Episode 10 with Candace Worley

Hello, User

Description: As we move through Season Two of Hello User and pull apart top cybersecurity themes and myths around cybersecurity, we welcome Candace Worley, Chief Product Officer for Ping Identity. Candace shares some key takeaways from her time at Ping, along with McAfee and a short stint at Amazon. She talks about what it takes to run a mission-critical solution for companies, the changes she has seen in the industry, and how we can prepare against the innate trusting nature of humans. Key Takeaways: [1:55] Throughout her long tenure in cyber, what changes hasCandace seen in hackers, vendors, and the response companies have to attacks? What were the benefits of working for a company that had a very large footprint in the enterprise space? [3:40] Candace and Richard give their take on the intention behind founders building security solution companies. Is it for the revenue? The security? Or maybe a mix of both. [7:19] Candace talks about the switch companies go through from being security first to software, and the typical implications and expectations that go along with that switch. [13:50] Candace feels there are two things at the core of security: data and identity. [14:30] While working as the Chief Strategist at McAfee, it became clear to Candace that if you have a really strong identity practice in place that is integrated into that security stack, your ability to mitigate the risk of material cyber-attacks is pretty good. [17:41] Where have we fallen down as an industry? [22:50] The fundamental issue in cyber security is that humans are innately trusting. [23:28] Why is Candace fascinated by the idea of moving towards risk-based identity? Quotes: •“Most security solutions founders see a problem that has a potential revenue opportunity associated with it.” —Richard •“If you get your identity wrong, you’d better pray you got the rest of your cyber stack pretty bulletproof, because you just left the front door unlocked.” —Candace •“Vulnerabilities are sexy, yet identity is day-to-day work, and it takes a tremendous amount of effort.” —Richard •“The fundamental issue in cyber security is that humans are innately trusting.” —Candace Mentioned in This Episode: •Candace Worley •Ping Identity