𝗜𝗱𝗲𝗻𝘁𝗶𝘁𝘆 𝗦𝗲𝗰𝘂𝗿𝗶𝘁𝘆 𝗛𝗮𝘀 𝗘𝘃𝗼𝗹𝘃𝗲𝗱 𝗕𝗲𝘆𝗼𝗻𝗱 𝗧𝗿𝗮𝗱𝗶𝘁𝗶𝗼𝗻𝗮𝗹 𝗜𝗔𝗠

Modern enterprises are navigating an increasingly complex identity landscape. The challenge now extends beyond employees merely signing into applications. Today, organizations must account for:

- Workforce and privileged identities
- Customers and partners
- Workload and service identities
- API identities
- Devices and IoT
- Automation and bots
- Autonomous AI agents

This complexity necessitates a reevaluation of the conventional approach to identity management, which traditionally follows the process of 𝗜𝗱𝗲𝗻𝘁𝗶𝗳𝘆 → 𝗔𝘂𝘁𝗵𝗲𝗻𝘁𝗶𝗰𝗮𝘁𝗲 → 𝗔𝘂𝘁𝗵𝗼𝗿𝗶𝘇𝗲 → 𝗔𝗰𝗰𝗲𝘀𝘀.

A contemporary Identity Security Reference Architecture must address a wider range of critical questions:

- 𝗪𝗵𝗼 𝗼𝗿 𝘄𝗵𝗮𝘁 𝗶𝘀 𝗿𝗲𝗾𝘂𝗲𝘀𝘁𝗶𝗻𝗴 𝗮𝗰𝗰𝗲𝘀𝘀?
- 𝗖𝗮𝗻 𝘄𝗲 𝗲𝘀𝘁𝗮𝗯𝗹𝗶𝘀𝗵 𝘁𝗿𝘂𝘀𝘁?
- 𝗪𝗵𝗮𝘁 𝗶𝘀 𝘁𝗵𝗲 𝗰𝘂𝗿𝗿𝗲𝗻𝘁 𝗿𝗶𝘀𝗸?
- 𝗪𝗵𝗮𝘁 𝗮𝗰𝘁𝗶𝗼𝗻𝘀 𝗮𝗿𝗲 𝗽𝗲𝗿𝗺𝗶𝘀𝘀𝗶𝗯𝗹𝗲 𝗳𝗼𝗿 𝘁𝗵𝗲 𝗶𝗱𝗲𝗻𝘁𝗶𝘁𝘆?
- 𝗪𝗵𝗮𝘁 𝗼𝗰𝗰𝘂𝗿𝘀 𝘄𝗵𝗲𝗻 𝘁𝗵𝗲 𝗿𝗶𝘀𝗸 𝗹𝗮𝗻𝗱𝘀𝗰𝗮𝗽𝗲 𝗰𝗵𝗮𝗻𝗴𝗲𝘀?

The architecture outlined here integrates these concepts into a continuous security model:

𝗗𝗶𝘀𝗰𝗼𝘃𝗲𝗿 → 𝗘𝘀𝘁𝗮𝗯𝗹𝗶𝘀𝗵 → 𝗩𝗲𝗿𝗶𝗳𝘆 → 𝗚𝗼𝘃𝗲𝗿𝗻 → 𝗔𝘂𝘁𝗵𝗲𝗻𝘁𝗶𝗰𝗮𝘁𝗲 → 𝗔𝘀𝘀𝗲𝘀𝘀 → 𝗗𝗲𝗰𝗶𝗱𝗲 → 𝗘𝗻𝗳𝗼𝗿𝗰𝗲 → 𝗠𝗼𝗻𝗶𝘁𝗼𝗿 → 𝗗𝗲𝘁𝗲𝗰𝘁 → 𝗥𝗲𝘀𝗽𝗼𝗻𝗱 → 𝗥𝗲𝗮𝘀𝘀𝗲𝘀𝘀 → 𝗠𝗼𝗱𝗶𝗳𝘆 𝗼𝗿 𝗥𝗲𝘃𝗼𝗸𝗲.

A significant shift is recognizing autonomous AI agents as primary identity subjects. These agents should not simply inherit the permissions of the human or application that created them. Their identity, delegated authority, tool access, data scope, action limits, necessary approvals, and activities must be governed explicitly, mirroring the principles applied to machine identities, workloads, APIs, service accounts, certificates, and secrets.

The objective extends beyond merely achieving stronger authentication. It aims for continuous identity assurance where trust is situational, contextually aware, and subject to ongoing evaluation. In this evolving landscape, Identity and Access Management (IAM) is transitioning into a more comprehensive Identity Security framework. The future of enterprise identity architecture must safeguard not only our identities but also the actions executed on our behalf.

Smh and Not sure where to go with this one

Once the threats start, such as suing, that is when I would have to stop the conversation.
I know, right? The problem is, they are there to counsel this cohort, and this cohort is paid and ready to run. There's kind of no going back. I've asked them before to please let me be part of the selection process. I've got a good feel for people and could help them select their cohorts so we don't end up with people like him. Uuuuugh. This is going to be a long bootcamp for me to teach. *sigh*

Smh and Not sure where to go with this one

Thanks. That's the plan. But I think in this case, they want to make sure he's picking the one that he's going to have the most success achieving. I think his pride and the way he talks, like he knows everything already (I've seen some doozy Teams messages, trust me when I say this), might make him try to go for publishing. I really think he will not achieve this. Sadly, he's already threatened to sue the organization (which is nuts.... we barely started, and they're just working on growth mindset!), and if he can't achieve the certification and then feels we didn't counsel him, I fear he may come for the organization later on down the line. We could, however, have him sign something that says he understands the path he's chosen makes it his total responsibility, and if he doesn't meet the standards set forth by CompTIA, then he cannot come back to the organization to litigate or demand the vouchers. We're a nonprofit. It's not like money grows on trees for us!
Once the threats start, such as suing, that is when I would have to stop the conversation.

Smh and Not sure where to go with this one

From an instructional perspective, I would focus on setting clear expectations, documenting the available renewal options, and allowing the candidate to choose the path that best aligns with their experience and goals. If concerns arise, referring back to the objective requirements can help keep discussions productive and reduce opportunities for disagreement, in my honest opinion.

It sounds like having a clear, standards-based conversation early on about what each renewal option requires may be the best way to set expectations and avoid future misunderstandings.
Thanks. That's the plan. But I think in this case, they want to make sure he's picking the one that he's going to have the most success achieving. I think his pride and the way he talks, like he knows everything already (I've seen some doozy Teams messages, trust me when I say this), might make him try to go for publishing. I really think he will not achieve this. Sadly, he's already threatened to sue the organization (which is nuts.... we barely started, and they're just working on growth mindset!), and if he can't achieve the certification and then feels we didn't counsel him, I fear he may come for the organization later on down the line. We could, however, have him sign something that says he understands the path he's chosen makes it his total responsibility, and if he doesn't meet the standards set forth by CompTIA, then he cannot come back to the organization to litigate or demand the vouchers. We're a nonprofit. It's not like money grows on trees for us!

Smh and Not sure where to go with this one

From an instructional perspective, I would focus on setting clear expectations, documenting the available renewal options, and allowing the candidate to choose the path that best aligns with their experience and goals. If concerns arise, referring back to the objective requirements can help keep discussions productive and reduce opportunities for disagreement, in my honest opinion.

It sounds like having a clear, standards-based conversation early on about what each renewal option requires may be the best way to set expectations and avoid future misunderstandings.

Smh and Not sure where to go with this one

Hi-

I am about to start our next A+ cohort. There's someone in there who took the 1101/1102 already back in 2024. In our bootcamps, we give the vouchers out with the classes and prep them hard to pass. This guy has some kind of degree in the field, and I think in his own country where he's from (I think it's India), he's worked in this field in some capacity. I have not started teaching yet, but I've seen some really weird, questionable conversations in the Teams chat- where he seems to present himself as an authority on all things IT, especially Security+ (he does not have anything other than A+ and he took a course on CCNA and got a certificate of completion). I feel like he's a bit prideful and will be a handful as well. And he does a lot of pushback with the organization who runs the bootcamp as well. He will be a firecracker!

Anyway, based on how he writes, the level of writing he has doesn't seem mature. But my bootcamp thinks that if he doesn't want to retake the 1201/1202, or do the CertMaster CE, perhaps he could do the industry experience (assuming he gets a job) or do this last part: Publish relevant articles, white papers, blog posts, or participate in recognized industry activities. I just don't see anyone who doesn't have writing experience being waved through to having their certification renewed. Is this pretty common? We are trying to decide which way to push him over the next couple of days. He's proven to be quite the arguer when presented with a situation he doesn't like or want to do!

Thanks!

DLRoss

CIN TTT Series: AutoOps+ V1

Join us for the new CompTIA Expansion Series certification launch for AutoOps+ V1! Our guest instructor, @Tyler Harris, will lead us through the six-session series covering the exam objectives and provide hands on examples as you strengthen your DevOps skills pertaining to cybersecurity. We will discuss how to cover the content with students and suggest various labs to let students gain hands-on experience as they prepare for certification.

CompTIA AutoOps+ validates your skills to automate, secure, and optimize IT operations across cloud and hybrid environments. As part of CompTIA’s new Expansion Series, AutoOps+ is designed to augment your core IT competencies with specialized expertise in automation, scripting, and infrastructure management. Gain hands-on experience to bridge traditional IT roles with modern DevOps practices.

What: CIN TTT Series: AutoOps+ V1
When: June 23rd - July 9th, 10:00 AM - 12:00 PM CT
Who: Tyler Harris, Instructor, ARIMA Consulting, LLC
Where: ON24
Register Here

View attachment 2637
i have registered

Successfully Earned CompTIA CySA+ (CS0-004)!

Congratulations, Sir.
I am still waiting for my voucher after attending all sessions, and having all the session certs. Hopefully, i get it soon @Stephen Schneiter
I have the same problem. No voucher has been received. @Stephen Schneiter should we still waiting for the voucher?
  • Like
Reactions: profgibs12

Renewing CloudNetX

I am in the same boat with my SecurityX, passed CloudNetX a couple of months ago so kicked that can down the road. My Data+ also expires next year, but I plan to either take the updated version or SecAI and hopefully that would take care of that. But don't have a good plan for SecurityX.
I passed the CISSP and it renewed my SecurityX. Then another version of SecurityX came out so I retested.

I had to retake both Data+ and the beta for DataSys+ since neither had a practical way of achieving enough CEUs.

Successfully Earned CompTIA CySA+ (CS0-004)!

I am excited to share that I have successfully earned the CompTIA CySA+ (CS0-004) certification!

A sincere thank you to CompTIA and the CompTIA Instructor Network (CIN) for providing the Train-the-Trainer (TTT) series and the exam voucher, making this achievement possible.

Special thanks to @Nick Pierce , the CompTIA CySA+ (CS0-004) instructor, for the excellent training, and to @Stephen Schneiter for the support throughout the journey.

Looking forward to applying these skills and continuing to grow in cybersecurity.
Congratulations!

Security+ V8

MBA,

So, as far as I know, there has been no firm date for either the release of SY0-801 or the retirement of SY0-701. The suggested timeframe for the release of SY0-801 is November 2026 (see https://www.comptia.org/en-us/resources/comptia-exam-objectives-under-development/) .

That said, when the exam objectives for any exam have been updated in the past, at most 10-15% of the topics change. When SY0-701 was released, again, in my opinion as an instructor, that was a big change. The SY0-801 exam objectives have been posted for review, and to me it doesn't look like a very great change. About your questions:

#1. No. Exam vouchers are exam-specific. If you buy an SY0-701 exam voucher, it is only good for the SY0-701 exam.

#2. What you learn studying for SY0-701 could apply to SY0-801, but I wouldn't recommend that strategy. I advise students to study for and take an exam. I recommend that your students take the SY0-701 exam.

Regards,

Brian
This is very helpful, Brian, and confirms my instinct. The dates were provided by my CompTIA rep, but I agree that they are probably not final.

Best,
-MB

Security+ V8

The semester starts next week. I will be using the Security+ Learn + Labs in lieu of Security Pro CertMaster (as it will be phased out by next July) and my students purchase the bundle withe voucher and take their exam at the end of Spring semester. I just found out that Security+ v8 will be released this November and the Security+ v7 exam will retire in Mid May 2027. So, I have two questions:

1. If my students purchase the SY0-701 exam voucher next week will they be able to apply to the SY0-801 exam when it is released next May?
2. Would you advice the students to take the SY0-701 or SY0-801 (assuming both are available in mid May)?

-MB
MBA,

So, as far as I know, there has been no firm date for either the release of SY0-801 or the retirement of SY0-701. The suggested timeframe for the release of SY0-801 is November 2026 (see https://www.comptia.org/en-us/resources/comptia-exam-objectives-under-development/) .

That said, when the exam objectives for any exam have been updated in the past, at most 10-15% of the topics change. When SY0-701 was released, again, in my opinion as an instructor, that was a big change. The SY0-801 exam objectives have been posted for review, and to me it doesn't look like a very great change. About your questions:

#1. No. Exam vouchers are exam-specific. If you buy an SY0-701 exam voucher, it is only good for the SY0-701 exam.

#2. What you learn studying for SY0-701 could apply to SY0-801, but I wouldn't recommend that strategy. I advise students to study for and take an exam. I recommend that your students take the SY0-701 exam.

Regards,

Brian

Successfully Earned the CompTIA SecAI+ Certification (CY0-001)!

C
I am excited to share that I have successfully earned the CompTIA SecAI+ Certification (CY0-001) with a score of 868, well above the passing score of 600.
This achievement is the result of 2-3 months of focused preparation, learning, and hands-on practice in the areas of Artificial Intelligence and Cybersecurity.
Through this journey, I gained valuable knowledge in:
  • AI-powered threat detection and security operations
  • Securing AI and machine learning systems
  • Risk assessment and incident response
  • Security analytics and threat intelligence
  • Governance, compliance, and ethical AI practices
A heartfelt thank you to my colleagues, mentors, and everyone who supported and encouraged me throughout this learning journey.
I'm excited to apply these skills in real-world environments and continue growing at the intersection of AI and Cybersecurity.

https://www.linkedin.com/feed/update/urn:li:activity:7490064208525529088/
Congratulations.

Renewing CloudNetX

My CloudNetX expires on August 9, 2027. There are no higher CompTIA certs that renew the certification. There are no non-CompTIA certs that offer full or partial CEUs. You can only apply webinars for 20 of the required 75 CEUs. Are there any realistic options for the rest of the CEUs or do I have to wait until the next version comes out and pass it again?

CompTIA doesn't seem to have a very good renewal path for CloudNetX or any of the Data pathway certifications.
I am in the same boat with my SecurityX, passed CloudNetX a couple of months ago so kicked that can down the road. My Data+ also expires next year, but I plan to either take the updated version or SecAI and hopefully that would take care of that. But don't have a good plan for SecurityX.

Filter