Author: Thomas Edgerton

Thomas Edgerton, Avatier's MVP award-winning Market Analyst and Performance Consultant in information technology, IT security, instructional technology and human factors, blogs on topics ranging from leadership to national security, innovation and deconstructing the future.​

Verizon Data Breach Investigations Report and Recommended Security Controls

Verizon Data Breach Investigations Report and Recommended Security Controls
  • May 5, 2016 //
  • Thomas Edgerton

  • Best practices for security controls Verizon’s 2016 Data Breach Investigations Report analyzes exploitation data collected last year. Not surprising, the distribution of incidences are similar to the previous year. The…read more →

Gartner Identity and Access Management for Third Parties

Gartner Identity and Access Management for Third Parties
  • April 28, 2016 //
  • Thomas Edgerton

  • Limiting third party security risks. Today’s enterprise requires IT organizations to fully engage external users. This audience includes such as contractors, business partners, vendors and suppliers. The Gartner Identity and…read more →

Uncovering and Recovering from Medical Identity Theft

Uncovering and Recovering from Medical Identity Theft
  • April 14, 2016 //
  • Thomas Edgerton

  • Medical identity theft bites. I’m often advising others on medical identity theft. (May I add— more than I would like.) They for some reason equate my enterprise security career with…read more →

The Panama Papers Represent Failed Leadership and Information Security Controls

The Panama Papers Represent Failed Leadership and Information Security Controls
  • April 7, 2016 //
  • Thomas Edgerton

  • Hacktivist expose an information security truth. The Panamanian legal firm Mossack Fonseca’s leak exposes a systemic security lapse. In revealing the obscenely wealthy businessmen and heads of states that used…read more →

FBI Charges State Sponsored Hackers Target Organizations with Weak Password Policies

FBI Charges State Sponsored Hackers Target Organizations with Weak Password Policies
  • March 31, 2016 //
  • Thomas Edgerton

  • Strong password policies deter state sponsored phishing. Perhaps you saw the news last week. Three members of a Syrian hacker collective were charged in federal court. The criminal complaints cite…read more →

The Force Awakens and the Gartner Identity Governance & Administration Magic Quadrant

The Force Awakens and the Gartner Identity Governance & Administration Magic Quadrant
  • March 17, 2016 //
  • Thomas Edgerton

  • May the force not mislead you. The Gartner Identity Governance Magic Quadrant was released and why did I stand in line? The Identity Governance & Administration (IGA) Magic Quadrant is…read more →

Verizon Data Breach Scenarios Stress Identity Management with Multi-Factor Authentication

Verizon Data Breach Scenarios Stress Identity Management with Multi-Factor Authentication
  • March 10, 2016 //
  • Thomas Edgerton

  • Strong authentication is cybersecurity’s best defense. The Verizon Data Breach Digest, Scenarios from the Field summarizes over 500 cybersecurity investigations. The Digest informs organizations about security attacks, the methods used…read more →

Extended Enterprise Security Risks Countered by Access Management

Extended Enterprise Security Risks Countered by Access Management
  • March 3, 2016 //
  • Thomas Edgerton

  • No end to extended enterprise security risks Management of assets, access requests, and user identities continues to change. No longer are employees the only ones accessing enterprise systems. No more…read more →

2016 Cyberthreat Defense Report Points to Identity and Access Management as Essential to Controlling IT Security Risks

2016 Cyberthreat Defense Report Points to Identity and Access Management as Essential to Controlling IT Security Risks
  • February 25, 2016 //
  • Thomas Edgerton

  • When IT security fails, blame the users. The Cyberthreat Defense Report shares among the IT security community information on how organizations are fairing. Of the 1,000 survey participants, 40% were…read more →

Principles of Access Management Control

Principles of Access Management Control
  • February 11, 2016 //
  • Thomas Edgerton

  • Remove unauthorized users automatically Access management involves effective management of all users’ and their enterprise access. Enterprise access management encompasses suppliers and providers as well as employees. Too often, organizations…read more →