900 --> 00:18:35,800 literally in the real world today. 318 00:18:36,300 --> 00:18:38,800 If you've been following the show, you know, that I am in the 319 00:18:38,800 --> 00:18:43,800 process of moving across state lines, moving from Chicago, 320 00:18:43,800 --> 00:18:45,500 Illinois area, to North Carolina. 321 00:18:46,000 --> 00:18:48,900 And, of course, anybody who's purchased a home knows that 322 00:18:48,900 --> 00:18:52,500 you're working with lawyers and mortgage companies and Realtors, 323 00:18:52,500 --> 00:18:56,100 and a whole bunch of things. I was supposed to close on my 324 00:18:56,100 --> 00:19:00,100 house, this Wednesday. The 20 seconds that is not 325 00:19:00,100 --> 00:19:05,400 happening because of an identity and access management Problem by 326 00:19:05,700 --> 00:19:08,600 a combination of the mortgage company. 327 00:19:08,600 --> 00:19:14,500 I'm working with and an individual within a law firm and 328 00:19:14,500 --> 00:19:18,500 access not being removed from another Law Firm that this 329 00:19:18,500 --> 00:19:21,200 individual used to work for that caused. 330 00:19:21,200 --> 00:19:25,200 A whole bunch of issues with data going to the wrong law 331 00:19:25,200 --> 00:19:30,300 firm, mine, this case, All because this person's access was 332 00:19:30,300 --> 00:19:35,100 not removed when she transferred from one Law Firm to another Law 333 00:19:35,100 --> 00:19:37,800 Firm. So that I am a living world 334 00:19:37,800 --> 00:19:42,100 example of, you know, now might not be, this is a first world 335 00:19:42,100 --> 00:19:44,500 problem. So I'm not gonna, you know, moan 336 00:19:44,500 --> 00:19:47,200 and whine and complain about it too much, but a supposed to 337 00:19:47,200 --> 00:19:50,400 close on Wednesday. And now I'm scrambling to close 338 00:19:50,400 --> 00:19:54,100 by Friday so that I'm not homeless over the weekend and in 339 00:19:54,100 --> 00:19:56,600 North Carolina, waiting for waiting for papers to sign. 340 00:19:56,600 --> 00:20:01,600 So, I do, I believe this number. Yes, absolutely. 341 00:20:01,600 --> 00:20:04,200 As I've now seen in the real world and it is affecting my 342 00:20:04,200 --> 00:20:07,200 life. Plus, I told you, I don't think 343 00:20:07,200 --> 00:20:12,100 homelessness is a first world problem but okay, but yeah, the 344 00:20:12,100 --> 00:20:16,200 good story, you know, kind of I think I have a pessimistic and 345 00:20:16,200 --> 00:20:20,800 an optimistic view of this. My pessimistic view is what you 346 00:20:20,800 --> 00:20:25,800 brought the key point there, jeff, which is removing all 347 00:20:25,800 --> 00:20:28,000 access when you think about, About. 348 00:20:28,900 --> 00:20:31,800 Removing all when you think about the 26 percent of 349 00:20:32,000 --> 00:20:36,100 organizations that do remove people in within one day, it's 350 00:20:36,100 --> 00:20:39,500 probably not all access. It's probably active directory 351 00:20:39,500 --> 00:20:42,900 account and the person responding to the survey feels 352 00:20:42,900 --> 00:20:46,800 confident that removing active directory, removes quote-unquote 353 00:20:46,800 --> 00:20:49,500 all access. The reality of it is most 354 00:20:49,500 --> 00:20:55,300 organizations have you know many many applications that are not 355 00:20:55,300 --> 00:20:57,600 covered just by the active directory account. 356 00:20:58,100 --> 00:21:03,500 The, the optimistic or the alternative view to this is I 357 00:21:03,500 --> 00:21:07,000 think Julie's right? In terms of automation, I think, 358 00:21:07,000 --> 00:21:09,900 you know, there are a lot of organizations that are just 359 00:21:10,100 --> 00:21:13,900 under invested. I am and some that are smaller 360 00:21:13,900 --> 00:21:18,500 organizations, that it's not that they're appropriately, 361 00:21:18,500 --> 00:21:21,400 invested their underinvested because this is becoming such an 362 00:21:21,408 --> 00:21:25,800 important area, but they might have one or two it people and 363 00:21:25,800 --> 00:21:29,600 they're doing everything from, you know, Cloning laptops and 364 00:21:29,600 --> 00:21:34,600 supporting phones and doing email and doing, oh yeah, doing 365 00:21:34,600 --> 00:21:36,500 identity and access management as well. 366 00:21:36,500 --> 00:21:41,900 So I think that could have a big impact in terms of driving down 367 00:21:43,300 --> 00:21:47,300 this, this number as well. But you know, even the 26 if you 368 00:21:47,300 --> 00:21:50,500 only think the pessimistic view it's even the 26 percent number 369 00:21:50,800 --> 00:21:55,700 could potentially be inflated but I did want to ask Julie 370 00:21:55,700 --> 00:22:01,200 another question which was Another statistic that I was 371 00:22:01,200 --> 00:22:06,000 looking at was around risky Behavior, being reduced, when 372 00:22:06,000 --> 00:22:11,900 Executives put focus on identity security, a lot of the the focus 373 00:22:11,900 --> 00:22:15,700 was around, you know, if the executive speak publicly to 374 00:22:15,700 --> 00:22:21,200 employees about password security, but also a statistic 375 00:22:21,200 --> 00:22:26,200 about it security stakeholders admitting to risky security 376 00:22:26,200 --> 00:22:28,700 Behavior. So I wondered if Add a little 377 00:22:28,700 --> 00:22:32,000 bit of flavor to each of those areas. 378 00:22:32,500 --> 00:22:36,900 Yeah sure. So that question kind of came 379 00:22:36,900 --> 00:22:39,700 out of a research report that we did. 380 00:22:40,100 --> 00:22:42,100 I think I talked about it already, the stakeholder 381 00:22:42,400 --> 00:22:45,300 perspective which we kind of tied into the line of business 382 00:22:46,300 --> 00:22:50,100 user and how, you know, how to does identity and access 383 00:22:50,100 --> 00:22:54,100 management affect them and and one of the things we ask that 384 00:22:54,100 --> 00:22:56,900 line of business group and it was really kind of a question 385 00:22:56,900 --> 00:22:58,900 that we put in there. Just because we thought it might 386 00:22:58,900 --> 00:23:02,700 be interesting to get some perspective on just how, how, 387 00:23:02,700 --> 00:23:05,700 well does the average user protect their corporate 388 00:23:05,700 --> 00:23:09,400 passwords. And so we asked a list of 389 00:23:09,600 --> 00:23:12,600 provide a list of risky, behaviors things like you have 390 00:23:12,600 --> 00:23:17,200 you shared passwords through slack or Microsoft teams, do you 391 00:23:17,200 --> 00:23:24,200 reuse passwords be written passwords down on a sticky note, 392 00:23:24,600 --> 00:23:27,900 you know, just just things that I think we would all consider. 393 00:23:28,600 --> 00:23:32,300 Poor secure, password hygiene. But yet, we probably all do them 394 00:23:32,300 --> 00:23:34,900 too. And we thought it'd be 395 00:23:34,900 --> 00:23:37,700 interesting to try and get at this sort of what's the state 396 00:23:39,700 --> 00:23:43,600 prevention of identity related breaches as it relates to 397 00:23:43,600 --> 00:23:47,700 culture and human behaviors and protecting passwords right at 398 00:23:47,700 --> 00:23:50,400 times. Back to the idea, a lot of times 399 00:23:51,400 --> 00:23:53,600 it's a cliche that gets thrown around a lot. 400 00:23:53,600 --> 00:23:57,900 Is that people are the weakest link in the security chain. 401 00:23:58,400 --> 00:24:03,600 And so we wanted to try and tap into that as well as to tap into 402 00:24:03,600 --> 00:24:09,700 the idea that it's not just about security technology, but 403 00:24:10,300 --> 00:24:15,700 it's also about just creating a security-minded culture within 404 00:24:15,700 --> 00:24:20,200 an organization. So that's really where the 405 00:24:20,200 --> 00:24:22,800 question came from. So we pulled the question 406 00:24:22,800 --> 00:24:25,000 forward from one of the previous research reports, and we wanted 407 00:24:25,000 --> 00:24:31,700 to ask specifically it security. identity people about how well 408 00:24:31,700 --> 00:24:34,500 they protect their passwords and so what we found is I think 409 00:24:34,500 --> 00:24:41,200 forty forty percent of them said oh you know we never we never 410 00:24:42,100 --> 00:24:45,500 displaying eighties bad behaviors versus I think it was 411 00:24:45,500 --> 00:24:50,600 in the 30s for line of business folks and then again kind of 412 00:24:50,600 --> 00:24:53,500 getting at this culture and security mindedness within an 413 00:24:53,500 --> 00:24:59,200 organization we thought well is there any any way that At How 414 00:24:59,200 --> 00:25:02,000 would, how would a culture evolved. 415 00:25:03,000 --> 00:25:05,700 And one way that it might have all this through leadership 416 00:25:05,700 --> 00:25:10,600 support protecting passwords. And so, we asked a question 417 00:25:11,200 --> 00:25:16,600 around, what's do Executives speak about password, security 418 00:25:16,600 --> 00:25:19,300 in your organization? And who is the highest level 419 00:25:20,100 --> 00:25:22,400 Executives? So is it, is it the board level? 420 00:25:22,400 --> 00:25:25,800 Is it senior Executives? Is it security Executives? 421 00:25:25,800 --> 00:25:29,600 Is that, you know, See us security leadership. 422 00:25:29,700 --> 00:25:33,000 And what we found is that and then how do those two things 423 00:25:33,000 --> 00:25:37,700 correlate, right? So, do people take better care 424 00:25:37,700 --> 00:25:41,600 of their passwords? If security leadership is 425 00:25:41,600 --> 00:25:47,600 talking about how important it is in their organization from an 426 00:25:47,600 --> 00:25:52,300 overall security perspective. And we found that 72% of the eye 427 00:25:52,400 --> 00:25:56,700 of the respondents to this survey said that they do take 428 00:25:56,700 --> 00:26:01,600 better care of Their passwords when an executive is talking 429 00:26:01,600 --> 00:26:04,800 about it. So it's just kind of trying to 430 00:26:04,800 --> 00:26:09,000 get it this you know just culture affect their individual 431 00:26:09,000 --> 00:26:14,700 behavior and I think the answer is yes so that was sort of 432 00:26:14,700 --> 00:26:17,900 really the you know, really the ankle that we took that that the 433 00:26:17,900 --> 00:26:21,900 state of prevention in 2022 is not necessarily always tied to 434 00:26:22,300 --> 00:26:26,900 technology and expertise in the organization but it also is tied 435 00:26:26,900 --> 00:26:30,300 to behaviors. And culture, and we did ask some 436 00:26:30,300 --> 00:26:32,700 questions around training as well. 437 00:26:32,700 --> 00:26:35,200 So, you know, kind of looking at it from both of those 438 00:26:35,200 --> 00:26:38,300 perspectives and, and maybe a little bit. 439 00:26:38,300 --> 00:26:43,700 Removing the idea, that, that users are your our primary 440 00:26:43,700 --> 00:26:46,200 attack vector. And turning that into users, 441 00:26:46,200 --> 00:26:48,300 could be a primary line of defense. 442 00:26:50,000 --> 00:26:52,400 Yes, I find that research, really your kind of reinforces 443 00:26:52,400 --> 00:26:53,800 other research that I've seen that. 444 00:26:53,900 --> 00:26:56,400 Yes, continuing to drive, security, awareness the 445 00:26:56,400 --> 00:26:59,000 organization. And it's not a one-time thing. 446 00:26:59,000 --> 00:27:01,100 You have to repeatedly, kind of get the message out and make 447 00:27:01,100 --> 00:27:04,500 sure that people understand, you know that it's it's it's 448 00:27:04,500 --> 00:27:06,700 something that you need to be aware of it all times. 449 00:27:07,600 --> 00:27:10,400 I want to ask one more question on the report and that was 450 00:27:10,400 --> 00:27:13,100 around something I found interesting and timely Russia 451 00:27:13,100 --> 00:27:15,200 and Ukraine. So there were a couple of 452 00:27:15,200 --> 00:27:19,200 questions around it and the one that that I guess struck my eye 453 00:27:19,200 --> 00:27:21,700 the most What was the question about? 454 00:27:21,900 --> 00:27:23,200 And this is what the question was. 455 00:27:23,200 --> 00:27:26,800 Has the recent russia-ukraine crisis, increased visibility of 456 00:27:26,800 --> 00:27:30,200 your company's identity and security activities among non 457 00:27:30,200 --> 00:27:34,200 technology leadership and I'm looking at this pie chart and it 458 00:27:34,200 --> 00:27:38,000 tells me that two-thirds of your respondents said yes there was 459 00:27:38,000 --> 00:27:39,900 some increase. Now it might have been a 460 00:27:39,908 --> 00:27:42,300 mightier increase might have a significant increase maybe 461 00:27:42,300 --> 00:27:46,400 somewhere in between but I look at this and say, okay clearly 462 00:27:46,400 --> 00:27:51,500 there has been some impact on the visibility of You know, are 463 00:27:51,500 --> 00:27:54,100 weak properly protected. Do we have the proper identity 464 00:27:54,100 --> 00:27:57,700 security in place, right? Those are some things, I guess. 465 00:27:57,700 --> 00:28:00,800 Any, any color you want to add to that or are my findings? 466 00:28:00,800 --> 00:28:03,300 Kind of, jiving, with will kind of what you're thinking, as 467 00:28:03,300 --> 00:28:03,800 well? Or am? 468 00:28:03,800 --> 00:28:08,900 I totally crazy? I would align with you, but I 469 00:28:08,900 --> 00:28:12,300 will tell you that, you know, this is data right as my 470 00:28:12,300 --> 00:28:17,400 researcher pounds into me. This is data and, you know, you 471 00:28:17,400 --> 00:28:20,300 present the data and then people form their own Our own opinions 472 00:28:20,300 --> 00:28:22,800 from it or own perspectives and they kind of look at it through 473 00:28:22,800 --> 00:28:26,900 their own lens. I, you know, as part of our 474 00:28:27,200 --> 00:28:30,200 process for getting the word out about this risk report, we've 475 00:28:30,200 --> 00:28:34,700 been doing pitching to the press and I did have one one request 476 00:28:34,700 --> 00:28:40,000 that came back through from a publication that journalist it's 477 00:28:40,000 --> 00:28:42,600 going to write an article for us which is fantastic. 478 00:28:43,400 --> 00:28:47,900 And their perspective was, wow, it doesn't really seem at all, 479 00:28:47,900 --> 00:28:53,300 like there's been And increase awareness but or, you know, 480 00:28:53,400 --> 00:28:56,800 increase visibility or increased budget because the Ukraine 481 00:28:57,200 --> 00:28:59,700 Russia Khan which I thought was really interesting, right? 482 00:28:59,700 --> 00:29:03,400 So just go, just goes to say that we all kind of, I guess 483 00:29:03,400 --> 00:29:08,400 it's back to the is the dress gold and white or is it, it was 484 00:29:08,400 --> 00:29:10,000 it blue and white or whatever. Right? 485 00:29:10,000 --> 00:29:12,100 The same dress and everybody saw it a little bit differently. 486 00:29:12,100 --> 00:29:13,800 And that's exactly how it is with data. 487 00:29:14,000 --> 00:29:18,500 So, like, um, yeah, well, here's how we will cook Tommy Boy, 488 00:29:18,500 --> 00:29:21,500 quote for you, a simple. No would have been sufficient, 489 00:29:24,900 --> 00:29:27,300 got to throw the movie quotes and where appropriate. 490 00:29:27,300 --> 00:29:32,300 So Julie, last last week's episode, we asked a group of 491 00:29:32,300 --> 00:29:37,500 identi Rowdy, what the differences between digital 492 00:29:37,500 --> 00:29:40,400 identity and identity and access management. 493 00:29:40,400 --> 00:29:46,200 Those two terms, I you titled this report 2022 Trends in 494 00:29:46,200 --> 00:29:50,500 securing digital identities. So this is Didn't get your 495 00:29:50,500 --> 00:29:52,100 answers part of that last episode. 496 00:29:52,100 --> 00:29:54,800 I'm going to pose that question. But you on the spot posed that 497 00:29:54,800 --> 00:29:56,600 question to you. Now, what's the difference 498 00:29:56,600 --> 00:30:00,100 between digital identity and identity and access management? 499 00:30:00,800 --> 00:30:02,900 And keep in mind? Three had seven different 500 00:30:02,900 --> 00:30:04,500 answers for seven different people. 501 00:30:04,600 --> 00:30:07,500 Yeah, nobody has answered this identical yet. 502 00:30:07,500 --> 00:30:09,900 So this is your chance to give your flavor to it. 503 00:30:10,600 --> 00:30:14,700 Well, I'm afraid to answer from Jeff because it's going to be 504 00:30:14,700 --> 00:30:19,800 he's going to want just a very concise answer, so I will I'll 505 00:30:19,800 --> 00:30:25,300 say this floor is yours. Yeah, so I think I did a digital 506 00:30:25,300 --> 00:30:30,400 identity as the thing, the identity, the attributes, you 507 00:30:30,400 --> 00:30:32,900 know, maybe it's the Biometrics associated with. 508 00:30:32,900 --> 00:30:35,400 But it's the thing that we're protecting and managing and 509 00:30:35,400 --> 00:30:38,400 validating, right? And then identity and access 510 00:30:38,400 --> 00:30:42,000 management, we actually would suggest. 511 00:30:42,000 --> 00:30:44,400 And we have a Blog, I hear the talks about it, that identity 512 00:30:44,400 --> 00:30:48,400 and access management is of all to identity security because 513 00:30:48,400 --> 00:30:53,000 it's kind of gone. And really access management and 514 00:30:53,000 --> 00:30:57,200 its identity security is about getting to a trusted identity 515 00:30:57,300 --> 00:31:00,400 and you know, whether it's validating and on the front 516 00:31:00,400 --> 00:31:03,000 front end, it's, you know, protecting it through 517 00:31:03,000 --> 00:31:06,900 authentication and and you know, maybe offers authorization and 518 00:31:06,900 --> 00:31:08,800 then that's just the management of it. 519 00:31:08,900 --> 00:31:11,000 Some of the things we talked about around D provisioning, so 520 00:31:11,000 --> 00:31:13,900 that's really identity. Security is an evolution of 521 00:31:13,900 --> 00:31:16,700 identity and access management and then in our world, identity 522 00:31:16,700 --> 00:31:19,100 Define security is taking that trusted identity. 523 00:31:19,800 --> 00:31:23,500 Adding some context to it and using that combination of things 524 00:31:23,500 --> 00:31:30,000 to protect resources. So that's my answer. 525 00:31:31,600 --> 00:31:34,500 I think it's a good one. I think now we have eight 526 00:31:34,500 --> 00:31:37,800 different answers. I think this is really 527 00:31:37,800 --> 00:31:41,400 interesting from a just, I guess the psychological aspect of 528 00:31:41,400 --> 00:31:44,200 identity and access management is that even people who are in 529 00:31:44,200 --> 00:31:46,500 the identity space, can't necessarily agree on the 530 00:31:46,500 --> 00:31:50,500 terminology and the definitions. And I think that's actually 531 00:31:50,500 --> 00:31:54,000 okay, I'm fine with that because I think we do have different 532 00:31:54,000 --> 00:31:55,300 perspectives that we bring to it. 533 00:31:56,300 --> 00:31:58,400 Alright, let's go ahead and start to wrap things up because 534 00:31:58,400 --> 00:32:00,800 I know Julie you been super generous or time. 535 00:32:01,000 --> 00:32:03,800 About to hit identify verse. I will just say again. 536 00:32:03,800 --> 00:32:06,100 Congratulations on his research. It is awesome stuff. 537 00:32:06,100 --> 00:32:09,400 I love reading it. I'd like to also cite it and 538 00:32:09,400 --> 00:32:12,900 some of my conversations that I have with other folks in 539 00:32:12,900 --> 00:32:14,600 industry or customers or clients. 540 00:32:14,600 --> 00:32:17,300 I would certainly encourage people who haven't checked it 541 00:32:17,300 --> 00:32:20,900 out already. Go to the identity defines curry 542 00:32:20,900 --> 00:32:24,800 Alliance website, IDs Alliance dot-org, the research will be 543 00:32:24,800 --> 00:32:27,600 there and definitely want people to check it out. 544 00:32:27,600 --> 00:32:30,200 But it wouldn't be an identity, the center episode without 545 00:32:30,200 --> 00:32:32,000 getting into something. Being silly /. 546 00:32:32,000 --> 00:32:36,900 Stupid at the end. What is your favorite comedian 547 00:32:37,000 --> 00:32:44,700 or style of Comedy? Mmm, so I have a new favorite 548 00:32:44,700 --> 00:32:49,900 comedian and I was in New York City a couple weekends ago and 549 00:32:49,900 --> 00:32:53,800 we went to the Comedy Cellar. And somewhat, I think actually a 550 00:32:53,800 --> 00:32:58,400 couple of familiar faces came on the stage, which was amazingly 551 00:32:58,500 --> 00:33:01,200 cool. But one of them was a guy that I 552 00:33:01,200 --> 00:33:04,300 have seen in billions. I don't know if you guys watch 553 00:33:04,300 --> 00:33:07,500 the show billions on HBO, the guy by the name of Mike 554 00:33:07,500 --> 00:33:11,300 Birbiglia, which I kind of knew but didn't really know that he 555 00:33:11,300 --> 00:33:15,000 was a stand-up comedian and it turns out he is very popular 556 00:33:15,000 --> 00:33:17,600 stand-up comedian and he's my new favorite comedian. 557 00:33:17,600 --> 00:33:21,300 He is, I have thought a lot about this. 558 00:33:21,300 --> 00:33:24,700 I kind of think he's the clean version of Dave Chappelle and I 559 00:33:24,700 --> 00:33:28,800 love Dave Chappelle, because I think he has is an amazing 560 00:33:28,800 --> 00:33:32,900 Storyteller. His topics are a little bit 561 00:33:32,900 --> 00:33:37,500 interesting and I think Mike Birbiglia is the same way. 562 00:33:37,500 --> 00:33:40,200 He just, he is an amazing. Storyteller. 563 00:33:40,200 --> 00:33:44,400 He has an interesting way of kind of weaving things together 564 00:33:45,400 --> 00:33:48,600 and I'm a fan. I've been binge-watching and 565 00:33:48,700 --> 00:33:53,900 maybe watch a couple episodes twice of his Netflix series on, 566 00:33:55,100 --> 00:33:56,500 you know, stand-up comedy series. 567 00:33:56,500 --> 00:34:01,300 So he's my new favorite comedian and I just love his storytelling 568 00:34:01,300 --> 00:34:06,900 style and it's, he's fantastic. That's a good pick. 569 00:34:06,900 --> 00:34:09,300 I like microvilli a lot. I'm a big fan of Comedy. 570 00:34:09,500 --> 00:34:12,400 And he is definitely up there, I think you're totally right. 571 00:34:12,400 --> 00:34:14,699 He's a great Storyteller. I think that's what separates a 572 00:34:14,699 --> 00:34:18,100 lot of. You know, the I guess the good 573 00:34:18,300 --> 00:34:20,800 folks who are good at. Comedy stand-up specifically is 574 00:34:20,800 --> 00:34:23,000 being will tell that story. I'm just curious. 575 00:34:23,000 --> 00:34:25,600 I think for people who aren't familiar Comedy Central in New 576 00:34:25,600 --> 00:34:31,900 York City is pretty legendary comedy club that a lot of 577 00:34:31,900 --> 00:34:35,699 big-name comics will go to and sometimes they sort of drop in 578 00:34:35,699 --> 00:34:38,800 unannounced even and kind of, you know, you might go there to 579 00:34:38,800 --> 00:34:41,699 say one Act and all of a sudden you're seeing two or three other 580 00:34:41,699 --> 00:34:44,600 people who are working out material and you're able to kind 581 00:34:44,600 --> 00:34:46,300 of kind of peek behind the curtain. 582 00:34:46,300 --> 00:34:48,199 I'm curious. Who did you see anyone else 583 00:34:48,199 --> 00:34:50,100 there? Besides Michael be good from a 584 00:34:50,400 --> 00:34:53,300 name recognition. Yeah well there I think there 585 00:34:53,300 --> 00:34:55,699 were five Comedians and I'm not going to get all their names 586 00:34:55,699 --> 00:34:59,300 right? Maybe sex actually I thought and 587 00:34:59,300 --> 00:35:02,800 see I mean it started out in the MC was fantastic and were like, 588 00:35:02,800 --> 00:35:05,500 wow, okay, this guy's great like who else is coming on? 589 00:35:05,500 --> 00:35:08,200 They all had, it was funny because they all had certain 590 00:35:08,200 --> 00:35:11,500 that likes. Chips in one way or another Ryan 591 00:35:11,500 --> 00:35:13,400 Hamilton. I don't know if you know that 592 00:35:13,400 --> 00:35:17,300 name, I think he's on, he's on Netflix, he was there Chris De 593 00:35:17,300 --> 00:35:20,600 Stefano which apparently he is. He was the headliner. 594 00:35:21,100 --> 00:35:25,700 He's not somebody that I know. But the, you know, the younger 595 00:35:25,700 --> 00:35:30,000 and set that we are with couple 20 mid, 20 year, olds were like, 596 00:35:30,000 --> 00:35:33,100 oh my gosh, she's the best, he was the headliner. 597 00:35:36,100 --> 00:35:39,000 And yeah, the other the other names Escape me at this point 598 00:35:39,000 --> 00:35:43,200 but it we just went into a cold and had tickets and, you know, 599 00:35:43,200 --> 00:35:45,500 just all of a sudden these fantastic comedians, every 600 00:35:45,500 --> 00:35:48,200 single one of them came on stage so it was very cool. 601 00:35:49,000 --> 00:35:50,500 That's awesome. I think that's actually a bucket 602 00:35:50,500 --> 00:35:52,100 was cited. For me is, I've never been able 603 00:35:52,100 --> 00:35:56,300 to hit a venue like that. Go see comedians destefano's a 604 00:35:56,300 --> 00:35:58,600 good one. He's like a New York Comic. 605 00:35:58,800 --> 00:36:00,500 She's kind of well-known and sort of that space. 606 00:36:00,500 --> 00:36:03,900 And you'll find that there's like East Coast West Coast, you 607 00:36:03,900 --> 00:36:07,100 know, kind of circles of Comedians and things like that. 608 00:36:08,000 --> 00:36:09,100 Jim. How about yourself? 609 00:36:09,100 --> 00:36:11,200 Who's your favorite comedian or do you have a favorite style of 610 00:36:11,200 --> 00:36:13,800 Comedy? So it's interesting when we, 611 00:36:14,500 --> 00:36:17,600 when I first heard this question, the the name Richard 612 00:36:17,600 --> 00:36:21,200 Pryor popped into my head. I've really liked some of those 613 00:36:21,200 --> 00:36:26,600 old comedy routines because that the further you go back in 70s 614 00:36:26,600 --> 00:36:30,000 and 80s and stuff, every time you are going, oh my God, that's 615 00:36:30,000 --> 00:36:34,000 so wrong. You know, it's and you know you 616 00:36:34,000 --> 00:36:37,500 would definitely get Sold it today's world. 617 00:36:37,500 --> 00:36:42,500 So, you know, even as you move through, like I love, you know, 618 00:36:43,300 --> 00:36:46,500 Chris Rock. I love Chappelle, I mean, all 619 00:36:46,500 --> 00:36:51,800 those comedians to me, or fantastic, but I don't only love 620 00:36:51,800 --> 00:36:55,300 like the outrageous and I love like Seinfeld. 621 00:36:55,400 --> 00:37:02,100 I love Bob Newhart like that dry, you know, sarcastic comedy. 622 00:37:03,200 --> 00:37:06,800 And I also love like, What would you call like Saturday Night 623 00:37:06,800 --> 00:37:11,500 Live and In Living Color and like, Schedule C schedule? 624 00:37:11,800 --> 00:37:12,800 Yeah. Yeah. 625 00:37:12,800 --> 00:37:14,500 Like sketch basically. Yeah. 626 00:37:14,700 --> 00:37:17,800 Yes. Catch and us watching again, the 627 00:37:17,800 --> 00:37:19,000 other day. Remember, I brought it up to 628 00:37:19,000 --> 00:37:21,700 you. Is that ship at the Chappelle 629 00:37:21,700 --> 00:37:26,600 show where he had, you know, Rick James and was Eddie 630 00:37:26,600 --> 00:37:29,800 Murphy's brother. Oh my God, that's like one of 631 00:37:29,800 --> 00:37:31,600 the funniest things that really Murphy nonce. 632 00:37:31,600 --> 00:37:33,000 Yep. Charlie Murphy. 633 00:37:33,300 --> 00:37:37,700 Charlie Murphy Yeah. Hilarious. 634 00:37:37,900 --> 00:37:42,400 So anybody who has a scene that skid before go to YouTube and 635 00:37:42,400 --> 00:37:44,700 search for Rick James. Charlie Murphy. 636 00:37:45,500 --> 00:37:47,200 You'll cry. Your eyes out. 637 00:37:47,500 --> 00:37:48,800 Yeah. It's a good Chappelle Show bed 638 00:37:48,800 --> 00:37:51,600 for sure. I, you know, there are so many 639 00:37:51,600 --> 00:37:55,500 good Comedians and I've been fortunate enough to hear a lot 640 00:37:55,500 --> 00:37:58,600 of a lot of good material. I don't know if I could narrow 641 00:37:58,600 --> 00:38:00,800 it down to one. I think I go in phases. 642 00:38:01,300 --> 00:38:04,800 So like right now what I've been listening to a lot of is Anthony 643 00:38:04,800 --> 00:38:09,600 Jeselnik and And Daniel Tosh for some reason keeps coming up but 644 00:38:09,600 --> 00:38:12,300 there's also Patton Oswalt who is a brilliant stand-up. 645 00:38:12,300 --> 00:38:14,600 Most people kind of may not be familiar with the stand up 646 00:38:14,600 --> 00:38:18,100 because they see him in Marvel. Kind of things and TV stuff. 647 00:38:18,900 --> 00:38:22,600 For big lie is good. If you're really like comedy. 648 00:38:22,700 --> 00:38:27,100 I think one of my favorite things of all time is it was a 649 00:38:27,100 --> 00:38:29,900 movie, but it's really just two hours of stand up. 650 00:38:29,900 --> 00:38:33,600 And it's the original Kings of Comedy and, you know, I had 651 00:38:33,600 --> 00:38:35,500 Steve Harvey. Bernie Mac. 652 00:38:36,800 --> 00:38:41,100 Trying to think where the other folks were, but I laughed my 653 00:38:41,100 --> 00:38:44,200 you-know-what off for a good solid, two hours. 654 00:38:44,200 --> 00:38:49,600 I actually saw it in the theater and it was so good. 655 00:38:49,600 --> 00:38:52,900 It was so funny. Bernie Mac's stand up, you know, 656 00:38:52,900 --> 00:38:56,600 as part of the original Kings of Comedy is in my mind, one of the 657 00:38:56,600 --> 00:39:00,000 most legendary performances, I think he absolutely nailed it 658 00:39:00,000 --> 00:39:02,400 and it was fantastic, but there's been so many good ones. 659 00:39:02,400 --> 00:39:05,000 It's hard for me too hard for you to pick one because I think 660 00:39:05,000 --> 00:39:06,600 I'd enjoy them all and there's so many different styles. 661 00:39:06,800 --> 00:39:09,200 Giles comes to it. But yeah, I guess I don't think 662 00:39:09,200 --> 00:39:11,600 I'm like laughing so hard. I'm crying. 663 00:39:11,900 --> 00:39:15,300 And I'm also feeling guilty for laughing at what he just said. 664 00:39:17,300 --> 00:39:20,400 Well, I think it's part of the young that I think that's 665 00:39:20,400 --> 00:39:21,200 Community. I think. 666 00:39:21,200 --> 00:39:23,200 I mean, I think that's part of Comedy. 667 00:39:23,200 --> 00:39:25,700 Right. I think it's sometimes it's 668 00:39:25,700 --> 00:39:27,200 personal. Sometimes, it's raw. 669 00:39:27,200 --> 00:39:31,500 Sometimes it's hitting on Raw nerves within sort of the public 670 00:39:31,500 --> 00:39:35,300 Consciousness, but being able to make light of it or joke about 671 00:39:35,300 --> 00:39:37,100 it, right? I think, you know, I'm Perfect 672 00:39:37,100 --> 00:39:40,500 one to make jokes at my own expense expense, obviously, so 673 00:39:41,100 --> 00:39:44,600 so yeah, yeah. But at the end of the day, you 674 00:39:44,600 --> 00:39:50,200 know, there's nothing better than just like a really awesome 675 00:39:50,600 --> 00:39:53,900 belly laugh, right. I mean, that's, there's just 676 00:39:53,900 --> 00:39:58,100 like, I don't know if feeds the soul, I think so it's a very 677 00:39:58,100 --> 00:39:59,600 subjective, but I'm totally with you. 678 00:39:59,600 --> 00:40:02,600 It's like, you know, there is comedy out there for anybody. 679 00:40:02,700 --> 00:40:06,200 Another good one is Ronny Chang. If he's from Legacy from The 680 00:40:06,200 --> 00:40:08,600 Daily Show, But he has a stand up, his earlier, stand up for my 681 00:40:08,600 --> 00:40:13,100 mistakes, like 2016, or 2017 is on Netflix, highly recommended, 682 00:40:13,100 --> 00:40:16,600 he has a great bit about Amazon Prime that my wife and I had 683 00:40:16,600 --> 00:40:20,600 been quoting at each other for the last two weeks since we sat 684 00:40:20,600 --> 00:40:22,500 down and watched it. But that's another good one. 685 00:40:23,300 --> 00:40:26,000 Who was the guy that was? I know you probably want to wrap 686 00:40:26,000 --> 00:40:28,100 it up a time and ask you this question, who was the guy? 687 00:40:28,100 --> 00:40:32,100 That was a co-writer with Dave on the Dave Chappelle Show. 688 00:40:32,700 --> 00:40:36,400 He has a series of Netflix specials to that are super 689 00:40:36,400 --> 00:40:41,800 funny. Brennan, maybe in since last 690 00:40:41,800 --> 00:40:44,700 name I think he is very funny. Deal Brennan. 691 00:40:45,400 --> 00:40:46,200 Yeah. Emil Brandt. 692 00:40:46,200 --> 00:40:47,300 He's a good one. Yes. 693 00:40:48,000 --> 00:40:49,700 Yeah. I think he's on. 694 00:40:49,700 --> 00:40:52,400 You'll see murder once in a while, on Comedy Central. 695 00:40:54,000 --> 00:40:56,800 Yeah, it's interesting to see, you know, some of these 696 00:40:56,800 --> 00:41:00,300 comedians who are they might be stand up. 697 00:41:00,300 --> 00:41:02,600 They might be kind of like a writer on a show like Conan 698 00:41:02,600 --> 00:41:05,700 O'Brien's, you know, he's so I guess I'm going to consider him 699 00:41:05,700 --> 00:41:07,600 a stand-up comedian. But you know, he's obviously 700 00:41:07,600 --> 00:41:10,300 performer but he used to write for right The Simpsons, right? 701 00:41:10,300 --> 00:41:12,600 And he was on Saturday Night Live as a writer. 702 00:41:12,600 --> 00:41:15,200 I things like that is interesting to see some of these 703 00:41:15,200 --> 00:41:19,000 folks kind of pull around. John Mulaney is another example 704 00:41:19,000 --> 00:41:22,600 or Bill. Hader, Bill, hader's Stephane on 705 00:41:22,600 --> 00:41:24,700 Saturday Night Live. I think is one of the funniest 706 00:41:24,700 --> 00:41:26,900 things ever. And if you know, the back story 707 00:41:26,900 --> 00:41:30,800 behind it, the fact that so John Mulaney and Bill Hader would 708 00:41:30,800 --> 00:41:35,400 write, would write the skit Bill Hader would perform it, but John 709 00:41:35,400 --> 00:41:39,200 Mulaney would sneak And new things that Bill Hader would 710 00:41:39,200 --> 00:41:43,600 read for the first time on air. Whenever if you ever Google 711 00:41:43,600 --> 00:41:47,000 Stephane and Saturday Night Live, he can never hold it 712 00:41:47,000 --> 00:41:50,100 together because he's literally reading the cue cards and seeing 713 00:41:50,100 --> 00:41:52,000 it for the first time. What are you supposed to say? 714 00:41:52,600 --> 00:41:56,400 And, you know, maybe not necessarily truly safe for work, 715 00:41:56,400 --> 00:41:59,100 maybe a little bit PG-13 sometimes but it was on Saturday 716 00:41:59,100 --> 00:42:00,300 Night Live. So it's probably okay. 717 00:42:00,600 --> 00:42:03,000 But I think that is also one of the most hilarious. 718 00:42:03,000 --> 00:42:06,800 Like, B ever is, is the whole Stephane thing, The Saga. over 719 00:42:06,800 --> 00:42:10,100 the course of the years that that took That's where is I 720 00:42:10,100 --> 00:42:12,200 never heard that story. I actually just bought tickets 721 00:42:12,200 --> 00:42:13,800 to go. See, John Mulaney, he's on tour 722 00:42:13,800 --> 00:42:15,600 now. Well he's gonna see him in 723 00:42:15,600 --> 00:42:17,500 October. Yeah, he said, we're trying to 724 00:42:17,500 --> 00:42:20,800 wrap up anyway, happy to share her story because John Mulaney 725 00:42:20,800 --> 00:42:25,700 has a as a bit called the salt and pepper Diner, or something 726 00:42:25,700 --> 00:42:27,900 like that. And and basically the story is 727 00:42:27,900 --> 00:42:31,700 he went to have lunch with a friend and they the the diner he 728 00:42:31,700 --> 00:42:36,000 was at had a jukebox and it was three plays for a dollar, or 729 00:42:36,000 --> 00:42:38,900 something like that. And and so they put in like No 730 00:42:38,900 --> 00:42:41,600 three or four bucks and they had like twenty one place. 731 00:42:41,600 --> 00:42:46,400 And the whole bit was they played like seven or eight. 732 00:42:47,300 --> 00:42:54,100 What's what's new pussycat by? Whose it seems that I can 733 00:42:54,100 --> 00:42:56,500 release things at the moment but it's a, it's a famous song. 734 00:42:56,500 --> 00:42:59,900 Neil Diamond, I think something like that and they played it 735 00:42:59,900 --> 00:43:01,500 eight like seven or eight times in a row. 736 00:43:01,500 --> 00:43:05,700 Just to watch what people did in the diner and people are 737 00:43:05,700 --> 00:43:07,700 freaking out like, oh, it can't be that again. 738 00:43:08,200 --> 00:43:10,400 And then, oh, it's Tom Jones. That's what was Tom Jones. 739 00:43:11,100 --> 00:43:14,300 And then they played, It's Not Unusual by Tom Jones once and 740 00:43:14,300 --> 00:43:17,600 then they started playing more. What's new pussycat spy, Tom 741 00:43:17,600 --> 00:43:20,800 Jones and the whole the whole thing, the whole bed is very 742 00:43:20,800 --> 00:43:22,000 funny. I'm not doing it justice here 743 00:43:22,000 --> 00:43:25,900 but I'm only bring it up because I got to do that bit in real 744 00:43:25,900 --> 00:43:28,000 life. A few weeks ago, we went to a 745 00:43:28,000 --> 00:43:30,700 restaurant, they had one of those Touch Tunes where you can 746 00:43:30,700 --> 00:43:33,000 like control the Jukebox through an app. 747 00:43:33,600 --> 00:43:37,100 So I spent I'm I am proud and ashamed. 748 00:43:37,100 --> 00:43:42,000 To say this, I spent $18 to buy enough tokens to be able to 749 00:43:42,000 --> 00:43:43,700 play. What's new pussycat seven 750 00:43:43,700 --> 00:43:46,100 different times. And I will tell you that I got 751 00:43:46,100 --> 00:43:48,700 exactly the same reaction from the bit. 752 00:43:49,000 --> 00:43:52,400 As I did an in real life, as what happened in the bit, it was 753 00:43:52,500 --> 00:43:55,100 amazing. An awesome and I'm happy, I was 754 00:43:55,100 --> 00:44:00,700 finally able to pull it off. So I so that tells you that I 755 00:44:00,800 --> 00:44:05,300 spend my money well and wisely and my time well and wisely as 756 00:44:05,300 --> 00:44:07,500 well. So yeah that's what happened. 757 00:44:08,700 --> 00:44:10,200 Alright. Now let's go ahead and wrap 758 00:44:10,200 --> 00:44:11,900 things up because I think I've totally derailed this 759 00:44:11,900 --> 00:44:15,000 conversation and I will continue talking for comedy for hours on 760 00:44:15,000 --> 00:44:17,100 end. Julie, thank you so much for 761 00:44:17,100 --> 00:44:20,400 being with us. You can find the report it'll be 762 00:44:20,400 --> 00:44:24,300 up on the IDS Alliance websites, starting June 22nd. 763 00:44:24,300 --> 00:44:27,300 So really by the time people listen to this, it will be 764 00:44:27,300 --> 00:44:30,300 available any other things that you want to get out there for 765 00:44:30,300 --> 00:44:32,100 folks who are listening Julie before we wrap it up. 766 00:44:33,000 --> 00:44:36,600 Um, I don't think so. Anyway, usual pitches check out 767 00:44:36,600 --> 00:44:40,900 our website. We got A lot of vendor-neutral 768 00:44:40,900 --> 00:44:43,300 resources everything is freely available. 769 00:44:43,300 --> 00:44:46,200 There's cases where I might ask you for your contact info 770 00:44:46,200 --> 00:44:50,600 otherwise you know check it out. There's there's a lot of good 771 00:44:50,600 --> 00:44:54,000 stuff out there as well as the research report that that will 772 00:44:54,000 --> 00:44:56,200 be publishing on Wednesday. Very cool. 773 00:44:56,200 --> 00:44:58,100 How about Jim yourself? Any final thoughts for this 774 00:44:58,100 --> 00:45:00,100 week? Do it. 775 00:45:00,300 --> 00:45:04,300 Ask everybody to support the idea say and whatever way you 776 00:45:04,300 --> 00:45:08,300 can if your practitioner check out the practitioner membership, 777 00:45:08,500 --> 00:45:13,400 If you're if you work for a company in the digital identity 778 00:45:13,400 --> 00:45:17,800 industry, whatever that means consider, you know, push your 779 00:45:17,800 --> 00:45:21,100 company to join now. Right on give back, thanks, 780 00:45:21,100 --> 00:45:23,400 plenty of the plug kind of voices and spaces for this. 781 00:45:23,400 --> 00:45:26,800 Yeah, IDs Alliance dot-org. All right, we'll go ahead and 782 00:45:26,800 --> 00:45:32,200 wrap it up this week we do have at some point we'll reconnect on 783 00:45:32,207 --> 00:45:35,200 our weekly live stream at idea. See a that live in the meantime 784 00:45:35,200 --> 00:45:37,900 we've got the YouTube replays out there, we're on the web 785 00:45:37,900 --> 00:45:39,300 identities. Enter.com. 786 00:45:39,600 --> 00:45:44,800 We're on Twitter at Heidi as see podcasts, and fingers crossed. 787 00:45:44,800 --> 00:45:47,300 This will actually be my last podcast in the Chicago area. 788 00:45:47,300 --> 00:45:50,900 So the next time we talk most likely, I will be in North 789 00:45:50,900 --> 00:45:54,400 Carolina. We will see if companies get 790 00:45:54,400 --> 00:45:57,700 their IMX together and let me have that have that little win. 791 00:45:57,700 --> 00:46:00,900 So all right with that. Thanks everybody for listening 792 00:46:01,000 --> 00:46:03,000 and we'll talk with everyone in the next one. 793 00:46:07,900 --> 00:46:10,900 Thanks for Listening to the identity at the center podcast. 794 00:46:10,900 --> 00:46:13,200 If you like what you heard, don't forget to subscribe and 795 00:46:13,200 --> 00:46:16,000 visit us on the web and identity at the center.com.