Karen Epper Hoffman

5 days ago | scworld.com | Karen Epper Hoffman

You’re only as strong as your weakest link—or your weakest identity. That proverb carries fresh urgency in today’s enterprise IT landscape, especially when evaluating the cyber risk introduced by third-party vendors, particularly those offering software-as-a-service (SaaS). When “trusted” turns riskyThe core security dilemma is clear: the more relationships you label as “trusted,” the larger your attack surface grows.

1 week ago | scworld.com | Karen Epper Hoffman

The transition to automation throughout history — be it water wheels, mills, steam engines, or microprocessors — is not necessarily a smooth or immediate change. Hence, as enterprises move toward making their identity access management (IAM) platforms more automated, it is perhaps not surprising that there is a substantial delay in making that happen.

1 week ago | scworld.com | Karen Epper Hoffman

The digital enterprise’s old-boy “network” is establishing a strong, new identity.

2 weeks ago | americanbanker.com | Karen Epper Hoffman

In the payments world, the automated clearinghouse is not the brash, sexy movie star — but the established, well-received but lower-profile character actor. Unlike peer-to-peer or crypto or even contactless payments, banks' business customers depend on ACH for their most basic, regular payments responsibilities precisely because the system is durable, consistent and battle-tested.

2 weeks ago | scworld.com | Karen Epper Hoffman

Is identity really the new firewall?  In the beginning there were usernames and passwords. Today we have the FIDO Alliance, biometrics, Passkeys, and non-human IAM tools to protect the enterprise and hybrid-cloud networks. So, is identity truly the new perimeter, firewall or attack surface? Just ask breach victims JP Morgan, Change Healthcare, Microsoft and so on. Each of these firms are connected by an identity-related attack.