Name: 4 Key Steps to Eliminate Vault Sprawl Across AWS Applications
Start: 2023-10-11T16:26:00Z
End: 2023-10-11T16:26:31.000Z
Location: BrightTALK

CyberArk is partnered with organizations around the globe to offer the most complete and extensible identity security solution, protecting identities and critical assets by enabling zero trust and enforcing least privilege.
This channel is focused on addressing today’s most critical Identity Security challenges in conjunction with CyberArk's Partner Network.

Smart factories are here, but so are the threats. As OT connects to the cloud and AI drives automation, your attack surface is exploding. Are your defenses ready?
Watch the final episode in our 3 part series with PwC to learn how to secure the future of manufacturing by moving from outdated security models to modern, resilient strategies.

Best Practices for building a robust OT strategy - Episode 3

Discover how automation is transforming identity management for modern organizations. This session highlights how CyberArk Identity Governance Automation and MajorKey address complex IGA challenges, ensure application connectivity, and streamline operations and compliance. Learn practical strategies for integrating automation, reducing audit stress, and improving security posture.
What you’ll learn:
• How CyberArk and MajorKey enable automation in complex identity environments.
• Common IGA challenges and automation strategies to overcome them.
• Best practices for integrating and securing third-party identities.
• Real-world IAM automation use cases, including provisioning and access requests.

From Complexity to Clarity: The Next Evolution of Identity Governance

As TLS certificate lifespans shrink to 47 days by 2029, identity teams face mounting pressure to automate. This session explores the intersection of Public Key Infrastructure (PKI) and Privileged Access Management (PAM)/Identity Access Management (IAM)—and how automation can deliver uninterrupted operations, compliance, and improved efficiency in mature environments.
What you’ll learn:
• Why 47 days? Understanding the new TLS certificate standard and its rationale.
• Scope of impact: What is and isn’t affected by the change.
• Implications for identity teams: How shortened lifespans reshape certificate management.
• Automation strategies: Building resilience through automated certificate lifecycle management.
• Integration approaches: Connecting PKI with PAM/IAM systems for seamless operations.
• Operational & compliance benefits: Why automation matters for security and governance.
• CAB Forum influence: How upcoming changes will affect your organization.

PKI Meets PAM: Automation Strategies for the New TLS Certificate Lifespan

Privileged Access Management (PAM) automation can unlock major efficiency and security gains, but timing and strategy are key. This session offers practical guidance on identifying automation opportunities, achieving quick wins, and building stakeholder support.
What you’ll learn:
• How to spot automation-ready PAM workflows.
• When to initiate automation for maximum impact.
• Quick wins that deliver measurable benefits.
• Communicating automation value to stakeholders.

PAM Automation Playbook: Identifying Quick Wins and Strategic Gains

Tom Eggleston, CEO of ProofID, brought together Kevin Bocek, SVP of Innovation at CyberArk, and Paul Heaney, CTO of ProofID, to explore how organisations can prepare for the next era of machine identity management.

As AI agents, bots, and automated systems proliferate, businesses face an urgent need to secure machine identities — a challenge that’s rapidly outgrowing traditional manual certificate management.

From certificates to AI agents - building confidence in the machine identity age

In Episode 2 our panellists will focus on what is required to build a robust OT security strategy and they will discuss best practices for the manufacturing industry.
This will cover how our panellists are starting to see many organisations taking more of a proactive approach to OT security strategies by taking a more threat lead stance where they aim to detect and contain cyber threats as early as possible.

Best Practices for OT Security in Manufacturing - Episode 2

As cyber threats grow more sophisticated, traditional perimeter-based defenses are no longer enough. Zero Trust architecture—centered on the principle of “never trust, always verify”—has emerged as a critical model for securing modern environments, especially at the endpoint level. In this webinar, James Hauswirth, Managing Director, PAM at Cyderes and Dylan Holmes, Business Lead, Endpoint Privilege Manager at CyberArk will explore the fundamentals of Zero Trust and its relevance to endpoint security. We'll explain how the least privilege principle—granting users only the access they need—can prevent lateral movement and unauthorized access. You will gain practical guidance on implementing least privilege on endpoints and: * Understand Zero Trust and its impact on endpoint security * Learn how least privilege minimizes attack surfaces * Explore strategies for enforcing least privilege * Overcome implementation challenges with best practices

Zero Trust Starts at the Endpoint: A Dive into Least Privilege Security

As machine-to-machine communication grows, so does the need to secure identities that enable it. Machine identities—used by applications, containers, devices, and more—are essential for secure operations, yet often go unmanaged, creating major security risks. James Hauswirth, Managing Director, PAM at Cyderes chats with Kevin Bocek, Senior Vice President, Innovation at CyberArk to explore the role of machine identities in today’s digital ecosystem and the threats posed by poor identity management, including unauthorized access and data breaches. We’ll examine the key challenges organizations face—such as scale, visibility, and manual processes—and share real-world examples of security failures and share how to build a strong machine identity security framework, including: * What machine identities are and why they matter * Common risks and vulnerabilities * Key framework components and tools * Automation strategies

Building a Strong Framework for Machine Identity Security

In Episode 1 our panellists will be identifying and understanding the top threats to OT Security in Manufacturing.

This will set the stage for the series by discussing the key cybersecurity threats facing the manufacturing industry, with a focus on Operational Technology (OT) environments.

Best Practices for OT Security in Manufacturing - Episode 1

In this webinar Toby Noble and Deepak Taneja, The Godfather of Modern IGA discuss the importance of Identity Governance and managing access and levels of privilege to ensure the right users have the correct access to the appropriate apps and why.

Securing Identities - Modern IGA

Join CyberArk's Field CTO Brandon Traffanstedt and Red Hat's Principal Technical Account Manager Mike Ralph as they tackle one of the most persistent challenges in enterprise security: integrating Linux systems into your centralized identity management strategy.

Discover how to move beyond the traditional "castle and moat" security approach by implementing modern identity principles across your entire infrastructure. Learn practical strategies for centralizing authentication, implementing least privilege access, and automating security policies for Linux environments. Our experts will demonstrate how both CyberArk Identity and Red Hat Identity Management can bridge these critical gaps, providing you with flexible implementation options regardless of your current technology stack.

This webinar explores the journey toward Zero Trust architecture with identity as the foundation, offering actionable insights on reducing risk through operational access controls, adaptive authentication, and centralized policy management. Whether you're managing on-premises systems or cloud infrastructure, you'll gain valuable knowledge on breaking down the silos that have traditionally separated Linux from your broader identity security program. Don't miss this opportunity to enhance both security posture and operational efficiency across your entire technology ecosystem.

Breaking Down Silos with Identity Management

In modern cybersecurity, identity is a critical focus. The conversation has evolved beyond protecting just human identities to also include non-human ones. To meet this challenge, organizations need a robust strategy that unifies three key pillars: Privileged Access Management (PAM), Identity and Access Management (IAM), and Identity Governance and Administration (IGA). 

Join experts James Hauswirth, Managing Director, PAM from Cyderes, and Chris Maroun, Field CTO from CyberArk, as they share their expertise on building an effective identity security strategy with PAM + IAM + IGA. They will discuss the advantages of: 

·         A platform-based approach for defense-in-depth protection 
·         AI-driven business processes to modernize IGA 
·         Least privilege controls to protect access across all identities, infrastructure and apps

Securing the Identity Perimeter: A Unified Strategy with PAM, IAM & IGA

Traditional Identity Governance and Administration (IGA) approaches struggle to keep pace with the evolving demands of cloud environments, hybrid workforces, and increasingly sophisticated cyber threats. Organizations are challenged with managing a sprawl of identities, enforcing granular access controls, and demonstrating continuous compliance—all while striving for operational efficiency. 

In this session, Deepak Taneja, General Manager, IGA from CyberArk & James Hauswirth, Managing Director, PAM from Cyderes, will explore how a new generation of IGA solutions is revolutionizing identity management. We'll delve into the shortcomings of legacy systems and highlight the transformative power of modern IGA to empower organizations by highlighting: 

·         Modern IGA vs. Traditional IGA: Align with Zero Trust principles and adapt to emerging threats and evolving attack vectors. 
·         Identity Security Challenges: Manage non-human identities and address governance complexities in multi-cloud and hybrid environments. 
·         Simplify Audit and Compliance: Meet regulatory requirements with ease through automated evidence collection and comprehensive audit trails.

Reshaping Identity Governance with Modern IGA

As AI agents become more sophisticated, traditional identity and access management frameworks are being pushed to their limits. This session will focus on best practices and provide a deeper view on managing identity security in environments where AI agents need to authenticate, access resources, and make decisions on behalf of human users and systems.

Episode 2: Identity Security in the Age of AI Agents

Dive into the rapidly evolving world of AI agents and their growing impact. Examine how organizations are deploying AI agents for automation, decision-making, and customer interaction - and the critical security blind spots that emerge. The speakers will discuss the current state of AI agents and the security measures being implemented today.

Episode 1: The Current State of AI Agents and Their Security Implications

The rapid rise of artificial intelligence and generative AI is reshaping the identity landscape, leading to an explosion of machine identities that require strong security controls. From chatbots to robotic processes and system IDs, enterprises must rethink how they secure both human and non-human identities in a digital-first world.

“A lot of companies are leveraging AI for operational efficiencies... But with that, all the chatbots and AI agents are making these data calls. So, those calls need to be governed, and they need to be secured,” says Clay Rogers, VP of Global Strategic Alliances at CyberArk.

This shift has drastically increased the machine-to-human identity ratio. Some organizations now face a ratio of 40 machine identities for every human identity. “It becomes very important to manage those machine identities because if they are not protected appropriately and fall into the wrong hands, we’re now going to deal with a different set of threat actors,” warns Sowvik Chakrabarty, Partner in the Cybersecurity Practice at PwC.

In this exclusive video interview from the Financial Services Cybersecurity Summit 2024, Rogers and Chakrabarty discuss:
o How AI enables proactive risk detection and response – using intelligent systems to predict and prevent identity threats;
o The evolution of security tools – why legacy IAM solutions are no longer sufficient for managing modern machine identities;
o The CyberArk–PwC partnership – how both firms help enterprises build scalable identity security frameworks fit for AI-driven environments.

With decades of experience, Chakrabarty leads IAM programs centered on compliance and risk mitigation, while Rogers brings deep expertise in Zero Trust and identity-first security strategies across enterprise and government sectors.

Watch the full discussion to learn how your organization can stay ahead of the AI-driven identity surge and protect its expanding digital ecosystem.

AI Surge Drives a 40-1 Ratio of Machine-to-Human Identities

Machine identities have proliferated across enterprises, often outnumbering human identities by a ratio of 10 to 50 to 1—and that gap continues to widen. As organizations rapidly adopt cloud-native architectures, AI models, robotic process automation, and connected devices, managing and securing these non-human identities has become a critical challenge.

Many enterprises attempt to solve this issue through technology alone, overlooking the need for robust compliance frameworks, risk models, and governance policies. According to Sowvik Chakrabarty, Principal at PwC and Cyber IAM Leader, this narrow approach is a core reason many programs fall short.

"Where organizations struggle is when they try to tackle it with technology alone, and they don't have the right compliance framework or risk framework and applicable standards and policies that govern how these different machine identities need to be tracked and managed," Chakrabarty explained.

In this exclusive video interview with Information Security Media Group at CyberArk Impact 2025, Chakrabarty explores:

o The potential for agentic AI to push the ratio as high as 200 machine identities per human identity;
o Why centralized governance combined with decentralized management often delivers the most effective results;
o How PwC’s strategic partnership with CyberArk enables clients to address machine identity challenges at scale.

With more than two decades of experience in identity and access management, Chakrabarty has helped global organizations navigate risk and regulatory pressures, build forward-looking security architectures, and align IAM strategies with digital transformation goals.

Why Tech Alone Won't Solve the Machine Identity Crisis

Modern organizations should make sure their privileged access management (PAM) programs evolve at the pace of their fast-transforming IT projects. To help satisfy key audit and compliance requirements, businesses should be sure they are consistently applying PAM controls throughout their environments, from the data center to AI initiatives and cloud-hosted apps.

Register for this webinar to learn about:

o People, processes, and technology strategies to help reduce risk and drive operational efficiencies for a PAM program
o Tips for accelerating time-to-compliance with low-friction, cloud-native privilege controls
o How modern PAM programs can address requirements for regulations llike Sarbanes-Oxley, SOC II, PCI DSS and HIPAA

Prepping for IT Security Audits in 2025: Considerations for Modern PAM Programs

96% of organizations have shifted existing workloads to the cloud or are in the initial stages of doing so, according to Enterprise Strategy Group. Additionally, with software releases entering production faster than ever, security teams lack the visibility and control in the development process to adequately reduce risk. 

Join us in this webinar featuring Tony Palmer, Practice Director, Enterprise Strategy Group and Chris Smith, Product Marketing Director, DevSecOps, CyberArk as they discuss how to optimize cloud security for all identities – human and machine – across the enterprise with CyberArk on AWS. 

You will learn about:
• What steps you should take to improve security over your cloud environments
• The spectrum of identities that CyberArk secures for your business
• Why centralizing secrets management is key to eliminating risk

Enterprise Strategy Group: Modernizing Cloud Security with Identity for AWS

In this episode of Identity Security Insights Live, Kurt Sand, CyberArk's GM of DevSecOps, and Ritesh Desai, Amazon's GM of Secrets Manager for Amazon Web Services (AWS) dive deep into the critical areas that organizations should focus on to secure machine identities and protect their sensitive information.

Securing AWS Workloads: Safeguarding Secrets and Machine Identities

The rise in identities, cloud migration, and sophisticated attacks have led to a surge in identity-based cyberattacks. Experts suggest that with more identities, organizations can achieve more with less.
Sunil Patel of Accenture advises using "just-in-time" identity creation to eliminate threats. Matt Girdharry from AWS highlights the need to secure both human and machine identities. Brandon Traffanstedt of CyberArk notes the importance of prioritizing identities, coining the term "Skittle-sorting conundrum."

In their RSA Conference 2024 interview, Patel, Girdharry, and Traffanstedt discuss how attackers now log in instead of hacking, the use of generative AI in identity security, and the need for every identity to access data across diverse resources.

Accenture, AWS and CyberArk: Why the Future of Security Is Identity

Join this panel of experts from AWS, Accenture and CyberArk as they share their advanced experiences and discuss navigating the intricate landscape against evolving cyberthreats and how every identity, both human and nonhuman, needs the right level of intelligent privilege controls to be secure.

This panel will deliver insights and practical guidance on topics including:

- Staying compliant with future trends and emerging technologies;
- Cloud security best practices;
- People, processes and technology recommendations for secure application development;
- Practical steps to make progress toward the ideal states of zero trust and zero standing privileges.
 

Speakers:

Charles Chu

General Manager, PAM & Cloud Security, CyberArk

 

Bin Du

Senior Manager, Accenture Security - Cloud & Application Security

 

Dudi Matot

AWS Security Segment Business Lead

Securing Tomorrow: A Comprehensive Approach to Identity Security through the Cloud

Join this panel of cloud security experts from AWS, CyberArk, and Healthfirst to uncover critical Identity Security steps to achieve PHI compliance and other key standards for new and existing cloud-hosted apps.


Learning Objectives
The panel will deliver insights and practical guidance on topics including:

Access control requirements in HIPAA, NHS and other healthcare compliance frameworks
Identity Security considerations to satisfy HIPAA Privacy and Security rule requirements. 
People, processes, and technology recommendations for secure application development 
Strategies for ensuring compliance across both lift-and-shift applications and net-new software projects.
Practical steps to make progress towards the ideal states of Zero Trust and Zero Standing Privileges

Building PHI Compliant Apps in the Cloud: Identity Security Best Practices

How do you balance risk reduction and engineering velocity? In this panel discussion, leaders in cloud security are joining together to discuss how to ‘move fast and break things’ – securely. 

We plan to cover:
• Increased attack surface: Compatibility accommodations for lift and shift migrations plus maintaining the hundreds of services offered by cloud service providers now require a greater variety of identities and credentials. This has increased complexity and a need for governance.
• Zero Standing Privileges: Managing risk while maintaining velocity (and customer relationships) is complex. Elevating the right access, at the right time, with the right entitlements is required to securely deliver software on time. 
• Entitlements sprawl: Every relationship between components deployed within the cloud is controlled by entitlements mapped to roles. These entitlements and roles vary greatly across cloud providers. Learn best practices to keep up with the constant changes that make up the dynamic nature of the cloud.
• Misconfigurations: These identity blind spots can cause big risk. In fact, the NSA suggests that misconfigurations are the most common and easiest entry point into a cloud for an attacker. Lock down your access then reduce your entitlements.

Speakers:
Charles Chu – GM Cloud Security at CyberArk
Damon McDougald – Global Digital Identity Lead at Accenture
Yuval Shchory - Head of Global Partnerships, Identity and Access Management at AWS

Moderator: 
Ben Cole, TechTarget

Multi-Cloud Identity Security: Combating a Wide Open Gate

Secure Identities for a Secure Cloud with CyberArk and AWS

As businesses increasingly rely on rapidly deploying innovative apps, running at scale to meet market demand, attackers are relentlessly looking to exploit any weakness. And while security teams can meet the challenge of securing apps at scale, is it possible for security teams to stop asking developers to do things they really don’t want to do?

Security teams need comprehensive tools to secure the credentials and identities used by various applications. To get high levels of developer adoption, security teams must use tools that meet developers where they are—for example, integrating with the existing cloud security tools they already use, such as AWS Secrets Manager.

For security professionals, developers, DevOps, and DevSecOps concerned about securing application secrets, join this panel to discover how CyberArk has partnered with AWS to provide simple and effective secrets management that meets the needs of developers and cybersecurity teams.

Gain practical insights on:

-The challenges security teams face managing and securing application secrets.
-The gap between development teams and security teams requirements for secrets management.
-Approaches for avoiding vault sprawl across projects and achieving security best practices for secrets management.
-How to satisfy developers and security teams using CyberArk Secrets Hub and AWS Secrets Manager simply and effectively.

4 Key Steps to Eliminate Vault Sprawl Across AWS Applications

Innovation

DevSecOps

Scalability

Secure Access

Cloud Security

IT Security

Developers

Attack Vectors

Secure Cloud

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

4 Key Steps to Eliminate Vault Sprawl Across AWS Applications

Presented by

About this talk

CyberArk - Partner Hub