Takeaways from ISACA Chicago Conference+ 2026
By Jack Welling During my time with Idenhaus, we’ve dedicated ourselves to talking with organizations about who has access to what, whether they can prove it, and what happens when the answer is “we’re not sure.” It’s a good vantage point, but it is a narrow one. You hear the same five problems described in […]
What the DoW CMMC Review Means for Defense Contractors
By Idenhaus Consulting The Department of War’s (DoW) July 13, 2026 announcement suspending CMMC Phase II has created immediate uncertainty across the Defense Industrial Base, especially for small businesses and mid-market prime contractors that were preparing for mandatory third-party assessments. The most important point for executive leaders is straightforward: the government paused one part of […]
The Identiverse AI Agent Illusion
By Ron Bowron Why Agents Need Human Sponsors, Not Just App Accounts Walking the expo floor at Mandalay Bay during Identiverse 2026, it was impossible to miss the sea of “Agent Identity” banners. If you closed your eyes, you’d think the identity community had completely solved the next generation of access management. But if you […]
GSA’s New CUI Security Requirements: A Turning Point for Federal Contractors
In January 2026, the U.S. General Services Administration (GSA), the federal agency that manages government contracting and procurement, released updated guidance on how Controlled Unclassified Information (CUI) must be secured when it resides in contractor systems. The new procedural guide titled “Protecting Controlled Unclassified Information (CUI) in Nonfederal Systems and Organizations Process [CIO-IT-Security-21-112-Rev-1]” introduces a […]
If Hackers Had Yelp Reviews
By Navneet Lounsberry Nobody reads the negative reviews. We scroll straight to the five stars, skim the complaints, and convince ourselves that those problems only happen to other people. It turns out, that is also exactly how most organizations approach cybersecurity. Real cyberattacks are not funny. The financial losses, reputational damage, and operational chaos […]
Non-Human Identities and AI Agents: The New Blind Spot in Your IAM Program
By Navneet Lounsberry The numbers tell a story most security leaders aren’t prepared to hear. In enterprise cloud environments, non-human identities now outnumber human users on average at a 50 to 1 ratio, and some organizations have significantly higher ratios. A recent study found that 85% of identity-related cloud breaches involve compromised non-human identities. I’ve […]
Official RPO Status: What It Means for Our CMMC Clients—and What Comes Next
For organizations across the Defense Industrial Base (DIB), cybersecurity is no longer optional. It’s a prerequisite for winning and retaining contracts. At Idenhaus, we have been helping clients meet that standard for years—well before CMMC formalized those expectations. Now, we are pleased to share an important milestone in that work: Idenhaus is a Registered Provider […]
Idenhaus Achieves Official CMMC RPO Status
Atlanta, GA — March 24, 2026 — Idenhaus, a cybersecurity and identity-focused consulting firm, today announced it has been officially designated as a Registered Provider Organization (RPO) by the Cybersecurity Maturity Model Certification Accreditation Body (Cyber AB). This designation recognizes Idenhaus as a trusted partner for CMMC advisory and readiness services, helping organizations across the […]
‘Minerva Meets’ Podcast Interview: Foundations of Identity and Access Management with Idenhaus CEO Hanno Ekdahl
Identity sits at the center of modern cybersecurity, but it’s often the least visible part of the program…until something breaks. In this Minerva Meets podcast episode, Sonal Chandler sits down with Hanno Ekdahl, CEO of Idenhaus, to unpack the foundations of Identity and Access Management (IAM) and why getting identity right is critical to reducing […]
Governing the Vibe: VIBE-SEC for Better IAM
VIBE-SEC for Better IAM By Ron Bowron A CISO’s Strategic Framework for AI-Driven Development There’s a new paradigm in software development, and it’s undeniably seductive. Powered by AI agents and natural language tools, “vibe coding” promises to build new applications in minutes, not months. The pitch is simple: “Describe it, and it’s built”. But for […]