Multi-factor authentication proves a real person logged in. It never proves who owns the credential.

Chris Skipworth, CEO of Passpack, joins Martin Hinton to talk about credential management and cyber insurance. The conversation covers credential sprawl, the offboarding failures behind most small business breaches, and why the insurance industry has an access problem of its own.

Skipworth puts one question to business owners. How long would it take you to identify who owns which credentials? Most cannot answer it.

Also in this episode: what AI changed for attackers, why browser password managers are a bad idea, where MFA stops being useful, and three steps a small business can take this week.

Read the full article: https://cyberinsurancenews.org/credential-management-cyber-insurance-passpack/

CHAPTERS

00:00 Introduction

01:05 How the simple password became complicated

02:12 Security in the 1990s and what got skipped

06:39 What a credential actually means today

09:30 Offboarding and dormant credentials

12:41 The cost problem for small businesses

15:25 Credential sprawl and the question owners cannot answer

20:08 Human and non-human identity

24:20 Why insurance has an access problem

29:59 What AI changed for attackers

37:44 Friction, convenience and security

42:33 Cyber insurance and credential controls

46:27 Passkeys, MFA and what comes next

50:55 Default passwords and browser password managers

55:00 The human side of security

60:26 Three things to do on Monday morning

Music licensed through Soundstripe.Code: 6VZLZBGCKQMDWBMW