Why Identity Security Doesn’t Solve the Problem

Identity tells you who is asking. It doesn’t tell you whether you should let them in.

Living Off The Cloud

Why a stolen credential should never be enough to get in.

A year on from the identity problem – and the half of it identity cannot solve.

Not as a criticism. As a genuine question – because the answer describes your access architecture more accurately than most assessments will.

Count them. How many separate products currently have a say in whether a given person can reach a given application?

Authenticate, then abdicate – and what that costs you two hours into a session.

Grant first, filter later – and pay for the difference every year.

So stop trying to trust it, and decide how much it matters.

It records who was admitted. The auditor is asking what they reached.

A problem that has never been written down in one place cannot be costed – and what cannot be costed never competes for budget.