KuppingerCole Analysts

In this conversation, John Tolbert  interviews Josh Gorrell from Tanium about incident response. They discuss common threats that require incident response, such as ransomware, data breaches, and DDoS attacks. They also touch on the importance of incident response in meeting regulatory compliance requirements and how it can be a competitive advantage for organizations. The conversation covers the key players in an incident response team, best practices for incident response, and metrics for measuring success. They also discuss trends in incident response, including automation and AI.

In this episode of KuppingerCole Analyst Chat, host Matthias Reinwarth talks with Alexei Balaganski, Lead Analyst and CTO at KuppingerCole Analysts, about the current challenges and future direction of cybersecurity. Alexei shares insights from recent industry events, highlighting the persistent issues despite increased investment in cybersecurity solutions. The discussion delves into the need for a philosophical shift in how security is approached, emphasizing proactive measures over reactive ones. They explore the integration of security into the development of new technologies and stress the importance of collaboration among stakeholders to create secure IT environments. Tune in to gain a deeper understanding of the evolving cybersecurity landscape and the steps necessary to stay ahead.

In this episode of KuppingerCole Analyst Chat, host Matthias Reinwarth speaks with Marina Iantorno, a Research Analyst at KuppingerCole Analysts, about the latest market trends in Identity and Access Management (IAM) and cybersecurity for 2024. They discuss the significant growth rates in Access Management and ITDR, driven by the increasing complexity and sophistication of cyber threats. Marina highlights the evolution of Access Management solutions to support remote workforces and the rising importance of ITDR in proactive threat detection and response. The conversation also covers the steady growth of the email security market in response to phishing and ransomware threats, as well as key strategies businesses are adopting to stay competitive in the IAM space. Finally, they explore the impact of regulatory compliance on IAM solutions and predict future trends in identity-centric security.

In this episode, Matthias Reinwarth and Charlene Spasic continue their discussion on the topic of Zero Trust. They explore the benefits of strong and reliable identities in the context of Zero Trust, including regulatory compliance, business continuity, and resilience. They also discuss the application of Zero Trust to IoT and the role of AI in the implementation of Zero Trust. The conversation concludes with a look at the challenges and future directions of Zero Trust.

In the first episode of this two-part mini-series, Matthias Reinwarth and Charlene Spasic discuss the integral role of digital identities in the Zero Trust framework. They cover how Zero Trust architectures rely heavily on the continuous verification of identities and the enforcement of dynamic access controls. The conversation outlines the challenges and strategies involved in managing identity lifecycles, emphasizing the need for robust identity management systems that adapt to evolving security landscapes. This episode sets the stage for understanding how Zero Trust architectures transform traditional security paradigms by centering on the identity of users and devices.

Matthias Reinwarth and Mike Neuenschwander discuss ITDR (Identity Threat Detection and Response) and its importance in cybersecurity. They explain that attackers are now targeting identities as a vector into enterprise systems, making it critical to have threat detection and response specifically for identity systems. They discuss the key features of ITDR tools, including identity posture, administrative functions, continuous monitoring, and response capabilities. They also highlight the need for collaboration between security operations centers and identity teams. The conversation concludes with a discussion on the evolving trend of identity-centric security and the upcoming European Identity & Cloud Conference (EIC) where ITDR will be a topic of discussion.

Matthias celebrates the 20th anniversary of KuppingerCole Analysts by interviewing the three of the members of the first hour: Martin Kuppinger, Joerg Resch, and Alexei Balaganski. They discuss the early days of the company, the evolution of their work, and the milestones they have achieved. They also talk about the importance of collaboration, the future of KuppingerCole, and their contributions to the industry.

Matthias and Annie discuss real-life use cases of decentralized identity. They explore two categories of decentralized identity use cases: those that radically change the relationship between individuals and organizations, and those that solve specific problems using decentralized technology. They highlight the eIDAS 2.0 regulation in Europe as a driver for decentralized identity adoption and mention the importance of interoperability testing. They also touch on the potential use of decentralized identity in supply chain management and the need for open and interoperable ecosystems.

In this episode Matthias welcomes Osman Celik, a research analyst with KuppingerCole Analysts, to uncover the daily life and career dynamics within the tech analysis industry. They take a glimpse into Osman’s day-to-day activities, exploring the challenges and highlights of being a tech analyst. They discuss essential pathways for entering the tech analysis field, including the qualifications and experiences that bolster a candidate’s profile. Osman offers deep insights into the critical skills and attributes necessary for success in this role, addressing common misconceptions and highlighting the aspects that make the job fascinating. Furthermore, the conversation navigates through the evolving landscape of tech analysis, providing listeners with strategic advice for nurturing a long-term career in this ever-changing sector.

This episode of the Analyst Chat features a discussion with Christie Pugh, who oversees digital services at KuppingerCole Analysts. Christie gives insights into the newest topic release of KC Open Select (KCOS). KCOS is a comparison tool that helps users discover information about identity and access management and cybersecurity solutions. It enables users to make informed business decisions based on their requirements and provides insights into the current market state, direction, use cases, and necessary capabilities. Tune in to learn more about the tool and the new topics coming up in April!

Have you ever wondered what a CISO does every day? Christopher Schütze gives insight into his role as a CISO and the important tasks he performs on a daily basis. He emphasizes the need to build training and awareness with people in the organization and be the go-to person for security-related questions. Christopher also highlights the significance of third-party risk management and the challenges it presents.

Chris Hallum, the Director of the Tanium Platform and John discuss the concept of autonomous endpoint management (AEM). AEM is a new market category that aims to converge unified endpoint management (UEM), digital experience (DEX), and vulnerability management, using AI to automate endpoint tasks. The conversation explores the role of automation in endpoint management, the importance of real-time data, and the potential actions that can be automated in AEM. It also highlights the journey towards autonomous endpoint management and the need for gradual adoption of automation.

Matthias invited Martin to discuss the importance of physical access control in the context of identity and access management (IAM) and cybersecurity. Martin highlights the three layers of access control: physical access, logical access to systems, and authentication and authorization. They also explore the impact of regulations, such as the Digital Operations Resilience Act (DORA), on the requirements for physical security. The conversation delves into the integration of physical access control with identity management systems and the challenges and opportunities in this area. The need for a stronger governance layer for physical access control is emphasized, along with the convergence of physical and logical access. The episode concludes with a discussion on the restriction of access and the importance of telling the story of limited access to customers and citizens.  

In this episode, Mike Small discusses the history and role of digital signatures. He explains that digital signatures are the modern-day equivalent of indelible ink and are fundamental to the security of everything we do digitally. The foundation of digital signatures lies in the use of public-private key pairs, which allow for secure message exchange and verification.

Matthias and Annie discuss the basics of digital identity and decentralized identity. They explore the concept of a digital identity as an electronic representation of an individual's identity in the digital world. They also discuss the difference between centralized and decentralized identity and the role of governments in providing reliable legal identities. The conversation highlights the need for digital identity in accessing services and the benefits of decentralized identity, such as privacy and portability. The episode concludes with a discussion on the challenges organizations face in adopting decentralized identity and the future of identity wallets.

Alexei and Matthias discuss the impact of generative AI on cybersecurity. They explore the shift in public perception towards generative AI and the practical implications for businesses. They highlight the challenges of integrating generative AI into cybersecurity strategies, including data leaks and the need for acceptable use policies. The conversation also covers the use cases of generative AI in cybersecurity, such as research and learning, training, and code generation. The limitations and considerations for security analysts using generative AI tools are discussed, emphasizing the importance of data quality and verifying results. Read Alexei's blog post here: https://www.kuppingercole.com/blog/balaganski/managing-the-risks-of-ai

In this Analyst Chat episode, Matthias and guest Warwick Ashford explore the shift from traditional to next-gen Security Information and Event Management (SIEM) solutions. Highlighting the limitations of traditional SIEM in the face of evolving cyber threats and complex data landscapes, the discussion emphasizes the need for intelligent, automated, and integrated SIEM solutions. The conversation focuses on crucial features for modern Security Operations Centers (SOCs) dealing with high costs, skills shortages, and a surge in security alerts, providing insights into navigating today's intricate digital security landscape.

AI is becoming increasingly common and it appears to be unavoidable. However, is this really the case? Marina and Matthias have a conversation about the convergence of AI, machine learning, and cybersecurity. They highlight the importance of utilizing AI to protect our organizations, as attackers are also employing it. Marina explains the primary risks associated with AI in cybersecurity, such as automation mistakes, data security and privacy issues, and excessive dependence on AI. They also explore how defenders can safeguard their organizations from AI-generated threats and stress the significance of incorporating AI into a comprehensive cybersecurity strategy.

Martin Kuppinger was a virtual guest at SailPoint's SAILforward24 and was invited to have a chat with Matthew Mills about the industry and market, trends and his perspectives. Delve into the future of identity and access management (IAM) as Martin and Matthew discuss the profound impact of AI, decentralized identity, and the regulatory landscape. Gain insights into cybersecurity trends and learn how SailPoint addresses these challenges.

What a milestone! 200 episodes of the Analyst Chat. Matthias and Martin celebrate the journey of the three years of the podcast. Dive into the evolution of cybersecurity and identity management, industry impact, memorable moments, and key insights. From this episode, we will come back to a weekly schedule, so stay tuned for the episode next Monday.

Matthias invited Martin Kuppinger to dissect IAM orchestration and convergence in this episode. Explore their insights on these concepts within identity and access management, from antagonism to coexistence. Stay tuned for upcoming trends and predictions!

The upcoming EU regulation, NIS2, moves closer and organizations will need to act in order to close gaps. Anders Askåsen from Okta and Martin Kuppinger discuss the impact on critical infrastructure organizations and the implications for identity management, particularly in authentication. Learn more about the key considerations, reporting challenges, liability aspects, and the role of identity in meeting NIS2 requirements.

Join Matthias with Martin Kuppinger and Mike Neuenschwander in this special year-end episode. They reflect on the significant cybersecurity challenges of 2023. The conversation delves into persistent issues, innovations, and an outlook on trends for 2024 in the realms of cybersecurity and identity and access management.

Don’t miss this opportunity to join John Tolbert, Director of Cybersecurity Research and Lead Analyst at KuppingerCole Analysts, for this informative webinar to get an overview of ASM technologies and to find out how the ASM market is evolving, how these tools can be used by security teams, and how they can take your cyber defense capabilities to the next level to stay ahead of cyber attackers. He will also introduce KC Open Select, the new online tool from KuppingerCole that helps buyers choose the right IT solutions, and explain how this will help you in choosing the ASM solution that is a good fit for your organization. Attend this webinar to: Discover the latest trends in ASM technologies. Find out what key criteria for evaluating ASM solutions. Learn about KuppingerCole’s Leadership Compass research methodology. Get an introduction to the new KC Open Select tool. See how KC Open Select can help choose the right ASM solution for your organization.

Join Matthias in this special edition of the KuppingerCole Analyst Chat as he takes a look back at the inaugural cyberevolution cybersecurity conference in Frankfurt. The episode features participants and attendees, including Emilie Van der Lande and Steffen Nagel, as well as Christopher Schütze and Berthold Kerl from KuppingerCole. The discussion covers key moments, memorable talks, and insights gained during the event. The guests share their thoughts on the impact of AI, the Cyber Defense Matrix, and the challenges posed by deepfakes. The conversation also explores the need for diversity in discussions and the desire for more community-building aspects in future events.

Join KuppingerCole’s Lead Analyst Alexei Balaganski talking about the need for robust security strategies, the increasing complexity of API ecosystems, and the importance of holistic protection throughout an API's lifecycle. He will present the results of his recently published Leadership Compass on API Security and Management, covering over 40 vendors and their solutions. Alexei will also introduce KC Open Select, a new interactive tool from KuppingerCole that can help buyers compare security solutions and select the ones that fit their organizations’ security and compliance requirements.

In this episode, Matthias and Martin explore the evolving role of AIs in business processes. AIs are becoming significant actors, representing human identities in tools like chatbots and even functioning autonomously. Martin underscores the importance of traceability, access management, and the unique need for distinct AI identities - AIdentities.

Matthias is joined by cybersecurity expert Warwick Ashford to unravel the complexities surrounding Remote Desktop Protocol (RDP) security in the face of rising ransomware attacks. The discussion initiates with an overview of RDP's functionality and its indispensable role in modern businesses. They delve into the reasons behind RDP's susceptibility to cyber-attacks, accentuated by the remote work surge during the pandemic. The conversation takes a critical turn as it explores the precarious balance of remote accessibility and security, highlighting frequent oversights in RDP implementation. Warwick sheds light on the alarming trend of RDP credential sales on the dark web, outlining the severe repercussions for lax security measures. The dialogue then shifts to pragmatic strategies, emphasizing the non-negotiables in RDP security protocols that companies must adopt. Reinforcing the concept of Zero Trust, Warwick advocates for its integration to enhance RDP security frameworks. The episode concludes with a forward-looking perspective, contemplating the evolution of remote access technologies and preemptive measures businesses must consider to thwart emerging cyber threats.

Matthias Canisius von SentinelOne und Martin Kuppinger erkunden die Verschmelzung von XDR (Extended Detection and Response) und Identity Security. Erfahren Sie, warum diese Verbindung die Zukunft der Cybersecurity gestaltet und wie sie Angriffe in ihren frühesten Stadien vereiteln kann.

In part two of "Cybersecurity Fact or Fiction," our esteemed analysts, Matthias Reinwarth, Alexei Balaganski, Marina Iantorno, and Paul Fisher, continue their thrilling quest to distinguish between cybersecurity myths and realities. As they delve into more questions and statements, the suspense escalates, demonstrating that cybersecurity education can be both informative and exciting. Join us for another captivating conversation that will challenge your cybersecurity beliefs and provide valuable insights during Cybersecurity Awareness Month 2023.

In this episode, Marina discusses the intricacies of synthetic data, AI-generated datasets that mimic real data without revealing personal information. Marina and Matthias explore its significant role in cybersecurity, emphasizing its benefits in model training and realistic threat simulations. Marina points out how industries, especially healthcare, utilize synthetic data to meet privacy regulations. The conversation also covers the potential risks of generative AI, such as deep fakes. Companies like Zalando and OpenAI's application of synthetic data are highlighted.

To commemorate Cybersecurity Awareness Month 2023, Matthias Reinwarth, Alexei Balaganski, Marina Iantorno, and Paul Fisher came together to play "Cybersecurity Fact or Fiction". This captivating two-part endeavor serves as a valuable opportunity for individuals to refresh their understanding of security concepts. Throughout the session, the analysts take turns presenting cybersecurity related questions or statements, while their colleagues make informed guesses on whether these statements are accurate or false. This lighthearted, riveting conversation promises to both educate and captivate, as our skilled analysts skillfully discern between truth and fallacy.

Matthias is joined by experts John Tolbert and Osman Celik to unpack the concept of Attack Surface Management (ASM) and its growing relevance in cybersecurity. They discuss the challenges posed by the ever-evolving nature of attack surfaces and the role of ASM solutions in managing these changes. The three discuss cutting-edge trends such as Cloud, IoT, and Dark Web monitoring, underscoring their influence on ASM's future. The role of automation in enhancing ASM efficiency is discussed, alongside the significance of ASM in navigating regulatory compliance and making informed choices in the diverse vendor landscape.

Anirudh Sen, VP Products at Saviynt joins Nitish Deshpande, Research Analyst at KuppingerCole Analysts to explore the realm of Third Party Access Governance and its key distinctions from Identity Governance and Administration (IGA). Discover the evolving landscape of corporate Access Governance, the challenges of securing third-party relationships, and the benefits organizations can gain from effective third-party governance. Learn about the crucial role of AI and automation and gain valuable insights to help your organization stay ahead in managing third-party risks and access.

Join Matthias Reinwarth and Senior Analyst Mike Small in a quick chat on the evolution of Cloud Security Posture Management (CSPM). They discuss its proactive approach, the challenges in implementation, and the role of overarching platforms like Cloud Native Application Protection Platforms (CNAPP). Mike shares insights for smaller organizations and highlights the impact of geopolitics and AI on cybersecurity. Don't miss cyberevolution in Frankfurt this November for deeper insights.

Mike Neuenschwander, Vice President at KuppingerCole in the U.S. and Global Head of Research Strategy, recently had some thoughts about passwordless authentication and wrote a blog about it. Today, he joined Matthias for further discussion about that topic, delving deeper into entropy and how it applies to passwords, and his 2nd Law of AuthN Dynamics. Read the blog here: https://www.kuppingercole.com/blog/neuenschwander/the-second-law-of-authn-dynamics

In this episode, host Matthias and guest Warwick Ashford dive into the EU's Digital Operational Resilience Act (DORA). They discuss its impact on the financial sector's cybersecurity and operational resilience, focusing on key objectives and challenges. The conversation also covers practical aspects like ICT Risk Management, third-party risks, operational resilience testing, and cyber threat intelligence sharing. A must-listen for IT professionals navigating DORA's complexities.

In this episode, host Matthias Reinwarth is joined by guest Alexei Balaganski to discuss the implications of quantum computing for cybersecurity. The conversation covers the fundamentals of quantum computing and its distinction from classical computing. They also address the immediate and potential threats that quantum computing poses to existing cryptographic systems. The episode further explores the state of quantum-resistant encryption methods and the concept of cryptographic agility. The advancements in quantum cryptography are also discussed.

Today, host Matthias and expert Alejandro Leal discuss the dynamic realm of Access Management. They'll touch on its evolution beyond traditional capabilities, the intertwined nature of Access Management and Identity Federation, and the industry-wide shift driven by Covid-19 towards modern solutions. As passwordless authentication and decentralized identities rise, the duo will highlight the potential for innovation and cost-saving in this space.

In this episode, Matthias sits down with Nitish Deshpande to cover the intricacies of 'Securing the Autonomous World by Reinforcing Cybersecurity.' From understanding the challenges posed by automation to the cybersecurity landscape, to the pivotal role of humans amidst rising automation, Nitish offers invaluable insights. They discuss the complexities of training data for ML models, the verification of these models, and the ever-evolving nature of cybersecurity. Nitish also sheds light on the significance of contextual understanding in automation and shares his vision for the future of cybersecurity in an increasingly autonomous world. Finally, Nitish provides his top recommendations for fortifying cybersecurity infrastructure in this dynamic era. Read Nitish's Blog Post: https://www.kuppingercole.com/events/cyberevolution2023/blog/securing-the-autonomous-world-by-reinforcing-cybersecurity

Dive into the world of Privileged Access Management (PAM) and its significance in today's rapidly evolving security landscape with Lead Analyst Paul Fisher and Saviynt's Chris Owen. They explore the challenges organizations face, customer expectations, and the need to reset aspirational goals. Discover the shift towards zero standing privilege, just-in-time access, and the convergence of identity and PAM solutions. Learn about the future of PAM, the role of cloud infrastructure entitlement management, and how user experience is becoming a critical factor in PAM adoption.

In the latest episode of Kuppinger Analyst Chat, host Matthias sits down with KuppingerCole's CEO Berthold Kerl and the Director of the Practice Cybersecurity Christopher Schütze to discuss the upcoming cyberevolution event. Berthold Kerl highlights the event's unique positioning, emphasizing its blend of evolutionary continuity with revolutionary tech disruptions. Set in the heart of Europe, cyberevolution focuses on future predictions, current innovations, and the essence of collaboration. Berthold also mentions a diverse attendee list, from over 30 CISOs to students, spanning continents from Europe to Africa. Christopher Schütze touches on AI as the event's central theme and describes various formats, including keynotes, panels, and interactive workshops. He also introduces the Capture the Flag segment, providing insights into its competitive nature. Berthold spotlights the Pitch Night and its competitive spirit, while Christopher highlights workshop topics like ChatGPT and Ransomware Simulation. In conclusion, Berthold articulates cyberevolution's vision: to complement global conferences like RSA by converging innovation, business resilience, and policy in Europe.

Alexei Balaganski and Matthias discuss the current state and future of AI in cybersecurity. The conversation explores the role of AI, machine learning, and deep learning in bolstering cybersecurity defenses against evolving threats like malware, ransomware, and phishing attacks. Discover the practical applications of AI, its limitations, and the cautious optimism surrounding its potential impact on the cybersecurity landscape. Read Alexei's blog here: https://www.kuppingercole.com/events/cyberevolution2023/blog/ai-and-cybersecurity-a-new-hope-for-cyber-defenders

Join John Tolbert, Director of Cybersecurity Research at KuppingerCole, in this insightful episode featuring George Tarasov, Product Manager at Qrator Labs. Explore the world of multi-vector DDoS attacks and bot detection as they shed light on the increasing complexities and challenges faced by organizations. Learn about the evolution of multi-vector attacks, the rise of bad bots, and the strategies used by attackers to overwhelm target companies. Discover key insights and mitigation techniques to fortify your defenses against these sophisticated threats.

In this episode of the Analyst Chat podcast, host Matthias Reinwarth invites cybersecurity expert Martin Kuppinger to discuss access control tools for business application environments. They focus on two Leadership Compasses authored by Martin, which provide a comprehensive overview of the market for access control solutions centered around SAP and non-SAP systems. Martin shares insights on market segments, vendors, product functionality within the access control landscape. They explore innovative approaches to enhancing security, such as access restriction and controlling break-glass access. Furthermore, Martin and Matthias also explore the organizational aspects of access governance in dynamic LoB application environments. They discuss the challenges that arise when transitioning between new vendors, adopting SaaS solutions, and managing access control in multicloud environments.

Join Matthias as he delves into the world of deep fakes with Research Analyst Alejandro Leal. Deep fakes are manipulated media that can be difficult to distinguish from real footage, posing threats in remote identity proofing attacks and disinformation campaigns. Alejandro discusses the challenges of detecting and countering deep fakes, emphasizing the need for a multifaceted approach involving media forensics, machine learning, public awareness, and policy developments to mitigate the associated risks.

In this episode of the KuppingerCole Analyst Chat, host Matthias Reinwarth continues his conversation with guest research analyst Marina Iantorno to discuss the evolving landscape of artificial intelligence (AI) in cybersecurity. They delve into how attackers are leveraging AI to exploit system vulnerabilities and execute targeted attacks. The conversation also covers the risks associated with AI manipulation by cybercriminals, including the creation of deepfakes. The duo explores the potential of AI in cyber defense, highlighting its role in threat identification, incident response, and predictive threat intelligence. They also discuss the challenges in implementing AI-based cybersecurity solutions, emphasizing the importance of human expertise in this domain. Regulatory and legal implications of using AI in cybersecurity are also addressed. Finally, they provide practical advice on how businesses and individuals can protect themselves from AI-driven threats.

In this episode, Matthias engages in a conversation with Senior Analyst Warwick Ashford about the future cybersecurity landscape and threats. They discuss the notion that there's "nothing new under the sun" in cybersecurity, exploring how attackers use familiar tools and techniques in new ways. They emphasize the importance of understanding the evolving technology landscape and expanding attack surfaces. The discussion also covers strategies for organizations to protect themselves, achieve cyber resilience, and foster collaboration within communities. Attendees of the upcoming cyberevolution event in Frankfurt will have the opportunity to delve deeper into these topics and gain valuable insights into securing emerging technologies. Don't miss this engaging conversation on future cybersecurity threats and the need for a collective approach to defense.

In this episode of the KuppingerCole Analyst Chat, host Matthias and guest Marina Iantorno discuss the risks of deepfakes and the ethical challenges and biases in AI-driven cybersecurity. They explore AI ethics, which includes the importance of fairness, explainability, robustness, transparency and privacy in AI systems. They look at issues of algorithmic bias in AI and the cybersecurity threats posed by deepfakes. Beyond the fundamentals, they discuss mitigation strategies, which are techniques to reduce bias and counter deepfakes, including diverse datasets and adversarial training. They highlight the role of industry, academia, society and regulators in addressing these challenges and promoting ethical AI practices. The episode emphasizes the need for a multi-pronged approach to create a safe and inclusive cybersecurity environment. Read Marina's blog: https://www.kuppingercole.com/events/cyberevolution2023/blog/the-triple-threat-ai-ethics-bias-and-deepfakes-in-cybersecurity

In this podcast episode, Christopher Schütze and Matthias explore the Strategy Navigator by KuppingerCole Analysts, a lean and efficient advisory service designed to tackle common challenges faced by cybersecurity leaders. Learn how it can help optimize your cybersecurity portfolio, increase IAM efficiency, and guide your organization towards a modern Target Operating Model. We discuss the benefits of expert-led workshops, targeted information, and personalized coaching, all aimed at driving impactful action and ensuring robust protection for your organization. Leverage the strategy navigator to discover how to navigate the path towards Zero Trust or to modernize your infrastructure in a multi-hybrid world. Learn more about our Advisory Services here: https://www.kuppingercole.com/advisory