Access Granted

Britive

In a world dominated by growing cloud technology and the unique, identity-based threats that come with it, security teams need consistent and modern defense strategies. Access Granted is your gateway to understanding and implementing proactive cyber prevention measures and keeping up with transformative strategies and solutions for access management.

  1. 04.12.2025

    Ep 16: From POCs to Production: Building a Real GenAI Security Program

    In this episode of Access Granted, Nauman sits down with Ken Huang—co-author of the OWASP Top 10 for LLMs, contributor to NIST AI work, and co-chair of CSA’s AI Safety Group—to break down what practical GenAI security looks like. They cover: Why only a small fraction of organizations feel comfortable with their GenAI security posture The three big risk buckets: prompt injection, MCP/tooling exposure, and goal manipulation / agent drift How “shadow AI” emerges when there’s no dedicated GenAI security program A concrete framework stack: NIST AI RMF → Maestro threat modeling → OWASP AI VSS → CSA AICM + red teaming The role of cloud provider frameworks (Google SAIF, AWS CAF-E AI, Azure guidance) and how to combine them with community standards Why traditional IAM (static SAML/OAuth scopes) doesn’t work for AI agents—and what task-scoped, intent-based, ephemeral access should look like How to think about identity lifecycle and governance for AI agents, and why “no 24/7 God mode” should be a non-negotiable anchor for CISOs If you’re trying to move from GenAI science projects to production systems without sleepwalking into a breach—or letting an agent delete your production database—this conversation will help you define the guardrails, frameworks, and identity controls you actually need.

    51 мин.

  2. 04.11.2025

    Ep 15: From Static Keys to Runtime Authorization

    Identity is no longer an IT admin task; it’s the security control plane.In this episode of Access Granted, Britive’s Nauman Mustafa sits down with Sriram Santhanam, an experienced identity and security leader, to unpack where identity security is headed and what teams can do now. What we cover: Why static keys, blanket tokens, and over-permissive roles break in cloud + SaaS Moving to runtime authorization: per-action access, short TTLs, ZSP by default Non-human identities & agentic AI: on-behalf-of boundaries, tool allowlists, guardrails Crawl-walk-run vs. run if you can: where to start and how to scale safely IGA + PAM together: SailPoint governance with runtime enforcement for day-to-day access Practical steps after SaaS/token incidents: review scopes, remove “full,” revoke fast, instrument audit

    49 мин.

  3. 22.05.2025

    Ep: 14 Addressing the Risk of Static Credentials with Zero Standing Privileges

    In this episode of Access Granted, Nauman sits down with Britive’s Product Manager, Matt Wilson, to unpack what many organizations are finally confronting head-on: a growing crisis caused by static credentials in today’s hybrid, multi-cloud, and AI-driven environments.  With the explosion of non-human identities (NHIs), cloud-native services, and automated pipelines, traditional Privileged Access Management (PAM) practices are no longer enough. The conversation explores the critical evolution toward Zero Standing Privileges (ZSP) and why this modern approach is essential for securing both human and non-human access in today’s dynamic infrastructures.  Matt breaks down the differences between Just-in-Time access and true ZSP, debunks common misconceptions, and explains why eliminating standing permissions is key to achieving Zero Trust in modern environments.  Key topics include:  Hardcoded keys, long-lived tokens, and static secrets remain prevalent in cloud environments.   Just-in-time access doesn’t guarantee ZSP. Many solutions only gate access to static credentials instead of eliminating standing permissions entirely.  Dynamic, ephemeral, auto-revoked permissions ensure identities only have access when needed for true ZSP.  Vaulting and password rotation no longer meet the demands of cloud-native environments. Agent- and proxy-based models introduce friction and fail to scale.  Modern environments require a single platform that can manage and enforce access policies for developers, AI agents, bots, and automated workflows alike.  ZSP support, agentless deployment, cloud-native integration, and coverage across all identity types and environments are non-negotiable features of modern access security.  The future of identity security lies in unified, dynamic access management, not siloed tools.  Done right, security becomes an enabler for innovation, developer productivity, and adoption of cutting-edge technologies.  Looking forward at the evolution toward behavior-based authorization and continuous, adaptive access control as AI agents and dynamic workloads scale.  🍏 Listen on Apple: https://podcasts.apple.com/us/podcast/access-granted/id1770083136    📺 Watch Access Granted on YouTube: https://www.youtube.com/playlist?list=PLotHzn4KKa4K7qanA_Oi2-LZagw_mINyA

    33 мин.

  4. 08.05.2025

    Ep 13: Extending Dynamic Access Management for Clouds, Networks, and Systems

    Cloud PAM built for all identities across all cloud & hybrid environments: https://www.britive.com/  In this episode of Access Granted, Nauman Mustafa sits down with Shahzad Ali, Principal Architect at Britive, to break down the evolving world of privileged access management (PAM) and how modern environments demand a new approach.  Together, they dive into the shift away from traditional vault-based PAM models to dynamic, just-in-time (JIT) access and Zero Standing Privileges (ZSP). Securing all identities in the cloud, human and non-human, AI-driven workflows across cloud and hybrid environments requires permissioning that can keep up with the needs of the cloud.  They talk the why behind how identity has become the new security perimeter, and why securing access must extend beyond users to include systems, workloads, infrastructure devices, and agentic AI.  Key topics include:  How the definition of privileged access has changed in cloud-native, distributed environments.  Why static credentials and vault-only solutions no longer meet today’s security needs.  The role of Zero Standing Privileges (ZSP) in enabling true just-in-time access for all identities.  Extending dynamic, ephemeral access controls to routers, switches, firewalls, and IoT devices.  Why organizations must rethink infrastructure security alongside cloud IAM modernization.  Actionable advice for CISOs and security leaders on building a modern, scalable, and secure access management program.  🤖 Learn more about how Britive is securing agent-based AI access: https://www.britive.com/use-cases/agentic-ai-security   🍏 Listen on Apple: https://podcasts.apple.com/us/podcast/access-granted/id1770083136    📺 Watch Access Granted on YouTube: https://www.youtube.com/playlist?list=PLotHzn4KKa4K7qanA_Oi2-LZagw_mINyA

    30 мин.

  5. 27.02.2025

    Ep 12: Protecting NHIs in GitHub: Zero Standing Privileges with Just-in-Time Access

    In this episode of Access Granted, we sit down with Palak Chheda, Britive’s Principal Architect to dive deep into practical strategies for securing Non-Human Identities (NHIs) within GitHub workflows.  As automation and CI/CD pipelines become critical in cloud environments, the need to secure machine identities and ephemeral tokens has never been greater.  We walk through a live demo showcasing how Britive's Just-In-Time (JIT) privilege management eliminates the risks associated with static credentials and API keys.  Discover how Workload Federation can authenticate GitHub Actions dynamically, enabling true Zero Standing Privileges (ZSP) for infrastructure components.  Key Takeaways:  The risks of static API keys and long-lived tokens in GitHub workflows.  How to use workload identity federation to achieve ZSP.  Real-world examples of securing CI/CD processes with Britive.  The benefits of ephemeral credentials and dynamic permissions management.  🎧 Listen now and transform how you manage NHIs in your cloud infrastructure!  📺 Watch this episode on YouTube: https://www.youtube.com/playlist?list=PLotHzn4KKa4K7qanA_Oi2-LZagw_mINyA

    22 мин.

  6. 13.02.2025

    Ep: 11 Navigating the Modern Identity Security Landscape

    Explore Britive’s agent-less, proxy-less, cloud-native PAM:https://www.britive.com/   In this episode of Access Granted, we dive deep into one of the most urgent cybersecurity challenges today: non-human identities (NHIs). As automation, AI, and cloud services expand, NHIs — like API keys, service accounts, and machine credentials — are growing at an alarming rate. Yet, many organizations fail to track, secure, or even acknowledge their existence, despite their potential impact on identity security.  Two identity security leaders, Lalit Choda, Founder of the NHI Management Group, and Art Poghosyan, CEO and Co-Founder of Britive, share their insight and expertise on:  ✅ The explosion of NHIs & why they’ve grown to outnumber human identities in the cloud  ✅ How NHIs are exploited in breaches, drawing from big examples   ✅ Why static credentials are a ticking time bomb & how to eliminate them  ✅ Best practices for securing NHIs using Zero Standing Privileges (ZSP) as a guiding principle of identity management  📺 Watch this episode on YouTube:https://www.youtube.com/playlist?list=PLotHzn4KKa4K7qanA_Oi2-LZagw_mINyA

    1 ч. 8 мин.

  7. 30.01.2025

    Ep 10: Locking Down the Bots - Securing NHIs in the Cloud

    In this episode of Access Granted, John Morton, Field CTO at Britive, dives into the world of Non-Human Identities (NHIs) and their pivotal role in modern cloud security. From understanding what NHIs are to exploring their impact on automation, workflows, and security strategies, John shares insights into why they’ve become a critical focus for organizations today.  He also discusses best practices for securing NHIs, integrating them into a zero-trust model, and why static access for NHIs is a risk that organizations can no longer afford.  Key Takeaways:  Understanding NHIs, the role they play in automation and cloud operations, and why securing them is different from human identities.  Why NHIs have come under increased scrutiny with increased cloud adoption, automation, and the growing number of API keys, tokens, and service principles.  How static credentials and unmanaged NHIs can lead to breaches, and why securing them with JIT access is essential.  Practical steps for securing NHIs, from implementing guidelines to modernizing access management.  🎧 Listen to Access Granted on Spotify: https://open.spotify.com/show/7ukJOqUhDmTRj2pm3ykibS    🍏 Listen on Apple: https://podcasts.apple.com/us/podcast/access-granted/id1770083136   📺 Watch this episode on YouTube: https://www.youtube.com/playlist?list=PLotHzn4KKa4K7qanA_Oi2-LZagw_mINyA

    32 мин.

  8. 16.01.2025

    Ep 9: The Identity World is Calling for Innovation

    In this episode of Access Granted, Nauman Mustafa sits down with Art Poghosyan, co-founder and CEO of Britive, to discuss the evolving landscape of identity and access management (IAM) in the cloud era.  Drawing on over 20 years of experience, Art shares the journey of building Britive, the challenges of transitioning from traditional IAM solutions to cloud-native approaches, and the critical role of ephemeral access and Zero Standing Privileges (ZSP) in securing multi-cloud environments. The conversation also delves into the growing importance of managing non-human identities (NHIs), the rise of AI-driven innovations in IAM, and how companies can make informed decisions in a crowded and noisy cybersecurity market.  Key Takeaways:  The cloud paradigm shift as static on-prem environments are left behind for dynamic, cloud-native or hybrid environments instead.  How just-in-time (JIT) access can be used to achieve true zero standing privileges (ZSP) by granting access only upon request.  How the rise of NHIs and service accounts present unique challenges that necessitate specific security strategies.  How incorporating customer feedback and requirements directed feature development for Britive’s multi-cloud PAM platform.  Why choosing solutions based on organizational requirements is key to navigating a saturated security market.  A look into the future as AI, Kubernetes, SaaS applications, and other platforms continue to impact identity and access management strategies.  🍏 Listen on Apple: https://podcasts.apple.com/us/podcast/access-granted/id1770083136   📺 Watch this episode on YouTube: https://www.youtube.com/playlist?list=PLotHzn4KKa4K7qanA_Oi2-LZagw_mINyA

    40 мин.
См. все (17)

Трейлер

Об этом подкасте

In a world dominated by growing cloud technology and the unique, identity-based threats that come with it, security teams need consistent and modern defense strategies. Access Granted is your gateway to understanding and implementing proactive cyber prevention measures and keeping up with transformative strategies and solutions for access management.

Информация

  • Автор
    Britive
  • Годы выхода
    2024 - 2025
  • Выпуски
    17
  • Ограничения
    Без ненормативной лексики
  • Авторские права
    © Britive
  • Сайт подкаста
    Access Granted