Name: IAM Evolution: Enhancing Security in a Hybrid World of Evolving Threats
Start: 2024-08-21T13:18:00Z
End: 2024-08-21T13:18:48.000Z
Location: BrightTALK
Rating: 5

Centered on intelligent privilege controls, CyberArk provides the most comprehensive security offering for any identity - seamlessly securing human and machine identities accessing workloads from hybrid to multi-cloud, and flexibly automates the identity lifecycle all with continuous threat detection and prevention – protecting organization’s identities and most critical assets by enabling Zero Trust and enforcing least privilege.  

CyberArk is unveiling the next generation of Machine Identity Security. Watch demonstrations of Secrets Hub and Certificate Manager as they tackle challenges like secrets sprawl and evolving TLS certificate requirements. See how new SSH Management and Code Signing capabilities protect privileged access and software integrity, keeping modern enterprise environments secure. Blending actionable insights with breakthrough product innovations, the session reveals practical strategies to uncover hidden machine identities, automate lifecycle management, and secure machine-to-machine communications.

Accelerating Machine Identity Security: Bringing Order to the Chaos of Modern Machines

Join CyberArk's security researchers as they unveil critical vulnerabilities in the Model Context Protocol (MCP) and demonstrate how organizations can protect themselves in the AI era. This session explores the emerging security challenges as AI applications become increasingly integrated into enterprise environments through standardized protocols like MCP.

Discover how the Model Context Protocol, designed as the "USB Type-C port for AI applications," creates new attack vectors through tool poisoning, command injection, and composability chaining. Learn about real-world attack scenarios where malicious MCP servers can hijack execution flows, steal sensitive data, and compromise endpoint security. Our researchers will demonstrate live examples of these vulnerabilities and show how attackers can exploit the trust relationships between MCP hosts, clients, and servers.

Explore comprehensive mitigation strategies using endpoint privilege management solutions to create security boundaries in the MCP ecosystem. See how application control, least privilege enforcement, and file access restrictions can protect your organization's AI infrastructure. Understand the importance of implementing proper security controls as your teams adopt new AI tools and protocols, ensuring they can innovate safely without exposing your organization to unnecessary risks.

Secure endpoint for the AI-era threats: Overprivileged MCPs are now a new class of vulnerabilities

Privileged access management remains vital to enterprise security, but the landscape is evolving. Identity-driven threats are rising, and privilege now extends beyond IT admins to nearly every employee. Organizations face pressure from cyber insurers, tool sprawl across 11+ identity solutions, and a surge in machine identities, which can outnumber humans 80 to 1.
 
Join Todd Thiemann, Principal Analyst at ESG, and Ryne Laster from CyberArk as they explore evolving privilege infrastructure toward zero standing privilege while enhancing PAM capabilities. Gain strategies to tackle today’s challenges and prepare for future threats, including AI complexities.
 
· How just-in-time access and zero standing privilege reduce attack surfaces and credential theft risks
· PAM’s role in cyber insurance underwriting and premiums
· Rationalizing identity tools while maintaining top functionality
 
Watch this webinar to learn how to transition to a zero standing privilege architecture.

The Future of Privileged Access: Solving Today’s and Tomorrow’s Challenges

In a hybrid, cloud-first world, every human identity connected to an endpoint becomes a potential attack vector. And when you're managing thousands of users and devices across a large enterprise, the stakes—and the complexity—skyrocket.  That’s why CyberArk and Computacenter are zeroing in on how large organizations can enforce strong, scalable MFA strategies at the endpoint—without slowing people down.

Secure Every Human Identity at the Endpoint Five MFA Endpoint Use Cases for Large Enterprises

The 47-day TLS certificate lifecycle mandate is closing in — and the margin for error is shrinking fast. Whether you're just starting to explore automation or already planning your rollout, this session will show you how to go from patchwork solutions to an end-to-end, scalable strategy.

We'll move beyond building a foundation for certificate automation and dive deep into operationalizing automation, monitoring compliance in real time, and scaling your strategy across platforms and teams.

To bring these concepts to life, we’ll be joined by Jay Armstrong, Expert Cybersecurity Engineer at Discover, a Division of Capital One, who will share how the bank automated certificates on its load balancers with CyberArk Certificate Manager. He’ll discuss the challenges they previously faced, the approach they took to streamline certificate operations, and the impact of automation on reliability and efficiency across their infrastructure.

We’ll also cover real-world maturity milestones and ROI metrics to help measure progress and secure buy-in.

You’ll leave this session understanding how to:

Automate certificate renewal at scale — including deployment
Reduce operational toil and human error across hybrid and cloud environments
Monitor automation success, SLA compliance, and audit readiness
Track key KPIs and use the maturity model to plan your next milestones
Estimate ROI based on time savings, reduced outages, and risk reduction
Take charge of your certificate management strategy.

47-Day Chaos to Control: How to Scale Certificate Automation Before Enforcement Hits

Discover how automation and AI-powered identity governance are transforming compliance. In this session, you’ll see how organizations can cut manual effort, accelerate audits, and achieve continuous audit readiness—without disrupting daily operations. Learn how to shift compliance from a costly obligation to a strategic enabler that frees skilled staff for innovation, drives business growth, and strengthens enterprise resilience and trust.

Governance Without the Grind: Driving Growth Through Automated Compliance

Join CyberArk experts Uzi (VP, Machine Identity Solutions) and Darren (Senior Product Manager) to learn how to eliminate secrets vault sprawl and unify governance across your organization.

See how CyberArk Secrets Hub gives security teams full visibility and control over secrets in AWS, Azure, GCP, Kubernetes, HashiCorp Vault, and CI/CD tools—all from one platform. Discover eye-opening insights like 12% of secrets never being used, 50% never rotated, and 4% duplicated across vaults.

Explore how automation and API-first workflows reduce risk, maintain developer velocity, and simplify compliance. Watch live demos showcasing unified dashboards, automated onboarding, and centralized auditing that bridge the gap between security and development.

Eliminating Vault Sprawl: Centralized Secrets Management Across AWS, Azure, GCP and HashiCorp Vault

Attackers are fully focused on utilizing the identity when infiltrating organizations through their endpoints. Most security teams are still fighting these threats with disconnected tools, creating dangerous blind spots that let threats slip through undetected.

Don’t let siloed security create blind spots. Join us for this webinar where our speakers, Niels van Bennekom from CyberArk, and Nadav Shai Kanon from Palo Alto Networks, will walk through the importance of breaking down silos in your organization’s security to protect the identity at the endpoint.

What you’ll learn:
● The risks organizations face through approaching endpoint protection and security in a siloed manner.
● What a defense-in-depth strategy looks like when protecting endpoints.
● How to transform your organization’s endpoint security from reactive to proactive with solution integrations.

Bridging security gaps with defense-in-depth: Tackling vulnerabilities of siloed security

Manual user access reviews (UARs) are time-consuming, error-prone, and increasingly unsustainable. In this webinar, CyberArk will show how automating Identity Governance and Administration (IGA) transforms UARs from a compliance burden into a strategic advantage.

We’ll cover:

The State of Performing User Access Reviews (UARs)
The UAR Process and People Involved
Challenges with the UAR Process
How CyberArk IGA Automates the Process
Calculating the potential Value of UAR Automation
Whether you're in IT, security, or governance, this session will help you quantify the potential impact of automation and make a compelling case for change.

Unlocking Business Value Through Automated User Access Reviews

Prepare for 47-day TLS certificate lifecycles with scalable automation best practices

The clock is ticking. With the 47-day TLS certificate lifecycle mandate fast approaching in early 2029 – and the first phase of enforcement going into effect in March 2026 – organizations must act now to avoid outages and compliance risks.

It’s time to build your execution plan.

This is the first webinar in a two-part series designed to help teams understand the new certificate reality and take immediate, actionable steps toward automation. In Part 1, you’ll learn how to assess your current certificate landscape, identify ownership gaps, and enforce renewal policy to lay the foundation for a scalable automation strategy, using proven benchmarks and real KPIs.

You’ll walk away from Part 1 with an understanding of how to:

- Inventory and categorize all public TLS certificates across hybrid environments
- Prioritize high-risk certificates and detect shadow issuance
- Establish certificate ownership and enforce lifecycle policies
- Configure alerting and notification
- Use the Certificate Automation Maturity Model to benchmark readiness

47-Day Reality Check: How to Prepare for the Certificate Automation Shift

As threat actors grow more sophisticated, traditional session management is falling short. Security teams need agile, identity-first strategies to stay ahead.

In this webinar, experts will unpack how organizations are evolving their privileged access management (PAM) programs by embracing just-in-time access, Zero Standing Privilege, and modern session controls to strengthen resilience and reduce risk.

Watch to explore real-world use cases and discover how modern session management helps:

Advance Audit & Compliance: Turn compliance into a strategic asset with detailed audit trails, granular insights into privileged sessions, automated reporting, and streamlined regulatory alignment.
Accelerate Digital Transformation: Secure privileged access across multi-cloud environments with just-in-time (JIT) and Zero standing privilege (ZSP) access without slowing the business down.
Walk away with practical insights to modernize your session management architecture and meet today’s most pressing security demands.

Modernizing Session Management: Building Resilient PAM Architectures

In today's rapidly evolving business landscape, mergers, acquisitions, and digital transformation initiatives present unique challenges for managing privileged access. This webinar explores modern Privileged Access Management (PAM) strategies essential for organizations undergoing significant structural and technological changes. Our security experts will share battle-tested approaches for maintaining robust access controls while enabling business agility during critical transition periods.

Key topics include:

 Securing privileged accounts during IT infrastructure consolidation
Implementing Just-in-Time access for temporary integration teams
Establishing Zero Standing Privileges (ZSP) as the foundation for secure business transformation
 Automating access governance across merged technology stacks
Balancing security with business velocity in cloud transformation
Managing third-party vendor access during system integration
Building a scalable PAM framework that adapts to organizational change

Whether you're planning an acquisition, managing a post-merger integration, or leading a digital transformation initiative, this session will provide actionable insights for modernizing your privileged access strategy. Watch now to learn how leading organizations are leveraging PAM to accelerate business transformation while maintaining security and compliance.

Securing Privileged Access During Business Transformation: PAM Leading Practices for M&A and Digital Evolution

In today's rapidly evolving digital landscape, organizations face unprecedented challenges in protecting their most critical assets: identities, permissions, and access. Join us for an exclusive webinar that unveils how modernizing enterprise identity security through Zero-Standing Privileges (ZSP) and Just-in-Time (JIT) access – delivers the most advanced approach to identity security for the modern enterprise.

Key Highlights:

Deep dive into holistic Identity Security program best practices
Comprehensive solutions that address complex enterprise challenges
Real-world strategies for mitigating identity-related risks
ZSP access strategies to eliminate standing access across all identities
Competitive advantages of a unified Identity Security Platform
Gain actionable insights into how modern identity security solutions provide more than just privileged access management – delivering a transformative security strategy that empowers businesses to innovate securely.

Modern Enterprises Require Comprehensive Identity Security Programs: Best Practices from the Leader in Identity Security

Identity teams are struggling to securely govern human and machine identities in a hybrid application environment. Any workforce user can become high-risk based on access, privileges, and actions. Defining and governing job-appropriate access across the user lifecycle is complex but critical. 

Traditional IGA tools have tried to address identity governance challenges such as user access reviews and provisioning, but haven’t evolved as rapidly as the application and identity estate, resulting in lengthy, expensive, and incomplete deployments. 

CyberArk offers a new approach. 

Tune into this video to see Modern IGA in action and learn how automation and integration simplify identity management.

Identity Governance Made Simple

Join CyberArk experts for an on-demand webinar on transforming privileged access reviews with a unified IGA + PAM approach. Learn how to simplify audits, reduce risk with Zero Standing Privileges, and improve visibility across all identities and apps.

Mastering Privilege Access Reviews: Identity Security ProTalks

Join CyberArk's Field CTO Brandon Traffanstedt and Red Hat's Principal Technical Account Manager Mike Ralph as they tackle one of the most persistent challenges in enterprise security: integrating Linux systems into your centralized identity management strategy.

Discover how to move beyond the traditional "castle and moat" security approach by implementing modern identity principles across your entire infrastructure. Learn practical strategies for centralizing authentication, implementing least privilege access, and automating security policies for Linux environments. Our experts will demonstrate how both CyberArk Identity and Red Hat Identity Management can bridge these critical gaps, providing you with flexible implementation options regardless of your current technology stack.

This webinar explores the journey toward Zero Trust architecture with identity as the foundation, offering actionable insights on reducing risk through operational access controls, adaptive authentication, and centralized policy management. Whether you're managing on-premises systems or cloud infrastructure, you'll gain valuable knowledge on breaking down the silos that have traditionally separated Linux from your broader identity security program. Don't miss this opportunity to enhance both security posture and operational efficiency across your entire technology ecosystem.

Breaking Down Silos with Identity Management

Join CyberArk and FIDO Alliance to explore how passkeys are redefining enterprise authentication. You’ll learn practical deployment strategies, from provisioning to lifecycle management, plus best practices for integrating passkeys into both modern and legacy applications. Walk away with a clear roadmap to eliminate passwords, reduce attack surfaces, and deliver a friction‑free experience for all users.

Beyond Passwords: How to Put Passkeys Into Practice

Scattered Spider is one of today’s most notorious and advanced threat groups, known for targeting identities with relentless precision. Their tactics are constantly evolving, blending social engineering, MFA fatigue, and privilege escalation to infiltrate environments and inflict damage quickly.

In this exclusive webinar, CyberArk’s Andy Thompson dissects the group’s latest activity and shows how attackers like Scattered Spider are exploiting identity.

Then, David Higgins, CyberArk’s Senior Director, Field Technology Office, walks through actionable strategies to defend your organization and detect risky behavior before it’s too late.

What You’ll Learn:

- Scattered Spider’s evolving tactics, techniques, and procedures (TTPs)
- Common blind spots threat actors exploit through identity
- How to strengthen your defenses against identity-based attacks
- Actionable steps to reduce exposure and prevent privilege abuse

Scattered Spider Tactics Revealed

Take an in-depth look into the journey toward a passwordless future, examining both its benefits and the challenges organizations face during the transition. We’ll outline the necessary steps and the critical milestones, to ensure progress and results.  

Through customer stories and practical examples, dive into the most common roadblocks and effective strategies for overcoming them. We’ll also detail a high-level implementation plan and timeline to help guide your organization's transition. Join us to gain actionable insights and a clear path to a passwordless experience.

Why Passwordless Adoption Stalls: Strategies to Overcome Roadblocks

IT and security teams are overwhelmed by password chaos—resets, weak credentials, outdated policies, and security workarounds. Join CyberArk to learn why consumer-first password managers fall short for enterprises and what to look for in an enterprise-ready solution. 

Discover how to reduce IT burden, strengthen security, gain deeper visibility into workforce credentials, and deliver a seamless user experience with a robust password management solution.

The Enterprise Security Gap: Not all Password Managers are Created Equal

In a constantly shifting digital landscape, organizational changes - whether from growth, mergers, regulations, or evolving workforce needs- can significantly impact security. The question is: can your identity platform keep pace?

Join CyberArk to discover how to build a robust identity security foundation that spans your entire workforce—from every employee to every endpoint.

Change is Constant. Five Ways to Evolve Your Workforce Identity Practice to Keep Up

Identity and Access Management (IAM) solutions are no longer just ways to provide easy workforce access to applications, but critical tools in security and zero trust network access, creating the first line of defense against malicious actors and insider threats. 

In this panel discussion, experts from CyberRisk Alliance and CyberArk share their insights into trends in this evolution, as well as the best practices to leverage IAM solutions as a strategic security asset to protect organizations from cyberattacks, data breaches, and other threats. They discuss the challenges and opportunities of IAM in the era of cloud, mobile, and social technologies, as well as the emerging trends and innovations in the field.

Beyond IAM Achieving True Identity Security

"As organizations work to secure human identities, the identity attack surface has expanded significantly. While an ability to timely detect and respond to identity-based threats is crucial, proactive reduction of the identity attack surface is essential to prevent the majority of cyber incidents, especially targeted attacks and APTs.  

In this session, CyberArk experts cover five actionable strategies to reduce your identity attack surface. From safeguarding endpoints to protecting sensitive data, you’ll learn how to close your workforce access security gaps from modern attack vectors to help reduce the risk of identity-based attacks. "

5 Ways to Reduce Risk by Minimizing Your Identity Attack Surface

Watch this informative session to learn how privilege has shifted in the modern workplace, how today’s threat actors take advantage of this shift and what organizations can do to safeguard their high-risk workforce to better implement a Zero Trust strategy.

Every User Can Be a Privileged User: Securing Access for High-Risk Workforce Users

As the digital landscape continues to evolve, identity management remains a critical component of cybersecurity strategy. Watch this informative webinar where leading experts provide essential guidance on navigating identity challenges and opportunities. You'll learn the latest trends in identity and access management (IAM), emerging threats, and best practices for securing digital identities in an increasingly complex environment. Viewers will gain valuable insights into innovative technologies, regulatory developments, and practical strategies for enhancing identity resilience.

Key Identity Guidance with SC Media and CyberArk

As more than 70% of reported security breaches are attributed to identity-based threats, questions arise about the relevance of the perimeter concept in safeguarding workforce identities and endpoints. Today, organizations must embrace a security-first mindset that transcends the traditional perimeter, adopting comprehensive identity and access controls that span the identity lifecycle from login and beyond. Watch this session to explore how to adopt the identity perimeter approach, the inherent risks in using traditional controls and the importance of a holistic IAM strategy in safeguarding workforce identities and endpoints that extend beyond the perimeter.

Going Beyond the Perimeter: Strategies to Secure Your Workforce and Endpoints

Identity threats are rapidly evolving, rendering traditional access management inadequate. The surge in SaaS applications, cloud use, and remote work has made it more likely for workforce users to have admin rights formerly exclusive to IT admins. Users with such privileges face constant risks as attackers exploit identities to breach and navigate enterprise networks. To counter this, organizations must implement additional controls tailored to the specific actions, applications, or data accessed—both at login and beyond—to enhance workforce security. Watch CyberArk experts as they delve into these foundational controls, also known as Intelligent Privilege Controls, and share how you can easily apply them across your workforce to safeguard users navigating the intricate risk spectrum in their daily activities.

Securing the Modern Workforce: The Power of Intelligent Privilege Controls

As more than 70% of reported security breaches are attributed to identity-based threats, questions arise about the relevance of the perimeter concept in safeguarding workforce identities and endpoints. Today, organizations must embrace a security-first mindset that transcends the traditional perimeter, adopting comprehensive identity and access controls that span the identity lifecycle from login and beyond.  Watch this session to explore how to adopt the identity perimeter approach, the inherent risks in using traditional controls and the importance of a holistic IAM strategy in safeguarding workforce identities and endpoints that extend beyond the perimeter.

This is session one of the ""The Identity Security Model for Trust"" webinar series. Identity is the ideal security perimeter, but it’s under constant threat. While user identities and access controls defend digital assets, recent security breaches highlight vulnerabilities in the Identity security perimeter.

Watch CyberArk experts as they dissect modern cyber threats, extract valuable lessons and share proactive steps to fortify your organization’s security perimeter. Ideal for security, IT and security-focused professionals, this webinar offers insights to mitigate modern risks and protect your organization against evolving Identity based attacks.

Strengthening Your Security Perimeter to Shut Down Identity-Based Attacks

We get it, passwords are hard to remember, time consuming to manage and open your company to risk. Yet, even though most modern apps integrate with single sign-on solutions to sidestep password management woes, some apps still require a stand-alone username and password credentials. As a result, employees need a way to access these business apps seamlessly, from any device, at any time. Watch to learn how CyberArk Identity Workforce Password Management solves this challenge by enabling companies to capture, store and manage password-based credentials; securing credentials with multifactor authentication; providing users with frictionless access to business applications.

Manage Workforce Passwords Seamlessly Across the Enterprise

Beyond the Login: Security First IAM

Join this session as we delve into the challenges with using traditional IAM solutions, what to look for in modern IAM solutions, and how to utilize intelligent privilege controls and transition from an outdated IAM framework to one that is tailored for your organization’s business and security needs in today’s threat landscape.

IAM Evolution: Enhancing Security in a Hybrid World of Evolving Threats

Access Management

Identity Management

Secure Access

Security Framework

Security Strategy

Security Management

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

IT Security

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

IAM Evolution: Enhancing Security in a Hybrid World of Evolving Threats

Presented by

About this talk

CyberArk