The Growing Importance of Resilience in IAM and Regulatory Compliance | Tag Cyber Webinar Q7

The focus on resilience in the IAM space is going to grow. Do you think you see resilience playing a more important role with auditors and regulators moving forward? What's your experience?

Yeah, I just wanted to say, my regulation. I think Kayla's right on the money. Thankfully, there is some regulation, and I think it's going to grow. Regulators are usually about a year or two behind, but they will catch up on ensuring your IAM environment has more resilience integrated. Resilience has been a theme for regulation for quite a while.

As Kayla mentioned, resilience means expecting tenant disruptions and cyber attacks but continuing to service your customers as if nothing is happening. That's the new expectation. Identity-driven attacks are going to grow because that's how we're approaching zero trust architecture. The focus on resilience in the IAM space is going to grow.

I wanted to mention a couple of things around regulation. Many of us use the NIST cybersecurity framework as a strategy to manage our programs. It was recently reviewed for the 2024 implementation, the 2.0 framework, and interestingly, two out of five pillars mentioned resilience.

The first one is to defend critical infrastructure. The second is to disrupt and dismantle threat actors. The third is to shape market forces to drive security and resilience. The fourth is to invest in a resilient future and business. The fifth is to forge international relationships and partnerships to pursue shared goals. So, two out of five talk about resilience, and that's obviously a big theme.

Скачать видео