Discussion with Howard Ting, CEO and Co-Founder at Opal Security
Opal: opal.dev
Howard Ting: https://www.linkedin.com/in/howardting/
Support the show and Donate to NCMEC: https://give.missingkids.org/TrustIssues
Summary
In this conversation, Howard Ting, CEO of Opal, discusses the evolution of identity and access management, sharing insights from his extensive career in cybersecurity. He highlights the challenges of managing access and authorization, particularly in the context of modern development practices and the rise of non-human identities. Ting emphasizes the need for a unified access platform that can handle both human and agent identities, advocating for just-in-time access management and fine-grained authorization to enhance security and efficiency in organizations. In this conversation, Justin Somaini discusses the evolving landscape of identity and access management, emphasizing the importance of automation, AI integration, and continuous auditing. He highlights the shift towards just-in-time access models and the need for organizations to adapt to the increasing complexity of managing both human and non-human identities. The discussion also touches on the challenges of delegating authority to agents and the future of company building in a rapidly changing technological environment.
Chapters
00:00 Introduction to Identity Management Challenges
03:13 Howard Ting's Journey in Identity and Cybersecurity
05:55 The Evolution of Authorization and Identity Solutions
09:04 The Shift Towards Just-in-Time Access Management
11:49 Understanding the Role of Agents in Identity Management
15:02 The Future of Authorization: Fine-Grained Control
17:53 Building a Unified Access Platform
21:07 Integrating Identity Solutions in Modern Enterprises
23:56 Automating Access Management Processes
29:27 Automating Access Management Workflows
33:29 Just-in-Time Access and AI Integration
36:17 Continuous Auditing and Risk Management
39:40 The Evolution of Identity and Access Management
42:52 AI's Role in Identity Management
47:12 Navigating Non-Human Identities
51:57 Delegating Authority to Agents
56:06 The Future of Company Building and Identity Management
Keywords
identity management, access control, authorization, cybersecurity, just-in-time access, identity governance, cloud security, fine-grained permissions, automation, identity solutions identity management, access control, AI integration, just-in-time access, continuous auditing, non-human identities, agentic identities, automation, risk management, security innovation