Zero Trust Journey
Zero Trust Journey
Podcast Description
Zero Trust Journey isn’t about taking sides—it’s about real conversations, sharing research, and learning together. Our goal is to explore Zero Trust from every angle and help cybersecurity practitioners make sense of it in a practical, no-fluff way. And yes, we do love to chat about coffee and listen to the occasional dad joke along the way.Here’s what we do:Conversations with Experts: We chat with subject matter experts who share their opinions, experiences, and Zero Trust journeys.Research and Product Insights: We explore Zero Trust products and solutions in the market that may fit into a Zero Trust architecture.A Zero Trust Architecture: We’re building and refining an ever-growing architecture focused solely on the needs of cybersecurity practitioners.CSA CCZT Study Group: We host a study group for the Cloud Security Alliance (CSA) Certificate of Competence in Zero Trust (CCZT).If you’re a cybersecurity professional looking for honest discussions, practical insights, and tools that evolve with your Zero Trust strategy (plus the occasional coffee tip), Zero Trust Journey is for you. Join us!
Podcast Insights
Content Themes
The show covers key topics related to Zero Trust implementation, cybersecurity challenges, and real-world applications, with episodes like 'Micro-Segmentation and Macro Impact' focusing on practical strategies for organizations and 'Zero Trust Reality Check' examining governmental advancements and private sector challenges.
Zero Trust Journey isn’t about taking sides—it’s about real conversations, sharing research, and learning together. Our goal is to explore Zero Trust from every angle and help cybersecurity practitioners make sense of it in a practical, no-fluff way. And yes, we do love to chat about coffee and listen to the occasional dad joke along the way.
Here’s what we do:
- Conversations with Experts: We chat with subject matter experts who share their opinions, experiences, and Zero Trust journeys.
- Research and Product Insights: We explore Zero Trust products and solutions in the market that may fit into a Zero Trust architecture.
- A Zero Trust Architecture: We’re building and refining an ever-growing architecture focused solely on the needs of cybersecurity practitioners.
- CSA CCZT Study Group: We host a study group for the Cloud Security Alliance (CSA) Certificate of Competence in Zero Trust (CCZT).
If you’re a cybersecurity professional looking for honest discussions, practical insights, and tools that evolve with your Zero Trust strategy (plus the occasional coffee tip), Zero Trust Journey is for you. Join us!
Victor Monga speaks with Philip Griffiths, VP at NetFoundry, about why identity should govern network access for people, workloads, devices, and AI agents. They explain how identity-first zero trust can replace topology-dependent access decisions, reduce connectivity complexity, and align security architecture with business requirements.
- Identity-first, deny-by-default access prevents packets from reaching resources until authentication, authorization, posture, and context are established.
- Network controls based on IP addresses, subnets, and VLANs manage paths, while identity-defined zero trust governs which person, device, workload, or service can connect and under what conditions.
- Strong identity must apply to non-human entities such as PLCs, Docker containers, serverless functions, and AI agents, not only people.
- Zero trust adoption is easier to justify through business outcomes such as interoperability, reduced connectivity delays, lower legacy configuration burden, and support for post-quantum cryptography.
- Start tool decisions with business requirements and use cases rather than buying ZTNA or other products because they appear in industry rankings.
- User prompts and friction can be architecture choices; strong identity can authenticate in the background without repeatedly interrupting users.
- Resilient zero trust architecture requires explicit non-functional requirements, including availability, security, and the organization’s scale and complexity.
- Unified identity and governance can converge ZTNA, software-defined perimeter, and microsegmentation across IT, cloud, Kubernetes, OT, and mission systems.
- Unregistered AI agents should have no ability to reach sensitive systems; access should flow only after the agent is onboarded and authorized.
- Griffiths’ career lesson is to keep learning and talking with others to synthesize and refine ideas.
Subscribe to our LinkedIn to never miss news, updates, and quizzes to earn digital badges.
Disclaimer: The views expressed are those of the speakers.
Disclaimer
This podcast’s information is provided for general reference and was obtained from publicly accessible sources. The Podcast Collaborative neither produces nor verifies the content, accuracy, or suitability of this podcast. Views and opinions belong solely to the podcast creators and guests.
For a complete disclaimer, please see our Full Disclaimer on the archive page. The Podcast Collaborative bears no responsibility for the podcast’s themes, language, or overall content. Listener discretion is advised. Read our Terms of Use and Privacy Policy for more details.