January 2024 Summaries

The text discusses the importance of identity security in modern organizations and how it is at the root of various security initiatives such as data protection, cloud security, ransomware protection, and insider threats. It highlights that while there have been many identity innovations over the past two decades, none have effectively helped organizations understand who has access to what and what can be done with that access. The text introduces Veza, an identity security company aiming to solve this problem by combining previously siloed access permission data and extracting intelligence from relationships to address critical security and governance initiatives. It also shares the story of Blackstone's adoption of Veza's technology for securing their enterprise resources. The text concludes with a call to embrace the era of going beyond traditional IAM tools and adopting modern identity security solutions like Veza.

In August 2023, Veza introduced new integrations, a Dashboard Trends View with export functionality, a Query Details page for saved assessments, an enhanced Report Export feature, and comprehensive analytics. Access Reviews were improved with the option to filter by individual users and link to filtered views. Performance improvements were made in bulk actions and certification results. In September 2023, new integrations were added for MongoDB, NetSuite, Coupa, Slack, and Crowdstrike Falcon. Certification Action Logs were introduced for detailed history tracking, and mobile enhancements were made for Access Reviews. October 2023 saw the introduction of Risk Scores, Tags in Query Builder, Query Builder and Graph Search enhancements, and extended support for various systems. In November 2023, new integrations were added for Microsoft Dynamics 365, Terraform, Google Cloud SQL, and UKGPro. Time Machine for UARs was introduced, along with the Details Sidebar, Attribute Filter Combinations, Nested constraints, and support for Kubernetes services on Google Cloud (GKE) and Microsoft Azure (AKS). In December 2023, new integrations were added for Confluent Cloud, 1Password, and Privacera. Access Review improvements included a streamlined mobile experience, single Approve & Sign Off action, and enhanced decision-making columns in certifications. Search improvements included unification across Query Builder, Access Reviews, and Authorization Graph search interfaces, enhanced filters for timestamp-type attributes, and more entity types hidden by default for improved readability. Navigation and usability enhancements were made to the main Veza navigation, dashboard visualizations, and tag overview pages. User design improvements included increased consistency across major UI components and a simplified process for adding team members and roles on the User Management and Teams pages.

Companies are shifting their focus from solely preventing breaches to preparing for inevitable attacks by de-risking breaches through intelligent access principles. This involves enforcing least privilege, monitoring real-time access changes, and performing forensics beyond basic log analysis. Security professionals emphasize that it's not a question of "if," but "when" breaches will occur, so organizations must adapt their security posture to quickly shut down security incidents. Achieving and maintaining Least Privilege is crucial in reducing the risk and potential impact of data breaches. Regularly reviewing and adjusting access privileges, implementing real-time monitoring of access changes, and not relying solely on logging are key strategies for minimizing the effects of a breach.