Cyber defence requires an identity-first makeover, argues Codec’s Tushar Kumar.