#453 - Treating Identity Like a Product with Eve Maler
Source: YouTube · Identity at the Center · published Oct 12, 2026 · 1:03:04
[BLUF] Eve Mailor argues that digital identity must be treated as a strategic product to make it relevant to the board level, addressing the critical challenges of "identity debt" and the evolving security landscape driven by AI 2:15.
Key Takeaways:
• Identity is often structurally misplaced within organizations, leading to a "homelessness" problem where no single leader is accountable for its strategy or success 9:18.
• Treating identity as a product helps bridge the gap between security requirements and business goals, such as user experience and monetization, rather than viewing them as competing interests 13:40.
• "Identity debt" refers to the accumulation of technical and organizational issues from past decisions, which is now accelerating due to the capabilities of AI in social engineering and attacks 28:23.
• The concept of "intent" in AI-driven identity involves defining the purpose of access and ensuring that agents operate within contractual boundaries, rather than just managing permissions 33:21.
• UMA for Agents (U4A) is an emerging initiative designed to solve third-party agent access problems by focusing on resource-centric governance rather than managing individual agents 44:22.
[Closing statement]
The discussion highlights the urgent need for organizations to elevate identity from a technical infrastructure concern to a core business product, ensuring it can withstand modern AI-driven threats while delivering value.
Sources:
- 2:15 Introduction of Eve Mailor and her book "Mastering Digital Identity."
- 9:18 Discussion on the structural placement of identity teams in organizational charts.
- 13:40 Explanation of the "identity as a product" metaphor.
- 28:23 Definition of "identity debt" and its relation to technical debt.
- 33:21 Analysis of "intent" and governance for AI agents.
- 44:22 Overview of the UMA for Agents (U4A) project.
Generate CPE Credits
Generate a professional CPE document from this video's transcript.
Estimated credit: 1 CPE hours
Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.
Topic: Identity & Access Management. Commonly maps to: Identity and Access Management (IAM), Security Architecture and Engineering. Exact CISSP domains are assigned during generation.
Free account. One generation at a time, with a daily limit.
CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.
Transcript Preview
First 800 characters of the transcript
This is Identity at the Center. >> Welcome to the Identity at the Center podcast. I'm Jeff and that's Jim. Hey Jim. >> Hey Jeff. How are you? >> Oh, not so bad. Yourself? >> Doing great man. I'm so excited about today's episode. We have the author of a great book. For those who are not watching this on YouTube, uh it's called Mastering Digital Identity. Um, it's a great book. I mean, really check it out. And if you're not watching us on YouTube, you might want to check out our YouTube channel. You go to idacodcast.tv bring you right there. And feel free to subscribe. Feel free to like a video. That always helps the show. But even if you're listening by v byia audio, uh I did want to say like I went back through the book uh as I was preparing kind of show notes and some of our questions and…