August 2024 Summaries

Separation of Duties (SoD) is a crucial control in today's complex organizational landscape to mitigate the risk of fraud and errors by ensuring that no single user has access to execute conflicting, potentially dangerous actions. Implementing SoD controls presents significant challenges due to the intricate nature of modern IT infrastructures. Veza's platform simplifies the implementation and monitoring of SoD controls with extensive integrations, out-of-the-box queries, multi-platform SoD controls, continuous monitoring, real-time alerting, granular access visibility, and compliance requirements. By leveraging Veza's Access Platform, organizations can ensure that their organization not only adheres to regulatory standards but also proactively mitigates the risks associated with toxic combinations of access.

Separation of Duties (SoD) is a crucial control in today's complex organizational landscape that prevents individuals from executing conflicting, potentially dangerous actions. Implementing SoD controls can be challenging due to the intricate nature of modern IT infrastructures. Veza's platform simplifies the implementation and monitoring of SoD controls by offering extensive integrations, out-of-the-box queries, multi-platform SoD controls, continuous monitoring, real-time alerting, granular access visibility, and compliance support. By leveraging Veza's Access Platform, organizations can ensure that their SoD controls are effectively mitigating risks while adhering to regulatory standards.

The IBM's 2024 Cost of Data Breach Report reveals a significant increase in the cost of data breaches, with an average cost rising nearly 10% to $4.88 million. Business disruption is cited as the greatest contributing factor to this rise. AI-led attacks are also making breaches more frequent and expensive. The use of AI and automation extensively in security can lower the cost of breaches by up to $2.22 million, with organizations that used AI for prevention reducing costs by 45.6%. Automating threat detection and response processes using AI can help businesses identify and contain breaches faster, thereby minimizing losses.

The IBM's 2024 Cost of Data Breach Report reveals a significant increase in the cost of data breaches, with an average cost rising nearly 10% to $4.88 million. Business disruption is cited as the greatest contributing factor to this rise. AI-led attacks are also making breaches more frequent and harder to detect. The use of AI and automation extensively in security significantly reduces the cost of breaches, with organizations that used AI experiencing average breach costs of $3.84 million compared to those not using AI at $5.72 million.

Identity security has evolved significantly due to advancements in technology and cloud adoption. The traditional scope of IAM has expanded, making it a complex battle against excess privilege for all identities, human and non-human alike. This shift is reflected in the organizational debate about where identity "belongs" within a business. Automation plays a critical role in managing access across multiple cloud platforms, but security teams must also find ways to separate compliance from risk. AI and machine learning technologies can empower organizations to achieve least privilege by showing security teams where access can be cut and providing recommendations based on access data.

Recent data breaches involving companies using Snowflake's cloud storage platform have highlighted significant vulnerabilities in data security practices and emphasized the shared responsibility between service providers and their customers. While Snowflake provides a sophisticated and powerful platform for data analytics, the responsibility for securing data does not rest solely on their shoulders. CISOs should prioritize and enhance their security capabilities by focusing on collaboration and shared responsibility, ensuring that both service providers and customers are aligned in their commitment to data security. By taking proactive measures such as gaining visibility into permissions, implementing robust access reviews, monitoring activity, optimizing RBAC implementations, establishing best practices for access requests, leveraging AI for advanced optimization, addressing technical debt, and preparing for compliance and audits, CISOs can significantly reduce the risk of data breaches, compliance failures, and unnecessary spending.

In July 2024, Veza released updates to its Access Intelligence, Access Reviews, and Lifecycle Management features. Notable changes include expanded dashboards for tracking non-human identities, the introduction of granular risk levels, and enhanced support for access keys and other machine credentials. Additionally, early access features aimed at simplifying team access management were added. These updates are designed to improve control and visibility over users' access landscapes.

The author discusses their journey into AI and how they joined Veza to leverage unique datasets for enterprise AI applications. They believe that data is the key driver in unlocking value in new enterprise AI applications, especially in identity security. With the rise of AI tools like Chat-GPT and Claude, organizations are transforming their enterprise data into training sets for AI, often overlooking security concerns. The author highlights the challenges faced by enterprises in maintaining the integrity of user context while using AI to pull information from systems. They also discuss how Veza is implementing AI to democratize its data and improve integration with enterprise systems. Long-term, they see potential in using AI for least privilege access control and knowledge management.

Veza is an identity security company dedicated to advancing safety and resilience in the face of increasing breaches and ransomware attacks. Their latest innovation, Access AI, leverages artificial intelligence capabilities to automate and enhance identity security operations. By harnessing machine learning (ML) and Generative AI (GenAI), Access AI democratizes the power of the Access Graph, allowing users to ask and answer questions in plain English. This enables organizations to proactively detect and fix identity risks before they allow data breaches or ransomware attacks. Key features include GenAI-powered Access Search, least privilege role recommendations, and streamlined reporting for instant insights.

Veza is an identity security company dedicated to advancing safety and resilience in the face of increasing breaches and ransomware attacks. They have redefined the identity security landscape with their Access Graph, providing a visual and actionable representation of who can take what action on what data. Their latest innovation, Access AI, is a powerful set of artificial intelligence capabilities that automate and enhance identity security operations by harnessing machine learning (ML) and Generative AI (GenAI). This democratizes the power of the Access Graph, allowing anyone across the business to ask and answer questions in plain English. Key features include GenAI-powered Access Search, least privilege role recommendations, and streamlined reporting for instant insights. Veza is setting the standard for leveraging AI to advance identity security, making managing access permissions more efficient and intuitive than ever before.

Veza's mission is to invent the future of identity security, focusing on enabling customers to proactively identify and mitigate risks before breaches. The company has redefined the identity security landscape with its Access Graph, a visual representation that answers "who can take what action on what data?" The latest innovation, Access AI, empowers organizations to automate and enhance identity security operations using machine learning and Generative AI, addressing challenges such as excessive permissions and simplifying access analysis. Access AI transforms the way organizations interact with their permissions metadata through natural language prompts, streamlines least privilege role recommendations, and automates reporting for instant insights. The transformative impact of AI on identity security will be profound, enabling customers to confidently secure access in their organizations with unprecedented speed and accuracy.

In today's rapidly evolving digital landscape, organizations face numerous challenges as they embrace transformative initiatives to stay competitive and drive growth. Security teams must partner with business units to secure these initiatives effectively. A modern identity security platform is essential to empower security teams to tackle these challenges head-on, providing comprehensive and flexible solutions that enable secure access, control, and visibility across all users, systems, and data. Such a platform enables organizations to confidently embrace transformative initiatives while maintaining a strong security posture and ensuring that their most critical assets remain secure.