2022 Consumer Survey – Aubrey Turner, Ping Identity

This is texturing TV. Hey everyone, welcome back to techstruck TV. I'm really happy to introduce you to he's the First Time guest here with us on Deck strong TV.

Aubrey Turner Aubrey is with Ping Ping Identity is I don't know obvious. They still called pink identities. It's just paying these days.

We are still called Ping Identity. Although you can call us paying but some folks might get as confused with the golf company. Yeah.

Yeah, you know clubs are balls are right adding the identity helps to make sure that we're talking about the right the right people. You know, what if the tech industry doesn't get any better. You might want to look at the golf business, whatever.

Let's hope not that bad joke. Anyway, welcome to Tech strong TVs pleasure to have you on here. Why don't we start with a little bit about Aubrey who you are what you do with paying your background?

Yeah. I'll just give you the the career highlights Alan and thanks for having having us on this this morning pleasure to be here. So yes, I've been in the Cyber and identity space for about 20 years.

I started my career in banking took me to the Consulting World, which is really where I got exposed to the cybersecurity while I'm used to call it information security back when I got started and then that took me into identity and privacy a couple other stops along the way and been here at paying coming up on three years. So it's been a you know, if I was asked if I plan this out if I had envisioned kind of my my career I would have I couldn't have you know planned it or or laid it out. I'm just kind of awesome that I'm in the cyber security space and so just taking advantage of the opportunities that kind of came my way.

So that's that's how it all came together. I love it. So what's your current position with pink?

Yes, I we've got a a team called the executive advisor practice. And so I lead that team. We're really focused on answering, you know some questions for our customers and providing them insight into what's happening in the identity space many of our customers are curious, you know, they're looking at their roadmap.

They're curious about paying's Vision like where is ping-headed and they're curious about you know, the trends and patterns that are that they see or may have heard about that are you know evolving in the identity and cybersecurity space. So, you know, how do they lean into zero trusts passwordless, you know, they may be on a likely are on a journey to cloud and at the end of the day, you know, they're looking for again insight and a vision from from King looking for us to help enable those Journeys that that they're on and how can sort of ping Map to their you know, they're larger cybersecurity journey be a team player as part of something like, you know, zero trust strategy. So yeah, my my team, you know leads those conversations provides those data points and really the end of the day.

It's really about trying to enable our customers in their journey and help them maximize their investment in in paying and really solve, you know, their cyber security challenges. So that's that's what I do. Love it.

Yeah, just you know again level setting Aubrey. I think a large a large part of our audience is familiar with Ping Identity. They heard the name, you know, and I know as we were talking off camera.

I remember when paying first kind of came out I was it was out in Colorado at the time and then you know, they were out there too and You know, they they kind of pioneered the whole Federated identity. space which today we It's almost like a take for granted given that we have this Federated identity. Kind of functionality, of course the board but of course.

You know over the last I don't know 15 20 years identity and access management IAM, you know Federated identities only one piece of that much larger more important. You know Street it's a strategic level. Yeah type of solution like, you know organizations need today, but why don't you I mean if you had to describe paying To your wife's family or something like that, right?

You're in-laws. What the heck is what we do for a living. Anyway, how would you describe what Ping does?

Yeah, so it reminds me kind of an old joke when I first got into cyber people ask me what I did and I used to say, I'm the S in HTTPS, I hear you. Know I you know when people ask me what I do or what what kingping does, you know often talk about how we secure their login experience, right? They are and provide a better experience a friction, you know, our mission is really frictionless identity right across the user journey and whether that be whatever type of identity that is whether it's a Workforce be to be and really consumer which is a which is a major Focus for for paying and so when I explain them, I you know, there are lots of applications and you know some of the largest banks some of the largest Healthcare our paying customers and and friends and family you may be using paying and don't even don't even realize it right and so we're trusted by, you know, some of the largest Enterprises on the on the planet certainly around the globe to To secure identities and really, you know manifest a frictionless experience.

That's really like a lot of our Focus. So we we see this, you know, we have this kind of, you know, borderless world, right and kind of use that term like where we have the network is the internet, you know, we've got partner and supply chain and data and AppSec and things that are running in data centers and cloud and ping becomes that identity control plane that allows that that again that frictionless access for for users and secures that entire Journey if I pull it down to the kind of three things, you know identity, you know who you are certainly authentication or is this really you right and then authorization Alan can you do this specific act or you know consume this this service and high for focused around that and higher Focus around the user journey. I can say one last thing to you know, paying certainly really focus on standards.

We you know, we sit on a lot of Standards we've contributed a lot of Standards bodies to your point. You know in the Federation space SAML we're getting ready to do that. Again.

We're getting ready to Pioneer decentralized and we're part of pioneering decentralized identity. So stay tuned for so a lot more on that and really putting Flipping third party trust models to first party trust models. And so if you've heard a term decentralized or self Sovereign identity, you know, maybe even personal identity.

We are getting ready to and part of pioneering how we change the model in Paradigm in terms of how you and I use identity to access these things that you know, whether it be Health Care banking, you know, we're trying to buy stuff make it easy as possible. So that's what that's what paying paying does and that's what again we're hyper focused on that frictionless identity experience secure convenient, you know fast all of those things. I love it.

Yeah. I know we're gonna talk a little bit about 2023 what it looks like but if you don't mind me driving into the weeds a little bit. Yeah.

Humor me. So one of them, you know, I remember last year saying that I am identity access management is sort of the killer app for cloud security, and I don't think That's a revelation. I think it's pretty yeah people understand how important.

identity and access management is not just for cloud, but for I mean so much of digital transformation and everything that way, you know going through in the world. We we the whole system is sort of based on I got to be able to know that you're you And because you're you while I'm gonna let you do right? Yep.

But a trend that I've seen over the last I don't know six months. Maybe maybe just bubbled up to me in the last six months. Sort of the the cleaving of identity from access.

Right. It used to be identity went with access. It was joined to the hips sort of but now I'm seeing.

Look you being you is good. But just because I know you are you doesn't necessarily mean I'm Gonna Let You Go, Here There and Everywhere. I'm gonna have some other Technologies some other Solutions that control access independent of identity.

I wonder if you wouldn't mind commenting on that Aubrey. Yeah. I I think what it comes immediately to mine and kind of why you're seeing that is zero trust right across strategies right that at every interaction right?

I'm really going to and again if you think about, you know, then identity identification authentication and authorization. I'm not just the the days of sort of a binary authentication event or that ceremony those days we've we've got to move past them because of just the threat and and the sort of the landscape of threats and you know, if you're leaning into zero trust whether you think it's a concept or principle or what are your whatever your perspective is on it. Um the idea that I need to be more Dynamic I need to leverage things like wrist signals to understand, you know, not only that.

Hey, are you who you are, you know, are you a real person? Are you a bot? But subsequently can you actually do this specific thing and being able to you know, what what we're referring to in some cases as policy-based access controls or rule-based access controls.

So I think you know if I'm gonna summarize all of that Alan I think probably zero trust is why you might be seeing makes that perception that that separating but honestly, I I think that the lines are gonna blur somewhat between identification and authentication right I think because of You know the the need to have stronger, you know, identity proofing and identity verification those lines are going to largely blur because if if I have the strongest assurance that you are who you are. You're not a robot. You're not a bot then can I just take you right into that authentication and you know Grant you access manage your entitlements in a sort of a more modern kind of seamless way, but that's probably why I'd say zero trust is probably why you're seeing some of those some of your assumption that those those lines are probably again a little bit further apart when in fact, I think like I said identity and authentication probably get a little closer together eventually.

Fair enough, you know, and I think certainly zero trust was a big. A big theme in 2022 will continue to be in 2023. Yeah, 2023 is already off to a A rocking or rocky start.

Yeah, you know in the tech industry was seeing stuff. We haven't seen in a long time, but he in cyber were you know, the bad guys never take a day off Audrey? They don't they yeah, they certainly don't yeah, but seeing stuff, but what do you see?

I mean, let's talk 2023 with you kind of what are your what's your kind of crystal ball telling you? Yeah, I mean, you know, I'm I'm predicting you know, I'm not Nostradamus Allen but you know, we're gonna see much much of the same right as you're well aware, you know, they're hundreds. If not thousands of you know breaches a lot of them related to Identity compromise, you know stolen stolen credentials.

So we're gonna see much of that. You know, we've got you know, and I love the point that you brought up right. There is a cyber War being waged, you know that most of us are not even really aware of right?

It's it's unlike conventional war that we're not seeing it. Right? And so there's a, you know, nation states and organize crime and all the stuff.

So there's all this stuff going on that again, you know, Common folks probably the general public is probably not not necessarily aware of or immediately impacted by so, you know in terms of what you know, I think will happen in in 2023. I think like I said, we're you know, we're gonna see. you know more interesting things like identity proofing because like some of those some of those factors and some of those some of those threats and the We're gonna continue to see the you know, the migration to to Cloud.

I think we'll continue to live in a hybrid hybrid state but here earlier point right identity needs to become that that control plane that secures all of that. Right? As I said to network is is the internet and you've got data and AppSec running and you know various places.

How we secure that you know, identity-centric zero trust is a key theme. So I you know all I continue to see that but that migration to two cloud. The the regulatory environment, you know as it relates to privacy and legislation, you know, there were you know, two new privacy laws, California and I've been getting the other state the implications of that just for here in the United States.

But also if you think about sort of global privacy laws, the implications for identity are our significant our massive and so, you know, I how that influences how we how we protect You know protect people's identity make sure their their information is secure honor their you know, respect their consent and privacy. I think I'll see those are sort of key themes going into 2023, you know part of our part of our mission here at paying is really focused on taking the unknown to known, right and again as that user goes through that. I that that Journey securing each of those interactions.

So our focus on that and a lot of these things are a lot of things that are happening in the world today certainly, you know, our our really impact how we do our jobs. And and again how we help our our customers solve these identity challenges and be more secure. I guess I'll really add to that supply chain and resiliency.

I think are some key sort of themes that we've got to be gotta be focused on and not only resiliency in our and our customer, you know. Our assign platforms, but certainly critical infrastructure all of those things. I think are are Trends and themes and then we're seeing a conversations things that again in my role.

Our customers are asking us about it. You know, what are you seeing? How are all those dealing with this?

So those are some things I think that you know will again can continue themes and and like I said the threat Lance landscape I think is just going to continue to continue to remain the same. If not more. I don't have any I don't have any actual data, right but like it seems like when there's more economic uncertainty there's good actors that potentially become Bad actors and that's that's again another.

Well just really we're paying is kind of focused. I think right people looking for it's a lot more enticing to people to say I can make quick Buck exactly go. All right, I'm going it's just a little late instead of black cat.

Yeah and become look that's for times. That's for people right? Yeah.

It's just a little legal. That's just like being a little pregnant. That's not a thing, right?

You know, but not a thing and you know part part of what we're trying to do is is really provide the intelligence to detect you know, is this to somebody have a propensity or are they moving from being that good actor to a bad actor and providing our customers the intelligence to make those decisions? As part of that whole journey right identity signals, you know authentication certainly and then that the authorization which is really where we're seeing by the way. And this is a kind of a I think we're gonna see far greater interest in that policy those policy-based access controls Dynamic authorization.

I've you've proven who you are now, I've got to figure out can you actually do these things under these circus circumstances and being able to apply risk in the context of that authorization and making that Dynamic and again, those are things that we're hyper focused on helping our customers with Agreed I think a word you used right in the beginning of our interview today applies as well. That's frictionless. Yeah, we got to do all of this without being too much of a Pia to user.

Yeah. Yeah, right. It's got to be frictionless.

It's kind of they got to be able to hop skip and jump and do what they need to do, whether they're a consumer or a B2B or whatever people want to be able to get on with it. The other thing is resiliency. I don't think I don't think security people let alone the rest of the world.

Understand the part of the mission is resiliency, right? We may not be able to stop every incident now. We prevent every incident from bringing us to a standstill.

Right. Can we recover can we reroute whatever the case may be? Resiliency is a big part of it Aubrey.

We're we're overtime. But man, I I really enjoyed our conversation today. We didn't even mention website for people want to get more information about paying and maybe about the group you're heading up over there.

Yeah, yep. com and I always make myself available to our customers and Prospects that are, you know, curious not only about paying certainly, but, you know, the larger identity and cybersecurity space, so, you know here to support those those conversations. Really again.

Thank you for your time, Alan and thank you great conversation. of returner from Pain and he taking time out of I guess their sales kick off me. They come talk with us here on techstroke TV or we thanks so much come back and visit us soon.

Yeah loved it. Thank you. Alrighty, this Alan Shimel for Tech struck TV.

We're gonna be back in a moment.