Identity Fabric: How AI Enhances IAM & Modern Cybersecurity
Source: YouTube · IBM Technology · published Aug 16, 2025 · 17:06
[BLUF] IBM and HashiCorp experts introduce an "identity fabric" approach to bridge the gap between human and non-human identity management, as 80% of cyberattacks involve identity 0:29-0:38.
Key Takeaways:
• Organizations typically manage human and non-human identities separately, creating security gaps 0:29-0:33
• Non-human identities fall into four categories: machine identity, API keys, PKI, and AI/agents 5:11-5:39
• Six critical identity use cases include identity observability, frictionless access, centralized secrets management, dynamic credentials, privileged access management, and ITDR 7:22-13:04
• The recommended approach follows three phases: Inspect (discover secrets and shadow identities), Protect (implement security controls), and Govern (lifecycle management) 14:13-14:40
This series will explore how to implement these strategies using existing tools to create a comprehensive identity fabric.
Sources:
- 0:29-0:38 Disconnect between human and non-human identity management
- 5:11-5:39 Four categories of non-human identities
- 7:22-13:04 Six critical identity use cases
- 14:13-14:40 Three-phase approach to identity management
Generate CPE Credits
Generate a professional CPE document from this video's transcript.
Estimated credit: 0.5 CPE hours
Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.
Topic: Identity & Access Management. Commonly maps to: Identity and Access Management (IAM), Security Architecture and Engineering. Exact CISSP domains are assigned during generation.
Free account. One generation at a time, with a daily limit.
CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.
Transcript Preview
First 800 characters of the transcript
Hi, I'm Bob Kalka, Global Identity Lead for IBM. And I'm Tyler Lynch. I'm the field CTO for HashiCorp, now part of IBM. And today we're kicking off a multipart series on cyber trust. But we're focusing on identity and access management. But we're looking at this from a perspective that's different than the typical discussion we have with clients today, because in most shops we walk into, we have a separate discussion with IT about human identities and a separate discussion with DevOps or platform engineering on non-human and machine identities. And the dis ... disconnect between the two in most shops is evidenced by the fact that 80% of all cyberattacks today involve identity somehow. So it is clear that the way organizations are doing this today—with disconnected teams and tools—uh ... su…