Identity attacks rarely rely on sophisticated techniques. More often, attackers exploit simple gaps in everyday processes like service desk verification, account recovery, and user authentication. As organizations work to create seamless employee experiences, many have unintentionally reduced friction in ways that also increase exposure. This interactive discussion explores how CISOs are rethinking identity security by balancing usability with stronger verification, challenging long-held assumptions about awareness training, and identifying where operational convenience may be creating unnecessary risk.

Key Takeaways:

• Identify hidden identity risks by examining everyday IT and service desk processes through an attacker's perspective.
• Balance security and user experience by reducing unnecessary friction without weakening critical identity controls.
• Reevaluate the role of awareness training and discuss what additional safeguards are needed when human error remains inevitable.