# Jason Edwards

Jason Edwards shares practical cybersecurity guidance on identity and directory defense, social engineering, and cybersecurity operations training.

- Profile: https://b2binfluencer.marketing/creators/jason-edwards/
- LinkedIn: https://www.linkedin.com/in/jasonedwardsdmist
- LinkedIn followers: 77,646
- Topics: cybersecurity, social-engineering
- Based on 10 dated posts, latest 2026-10-08

## Summary

Jason Edwards is most useful for practitioner-facing identity security, help desk social engineering, and directory defense content.

- Best for: A cybersecurity training company building an identity and access management course or practitioner module.
- Not for: Consumer identity-protection apps or general business associations seeking broad non-specialist awareness campaigns.
- Check first: Confirm sponsorship terms, pricing, deliverables, audience guarantees, booking process, and recent comparable results.

### Takeaways

- MGM post traces reported service-desk impersonation and access reset to wider operational disruption.
- Directory defense post advises separating privileged accounts, limiting service-account rights, reviewing permissions, monitoring high-value groups.
- CCOA post promotes ISACA learning resources in audio, study-guide, and flash-card formats.

## Main ideas

- **The help desk is part of the security perimeter, not just customer service**: Edwards treats support work as an identity control plane. Password resets, MFA recovery, account unlocks, and identity verification scripts are administrative power, so a rushed support process can override an organization’s strongest authentication controls. The perimeter includes the person on the phone, the questions they ask, the data they trust, and the exceptions they are permitted to make under pressure. Social engineering, in this framing, is not just about tricking someone into clicking a link; it targets support processes built for convenience, speed, and empathy, turning them into a privileged access channel.
- **Identity and directory control is where one compromise becomes many**: Edwards argues that directory services sit at the center of identity, authentication, and access, so an attacker who controls that layer can spread damage fast through password resets, privilege escalation, unauthorized group changes, and lateral movement. A single compromised administrator or over-permissioned service account can turn one incident into a much wider identity breach. The remedy has two equally weighted parts. Prevention means enforcing MFA for administrators, separating privileged accounts from everyday use, reviewing permissions regularly, and limiting service account rights. Detection means logging and alerting on key actions: privilege changes, account creation, replication activity, and failed or abnormal sign-ins. Edwards’s summary: good identity security is not only about who gets in, but about spotting misuse quickly and limiting what any one account can do once compromised.
- **Security should look like real operations work, not theory**: The throughline is that security knowledge has to hold up in practice: threat evaluation, vulnerability thinking, incident detection, and defensive decision-making under pressure, not just abstract frameworks. Edwards uses concrete cases and listable controls, and gives readers something usable — a checklist, a case narrative, or an asset free to reuse. One of the three posts heavily promotes named ISACA CCOA study products, so readers weighing its instructional value should ask how much of the material is independent guidance versus product promotion.
- **Teach by bringing the argument home to the reader’s own environment**: Edwards’s recurring move is to state a claim, ground it in an inspectable case or control, then turn the question back on the reader rather than leave the lesson general. That closing move makes the material useful to someone deciding what to do next, across formats — a single-incident narrative, a control checklist, or a learning-resource roundup.

## Work to read

- [The MGM incident as a help-desk social engineering case study](https://www.linkedin.com/posts/jasonedwardsdmist_cybersecurity-socialengineering-identitysecurity-activity-7513999433148022784-2XLa)
- [A working checklist for defending directory services](https://www.linkedin.com/posts/jasonedwardsdmist_cybersecurity-infosec-cyberdefense-activity-7513735285214732288-AJzw)
- [Promoting ISACA CCOA learning resources across formats](https://www.linkedin.com/posts/jasonedwardsdmist_isaca-ccoa-is-built-for-people-who-want-cybersecurity-activity-7513659919867473921-F8IG)

## Brand relationships

- **ISACA** (disclosed_partnership)

## Partnerships

Across the three posts, the commercial activity is promotion of third-party cybersecurity learning resources: the ISACA CCOA audio course, paper and ebook study guide, and a 1,000-card flash card ebook on Amazon, with a pointer to links in the first comment. The post shows Jason Edwards publishing promotional content around certification study material, but discloses no sponsorship terms, pricing, deliverables, audience guarantees, or booking process. For a buyer planning a campaign, partnership terms cannot be set from the posts. A cybersecurity training company building an identity and access management course could approach them to develop or promote course content; ask directly through their LinkedIn profile about scope, exclusivity, disclosure wording, and compensation.

## Alternatives

- Bradley Richards: Choose Bradley Richards when the module should open with exploit-and-patch discipline rather than social engineering. Two posts link ransomware to Fortinet VPN vulnerabilities that had been public for months and to the PAYLOAD group, which used compromised domain credentials and Active Directory Group Policy to disable security controls. Writing from a customer-success role at Atruent, Richards argues that the organizations recovering fastest are not the biggest spenders but those with disciplined vulnerability management, operational accountability, and proactive remediation. Richards fits better than Jason Edwards when the lesson is how identity compromise pairs with unpatched infrastructure or the buyer wants a vendor-services and resilience viewpoint.
- Muli Motola: Choose Muli Motola when the course needs named expert testimony and a compliance consequence. The Identity Nightmares posts package interviews with practitioners: Kayla Williams, CISO at Devo, on unauthorized access itself being a reportable incident capable of triggering large GDPR fines, and Barry Gordon on privileged access and overlooked legacy systems. Each interview becomes numbered takeaways, making the material a good fit for a segment on regulatory exposure and the prevent-respond-recover scope of IAM resilience. Motola is the stronger source when the buyer wants outside experts quoted directly or a privacy-regulation angle.
- Travis Bittecuffer: Choose Travis Bittecuffer when the audience is technology leadership and the module needs the business case for identity visibility. Bittecuffer argues the biggest technology risk is a compromised identity that bypasses millions of dollars of controls by looking like a trusted user, and that with MFA already in place the next problem is detection: watching privileged access and unusual behavior and responding before a compromised account becomes a business disruption. If the course is aimed at CIOs and technology leaders rather than help-desk analysts, or needs a leadership framing that connects identity work to business alignment and people, this is the better fit.

---
AI-assisted summary of public posts. Audience demographics are not available. Engagement appears only where we checked recent posts. Method: https://b2binfluencer.marketing/methodology/