For the last 12 years, Identiverse has been one of the most important dates on the identity and access management (IAM) calendar. It’s a forum where industry experts can share insights on identity’s past, discuss best practices for today, and predict what identity’s future will be tomorrow.
And while identity has always changed a great deal from year to year, it’s never gone through such dramatic and important shifts as it has recently. The coronavirus pandemic caused remote work to nearly triple and all but destroyed the traditional network perimeter.
More people making more transactions online than ever has led to major security concerns that all put identity front and center. The hackers behind the Colonial Pipeline ransomware attack breached the company’s networks through a virtual private network that was no longer in use and was not protected by multifactor-authentication. Recently, the RockYou2021 compilation leaked 8.4 billion passwords online – enough to cover every internet user almost twice over.
Nearly every business in every sector is trying to adapt to a more connected world. And with vaccination rates varying from country to country (and state to state), organizations will need to think through long-term, hybrid deployments to adapt to the work-from-anywhere dynamic, secure their business, and provide the services that their users need.
That’s why I’m thrilled to speak at Identiverse. Tomorrow, Wednesday, June 23 at 1:30 p.m. Mountain Time, I’ll review the trends that shaped the evolution of identity to this point and discuss a few priorities that can help businesses strategize for their long-term future.
With so much changing so quickly, it’s good to unpack some of the trends that got us where we are today and predict where those trends might be taking us:
Everyone is an identity user
Thirty years ago, the internet was reserved for specialized use cases in academia and corporate offices. Today, roughly 4.6 billion people use the internet and navigate identity ecosystems across Apple, Amazon, Facebook, Google and many others to connect with our friends, stream media, and do our jobs.
Because everyone is an identity user, everyone has a stake in identity. We need to ensure that we can authenticate every user across their devices. And we need to do it quickly, conveniently, and painlessly.
Because we rely on so many services, systems and applications, most users – both customers and employees – want to access their accounts as quickly and easily as possible. More often than not, the businesses that deliver the easiest, most intuitive experience wins.
But ‘easy’ doesn’t mean ‘insecure’. Organizations need to balance users’ expectations for convenience with the need to secure their IP and comply with data security standards.
Verify every identity
With the disappearance of the network perimeter, the acceleration in cloud services, and the growth in bot accounts, business need to prepare to verify every identity and every access request.
Zero trust is one way to build the mindset and tech stack necessary to thrive in this new world: its central axiom ‘never trust, always verify’ can help businesses adapt to remote work, migrate to the cloud, and harness digital transformation securely.
These trends are changing the evolution of identity. And we’re seeing other trends like the decentralized web open up new ways of thinking about how we manage our information and who we share it with.
If you’re attending Identiverse, make sure to stop by the SecurID booth to hear more about these trends and to head to my session on Wednesday. And please keep the conversation going by following #Identiverse on social media.