Reducing the Identity Attack Surface

Reducing the Identity Attack Surface

Identity is the number one cause in every breach report. So why haven't we fixed it? In this episode of Radio Logic, the show that breaks identity down into something you can actually use, host Anders Askåsen sits down with Tom Hebbron, Head of Identity and Security Architecture at FSP, to unpack "identity debt", why it keeps growing, and how to start clawing it back. They cover why identity data ends up siloed across the business, the speeds at which access decisions have to happen (milliseconds at the edge versus months in forensics), what the Verizon and IBM breach reports keep telling us, why annual access reviews leave data 11 months stale, why no access should ever be handed out without an end date, and how dynamic, context-aware access beats the role-based access trap.

CISOs: Take Charge of Identity

Why do so many identity projects fail? And how do the best ones actually get done? In this episode of Radio Logic, the show that breaks identity down into something you can actually use, host Anders Askasen sits down with Michael Ribaudo from CyberIAM to unpack why identity projects stall, drag, or collapse, and what separates the ones that succeed. They cover why identity work never really ends, why an outcome-based approach beats a feature list, why the CEO (not IT) should sponsor the project, the trouble with role-based access when a 60,000-person bank ends up with 350,000 roles, the shift to policy-based and continuous access, and the honest advice Michael gives any customer about to scope a new project.

The State of Identity Security

Why is identity the number one attack vector? And where do you even start fixing it? In this episode of Radio Logic, the show that breaks identity down into something you can actually use, host Anders Askåsen sits down with Simon Moffatt from The Cyber Hut to unpack why identity became the most lucrative target for attackers, and how organisations can claw back control. They cover the perfect storm of legacy tech and identity sprawl, why we still haven't solved human identity (let alone machine and agentic AI), the toddler-with-a-Ferrari problem of giving AI agents access, why zero trust is a concept and not a product, how regulations like NIS2 and DORA are forcing identity onto the board's agenda, and the shift from identity as a tactical chore to a strategic business enabler.