Archives: Articles

Sila’s latest whitepaper explains the expanding landscape of digital identity services, and how to make your digital identity a business enabler. With the evolution of digital identity services, their key takeaways are: 

1. Identity targets automating access provisioning

2. Identity programs focus on checking audit and regulatory boxes. 

3. Digital identity services drive business success through secure identities, systems, and data

Over the past decade, organizations have made great strides in their digital identity services programs. Previously, identity was managed by IT as an infrastructure function to automate provisioning. As time and technology progressed, digital identity became a security program driven by audit and compliance needs including Sarbanes-Oxley (SOX) and Federal Identity, Credential, and Access Management (FICAM). This shift resulted in several organizational benefits, such as increased visibility into access to high-value assets and improvements towards a “least privilege” model. 

Organizations often have a wide array of programs and teams to meet business and security needs, including IGA, PAM, SIEM, SOC, WAM, DAG, and CIAM. However, the emphasis on a compliance-driven security approach has resulted in many programs being implemented in a siloed manner. Even though they all fall under the same cybersecurity umbrella, they often have separate stakeholders, drivers, and roadmaps, resulting in a discordant set of services being independently implemented and administered.

Breaking down these silos is critical to increasing security and supporting business needs. Each program has its specific purpose but organizations benefit from coordinating and integrating their individual contributions into a broader cybersecurity ecosystem. 

Click here for exclusive access to the full whitepaper!

We’re looking forward to our Transformational CISO Assembly with Keynote Speaker Ben Rhodes this November, and leading up to the event, we recommend that you make Rhodes’ The World as It Is: A Memoir of the Obama White House the top of your summer reading list. 

Rhodes’ inside-the-bubble account gives a glimpse into the Obama Administration like never before, with George Packer of The New Yorker claiming it to be “The closest view of Obama we’re likely to get until he publishes his own memoir.” His memoir details behind-the-scenes insight on some of the most gripping moments during the Obama Administration- waiting out the bin Laden raid in the Situation Room, responding to the Arab Spring, reaching a nuclear agreement with Iran, leading secret negotiations with the Cuban government to normalize relations, and confronting the resurgence of nationalism and nativism that culminated in the election of Donald Trump. Rhodes’ novelistic style gives clarity and depth to the events we lived through, and much like the speeches he’s written, captivates the audience from the start.

Find out why the Guardian named The World as It Is one of the books of the year! Click here to purchase your copy. 

We are excited to hear Ben Rhodes’ wealth of knowledge in his keynote presentation this November! 

About Ben Rhodes:

Ben Rhodes is the author of the New York Times bestseller The World As It Is; a contributor for NBC News, MSNBC and Crooked Media; the co-chair of National Security Action; and an advisor to former President Barack Obama. From 2009-2017, Rhodes served as a Deputy National Security Advisor to President Obama. In that capacity, he participated in nearly all of President Obama’s key decisions, and oversaw the President’s national security communications, speechwriting, public diplomacy and global engagement programming. He also led the secret negotiations with the Cuban government which resulted in the effort to normalize relations between the United States and Cuba, and supported the negotiations to conclude the Joint Comprehensive Plan of Action (JCPOA) with Iran. Prior to joining the Administration, he was a Senior Speechwriter and foreign policy advisor to the Obama campaign. From 2002-2007, he worked for former Congressman Lee Hamilton, supporting his work on the 9/11 Commission and Iraq Study Group. A native New Yorker, Mr. Rhodes has a B.A. from Rice University and an M.F.A from New York University. 

Transformational CISO Assembly

The Millennium Alliance is thrilled to present our bi-annual Transformational CISO Assembly, taking place in Nashville, TN.

With the instances of cyber attacks increasing, businesses of all sizes are working tirelessly to secure their networks, devices, and data. Fortune 500 organizations are especially vulnerable as they have big data pools and thousands of people who need access. CISOs need to plan for worst-case scenarios, stay ahead of the latest IT Security transformation technology, and maintain their company’s information assets, all without losing sight of the corporate culture.

Are you interested in becoming a sponsor for this event? Click here today to learn more >>

Are you a CISO interested in attending this event? Inquire here today to find out if you qualify for Millennium Membership >>

The Millennium Alliance is gearing up for our Transformational CISO East Coast Assembly next week with Erin Joe, Director, US Government Cyber Threat Intelligence Center. We’re looking forward to hearing from Erin Joe’s wealth of knowledge given her 22+ years in the national security and criminal operations space with the FBI.

About Erin Joe:

Erin Joe is an attorney and senior FBI cyber professional who served as the Section Chief of Cyber Operations at FBI before joining CTIIC as its second Director. Ms. Joe has more than 22 years’ experience in national security and criminal operations as a Special Agent in FBI, most recently leading the Bureau’s strategy and response to nation-state cyber threats emanating from the Middle East and Africa and to cyberterrorism threats worldwide.

In 2015, Ms. Joe became the first Section Chief of FBI’s Office of Partner Engagement, responsible for managing FBI’s Domestic Director of National Intelligence program; engaging with federal, state, and local partners; and addressing issues common to both law enforcement and the IC—including emerging cyber threats.

In addition, Ms. Joe served as Assistant Special Agent in Charge, FBI Los Angeles, where she oversaw intelligence, surveillance, and aviation programs; established collection priorities; directed operations; and integrated intelligence and operations across the office’s areas of responsibility. Ms. Joe has served in FBI Field Offices in Oklahoma City, Salt Lake City, and New Haven, where she was Acting Special Agent in Charge. Before joining FBI, Ms. Joe served as an administrative law judge in Dallas, Texas.

Ms. Joe has completed senior executive leadership courses at the Naval Post Graduate School, Kellogg School of Business, Carnegie Mellon, and Harvard. Ms. Joe earned a BA in English, with high distinction, from the University of Illinois and a JD from Ohio State University. She is a member of the Oklahoma Bar Association and the State Bar of Texas.

Ms. Joe succeeds Tonya Ugoretz, a career FBI intelligence analyst who served as CTIIC Director for almost three years.

Transformational CISO East Assembly

Nearly 80% of applications are considered at-risk, do you feel confident in your ongoing security testing program? Market Research has shown that Fortify on Demand® is a great option for those seeking a comprehensive security strategy, and their most recent case study with Coca Cola FEMSA shows just how flexible the system can be when posed with the challenge of increasing security and identifying vulnerabilities at scale. The Chief Technology Security Officer at Coca Cola FEMSA, Jair García Osorio, noted, “We looked at alternatives but found it a real challenge to find a solution that identifies a wide range of vulnerabilities and makes them visible in an easy-to-action way. Once we saw what Fortify on Demand was capable of, we knew it was the solution for us.

This application security as a service integrates static, dynamic, and mobile application security testing with continuous application monitoring. Scalable for application growth, Fortify on Demand can be delivered in a flexible cloud or hybrid environment, to align with application demand. Osorio elaborates, “The clear reporting within Fortify on Demand enables us to translate technical issues into business ones. Once a vulnerability is identified, there are different ways of fixing it. We can give the vendor a report which explains exactly what code changes need to be made to improve the solution. We have also created fixes for common problems that can be implemented automatically through the use of digital signatures.”

Fortify on Demand® allows you to find vulnerabilities early and manage risk as you go. Their static application security testing is proven to save development time by 25% with 2x’s more vulnerabilities identified and a 95% reduction in false positives reported, and their dynamic assessments even have the ability to mimic real-world hacking. If you’re interested in reading more about the latest Fortify on Demand® case study with Coca Cola FEMSA, click here for exclusive access!