Erik Gustavson’s Post

tl;dr: Reducing blast radius is the difference between having your SOC team handle an incident versus your PR, legal, and finance teams...

Do you ❤️ #identity, working on challenging problems with amazing colleagues and helping people succeed? We just opened a role for customer-facing identity architect to help customers onboard successfully to the SGNL authorization platform. See comments for the application link.

Inbound to #identiverse - good bye San Jose, hello Las Vegas! Looking forward to the best identity conference of the year, spending quality time with my fellow #identity nerds, and showing off all the cool new features of SGNL — come visit me, Atul Tulshibagwale and Scott Kriz booth 2207

Long-time identity expert and SGNL Advisor Ian Glazer from Weave Identity has written an insightful post about why we need to refactor our thinking about the principle of least privilege. At SGNL, we have long advocated that moving towards Zero Standing Privilege is the true goal. For too long we have been stuck with "least privilege" being equal to the total entitlements required to perform a job over time. Unfortunately that time period trends towards employment lifetime (i.e. months and years) or, at best, the time between access reviews. In math terms, privilege ends up being the total area under a graph of entitlements over time. This creates an enormous surface area for attack and exploitation as seen almost weekly with the impact of identity breaches and session hijacking. Instead, we should assume an identity breach has happened and take a zero standing privilege posture from the start. To achieve that, we need to redefine least privilege as the minimum "what is needed right now for the task at hand" and not "what might I need right now." #zsp #authz #authorati

🎉 What a week it's been! I'm thrilled about M12 - Microsoft's Venture Fund's investment into SGNL who have joined Cisco Investments in our recent strategic round. It's such a significant milestone and real validation of the vision Scott Kriz and I had when we quit Google to start SGNL. 📅 As we come into the final weeks of 2023 I find myself grateful to be surround by an amazing and talented team of SGNLers, supportive investors, and thought-leading customers. I can only imagine what 2024 has in store for us all! 🔭 My co-founder Scott Kriz wrote a great blog about everything that's happened at SGNL (https://lnkd.in/gSMmF9CA) -- go check it out. 🙏 And if you haven't yet seen how SGNL works, hit me up and I'll be happy to give you a personal tour of how you can get rid of standing access and achieve a #zerostandingprivilege security posture. #zsp #continuous #caep #authorati

☕ ☀ I woke up early this morning in anticipation of the Cisco Investments and SGNL news! As I'm sure folks who've gone through an investment round or launch know, so much work goes on behind the scenes before the big reveal. Cisco has been a great partner to work with and this couldn't have come together without a huge amount of effort from both teams. As I recall from my days at Google, Larry Page had a quote "always work hard on something uncomfortably exciting" -- those words certainly ring true today as I look forward at the road ahead of us. I'll leave you all with one last quote, from my friend Andrew Peterson: Onward! Here's the full announcement: https://lnkd.in/g8tWD5Ci