May 2024 Summaries

Identity Governance and Administration (IGA) tools are essential in managing digital identities for organizations, with the industry projected to grow from $6.33B in 2023 to $19.65B by 2032. IGA helps oversee human and non-human access using a policy-driven approach to manage and control access rights across on-premises and cloud environments. However, implementing these solutions can be challenging due to their lack of coverage and depth in answering the question, "Who can take what action on what data?" Therefore, it is crucial to understand an IGA tool's capabilities before committing to a solution. IGA tools consist of two main pillars: Identity Governance and Identity Administration. They automate important tasks like onboarding or access requests (provisioning) and removing access (de-provisioning) users, which is increasingly useful in today's remote-first world. IGA solutions also offer a suite of capabilities designed to improve how businesses manage identities throughout their lifecycle, such as centralized access reviews, access management, automated provisioning, entitlement management, regulatory compliance, identifying and remedying policy violations, and analytics & reporting. Despite the benefits of IGA tools, they often fall short in managing complex access control systems, non-human identities, and scaling to meet the demands of a rapidly growing digital landscape. Organizations must look beyond traditional IGA solutions to find agility and scalability to secure digital identities in today's dynamic, distributed IT environment.

The increasing use of artificial intelligence (AI) in businesses has led to an increased focus on identity security, as it plays a critical role in ensuring the accuracy and reliability of AI models. Security and trust teams partner with business leaders to ensure data quality, protection, and controlled permissions, which are essential for maintaining the integrity of AI-driven processes. Legacy IAM approaches often hinder innovation and data scaling while compromising security, but a focus on identity security at scale provides a secure foundation for cloud, SaaS, and data-driven initiatives. An effective identity security platform enables businesses to unlock data-driven insights with robust security controls, enforce fine-grained access controls for sensitive data, manage entitlements, and ensure data security across diverse data platforms. By focusing on visibility, intelligence, and control, organizations can protect sensitive data used to train AI models, secure access to AI algorithms, monitor for anomalous access patterns, ensure compliance with data privacy regulations and ethical AI principles, and build trust with customers and stakeholders by demonstrating responsible AI practices.

In March 2020, Veza was founded with the goal to address the issue of who can take what action on what data in identity and security tooling. The company aims to define and lead the modern Identity Security category by delivering core identity products for IGA (Identity Governance and Administration), Cloud PAM (Privileged Access Management), ISPM (Identity Security Posture Management), and Next-Gen Identity Provider with Veza Identity. Key use cases include Access Search, Access Intelligence, Access Monitoring, Access Workflows, Lifecycle Management, and Access Request.

Veza's Chief Security and Trust Officer, Mike Towers, shares insights from the recent ransomware attack on Ascension, a non-profit organization operating 140 hospitals across 19 states. The discussion covers details of the incident, Ascension's response, and recommendations for other organizations to protect against similar attacks.

The Veza Voice newsletter provides updates on the company's platform and products, new integrations, strategic partnerships, events, tips & tricks, and more. Key highlights include the release of the first annual State of Access report, product updates such as query pipelines, Snowflake Data Governance and Salesforce Access Risks Dashboards, activity monitoring for AWS IAM and Okta, expanded Lifecycle Management support, streamlined access reviews, strategic partnerships with Hashicorp and ZScaler, new integrations including Google Drive and Dropbox, upcoming events like Identiverse and Gartner Security & Risk Management (SRM), tips on using Veza to monitor application access in Okta, the appointment of Mike Towers as Chief Security and Trust Officer, insights into recent breaches, and customer case studies.