Why Your MSP Choice Matters for CMMC: Trust, Scope, Proof
This post is for federal contractors pursuing CMMC certification and are concerned about choosing the right managed service provider. With regard to CMMC compliance this is not a purchasing decision, it is a governance decision with legal, operational, and assessment consequences. Under the CMMC framework, the organization seeking certification is responsible for protecting controlled unclassified […]
AI is the New Thing, But Identity Management Still Demands a Focus on Fundamentals
Does the AI hype live up to the promise in IDM? There is an unprecedented amount of buzz and even more investment in AI that echoes historical tech bubbles (Dot-Com, Telecom, Crypto) in a way that should have us all reaching for a pinch of salt. Some researchers and industry experts are doing exactly […]
CMMC Level 2 Is Already Here: Why Defense Subcontractors Can’t Afford to Wait
Defense subcontractors face a critical timeline squeeze for CMMC Level 2 certification. With C3PAO assessment queues at 6-9 months and growing, starting late means losing contracts.
6 Best Practices for Privileged Access Management: What Experts Agree On
Privileged Access Management (PAM) is a cornerstone of modern cybersecurity, especially as organizations face increasing threats from insider misuse, credential theft, and lateral movement attacks. Most organizations use PAM as part of a broader compliance risk framework to meet regulatory expectations while supporting operational agility by automating access provisioning and revocation. As you look to […]
Strategies for RBAC Alignment: Pre-Go-Live Baselining and Automation
By Richard Hawes In a previous blog, I discussed the challenges of implementing a Role-Based Access Control (RBAC) framework that will almost surely not be perfectly aligned with all users’ real access for practical reasons. Misaligned entitlements complicate RBAC and access certification, leading to inefficiencies and potential security gaps. This second part of the series explores […]
AI Agents Reshaping of Identity Management and Workflow Automation
By Ron Bowron Artificial Intelligence (AI) is rapidly evolving and has a profound impact on workflow automation, as well as on the Identity Management (IM) landscape. No longer a futuristic concept, AI is transforming how we secure access, streamline operations, and manage digital identities. For executives, understanding this shift is not just an advantage; it’s […]
Key Takeaways from Identiverse 2025
Last week, Identiverse 2025 in Las Vegas brought together more than 3,000 identity professionals, 250+ expert speakers, and industry vendors to exchange knowledge and explore the forces shaping the future of digital identity. The Identiverse keynote speakers did an excellent job setting the stage, with Andre Durand, CEO of Ping Identity, raising the issue of […]
Artificial Intelligence (AI) Opportunities for Improving an Identity Management Program
By Ron Bowron Given the challenges in finding qualified, skilled resources to implement and optimize an Identity Management Program, leveraging Artificial Intelligence (AI) can significantly help reduce the complexity and time required for implementation and program management. Through Idenhaus’s Strategy and Roadmap services and Product Evaluation Workshops we have helped organizations identify the technologies that […]
Top 10 Reasons To Do End-to-End (E2E) Testing
By Hanno Ekdahl Frequently, testing is often shortchanged in the implementation cycle because it is often the last step in the process. Delays in design and development are often mitigated by reducing testing time to meet deadlines, or at least minimizing delays. While this strategy may alleviate leadership’s concerns in the moment, it is unlikely […]
Top Ten Reasons to Become CMMC 2.0 Certified
In today’s increasingly connected world, cybersecurity isn’t just a technical necessity—it’s a strategic imperative, especially for companies in the defense industry or those looking to work with the U.S. Department of Defense (DoD). The Cybersecurity Maturity Model Certification (CMMC 2.0) has emerged as the gold standard for ensuring the security of sensitive government data, and it […]