Zilla Security

I haven't been to an industry event since 2020. Decided to break the ice last week and attend the #GartnerIAM conference in Dallas. As usual, Gartner created a safe and fun environment. Some key take aways that I believe will impact both short and long term #IAM and #IGA roadmaps: 1) #MachineIdentity and #NonHumanIdentity sessions were packed! There seems to be some debate on standardizing terms (Machine Identity vs Non-Human Identity), I mostly heard NHI references. Regardless, for every Human Identity, there's an average of 45 Non-Human Identities that need to be identified, protected, managed and governed in the enterprise today. This is going to increase at an extremely aggressive pace over the next 5 years. 2) #AI for #IAM. AI is still young in IAM adoption. Most full stack IAM vendors are making practical use of AI to improve access reviews and mine business roles. Was very happy to see Deepak Taneja and the team at Zilla Security in the Fullstack list of vendors. Zilla's cloud native IGA solution strikes an impressive balance of simplicity and depth of coverage for on-premise and cloud applications delivering Visibility, Access Reviews, SoDs and AI Generated Roles. 3) #IAM for #AI. Identity Security needs to be a pillar for EVERY AI strategy to avoid basic risks like Prompt Injections and Model Poisoning. Toxic and bias injections will directly impact the safety, effectiveness and viability of your AI strategy. Data Access Governance is cool again. AI's appetite for data will force leaders to get a better handle on the LLM data follow. There's plenty of risk for business and compliance relevant data to be divulged, leaked and misused. 4) Yes, it's 2024 and we still have a major password problem on our hands! The time to go #passwordless is NOW! There were some interesting sessions on #IdentityWallets and #DecentralizedIdentities with practical use cases in the public sector. Great concept. I'm on the fence in terms of near-term adoption in the enterprise though. Would love to get more feedback. I think one vendor everyone is sleeping on right now is RSA Security. RSA's Unified Identity strategy covers most of the identity attack surface. It encompasses everything from Passwordless Authentication and #SSO through Lifecycle Management and Governance, for both on-premise and cloud environments. RSA makes a compelling business case for any security leader looking to do more with less #IdentitySecurity vendors. 5) Tech is great, but there's no replacement for the energy and chemistry of face to face interactions between humans. Sales leaders know exactly what I'm talking about. My favorite moments from the conference had nothing to do with tech. It was interacting with the IAM community and listening to admiral William McRaven's guest keynote speech. #Inspiration and #Motivation are fleeting. #Discipline is not. Now go make your bed.