<p>Jeff and Jim welcome back Robert Snodgrass, Principal at RSM, for a deep dive into the RSM Middle Market Business Index cybersecurity report. The conversation covers the confidence gap facing middle market organizations, why digital identity remains undervalued despite being the primary attack surface, non-human identity governance, flat cybersecurity budgets, risk framework adoption, and what good incident response preparedness actually looks like. The episode wraps with a spirited Bitcoin Pizza Day toppings debate.</p><p><br></p><p>Connect with Robert: https://www.linkedin.com/in/robert-snodgrass-7a199412/</p><p><br></p><p>Review the RSM US Middle Market Business Index Special Report on Cybersecurity 2026: https://rsmus.com/middle-market/cybersecurity-mmbi.html?cmpid=ola:45559-idac:bb01</p><p><br></p><p><br></p><p>IDPro new member discount: https://idpro.org/idac/</p><p><br></p><p><br></p><p>Connect with us on LinkedIn:</p><p><br></p><p>Jim McDonald: https://www.linkedin.com/in/jimmcdonaldpmp/</p><p><br></p><p>Jeff Steadman: https://www.linkedin.com/in/jeffsteadman/</p><p><br></p><p>Visit the show on the web at http://idacpodcast.com</p><p><br></p><p><br></p><p>TIMESTAMPS</p><p>00:00:00 Introduction and Scatter Spider social engineering discussion</p><p>00:04:00 IDPro discount code and upcoming conferences</p><p>00:06:26 Guest intro: Robert Snodgrass and the MMBI report</p><p>00:09:05 Defining the modern middle market</p><p>00:12:00 The confidence gap: 96% confident, 18% breached</p><p>00:15:04 Why attackers log in and top identity investment priorities</p><p>00:19:00 Why only 23% of leaders prioritize digital identity</p><p>00:22:00 Internal partnerships as the path to identity program success</p><p>00:25:10 AI, shadow AI, and non-human identity risks</p><p>00:31:00 NHI governance at scale: 45 to 1 ratio</p><p>00:34:50 Cybersecurity budget realities in the middle market</p><p>00:39:00 EU regulation and top-line cybersecurity drivers</p><p>00:42:03 NIST CSF adoption and risk framework value</p><p>00:46:00 Incident response planning: the two-minute drill</p><p>00:52:16 Bitcoin Pizza Day and closing thoughts</p><p><br></p><p>KEYWORDS</p><p>identity security, middle market, cybersecurity, MMBI, RSM, Robert Snodgrass, phishing-resistant MFA, non-human identities, NHI, shadow AI, incident response, NIST CSF, IAM, identity governance, ransomware, tabletop exercises, digital identity, cybersecurity budget, identity program, IDAC, Identity at the Center, Jeff Steadman, Jim McDonald</p>