Sign in Subscribe

Brian Weidner

IAM for AI Agents: Why Your Identity Program Isn't Ready

IAM for AI Agents: Why Your Identity Program Isn't Ready

AI agents are multiplying inside enterprise environments faster than identity governance programs can track them. They are being deployed by developers, operations teams, and business analysts — often without security involvement, without formal registration, and without the kind of access scoping discipline that any human identity would require. The service accounts

Zero Trust — From Concept to Board Room Post 4 of 4

Zero Trust — From Concept to Board Room Post 4 of 4

Blog Series: Zero Trust — From Concept to Board Room Post 4 of 4 A Practical Guide for InfoSec Professionals, Aspiring CISOs, and New Security Leaders We have covered a lot of ground in this series. We started with the business case and the executive conversation. We went deep on the

Zero Trust — From Concept to Board Room Post 3 of 4

Zero Trust — From Concept to Board Room Post 3 of 4

Blog Series: Zero Trust — From Concept to Board Room Post 3 of 4 A Practical Guide for InfoSec Professionals, Aspiring CISOs, and New Security Leaders In the first two posts of this series we covered what zero trust is, why it matters, how to win executive and board support for

Zero Trust — From Concept to Board Room Post 2 of 4

Zero Trust — From Concept to Board Room Post 2 of 4

Blog Series: Zero Trust — From Concept to Board Room Post 2 of 4 A Practical Guide for InfoSec Professionals, Aspiring CISOs, and New Security Leaders In the first post of this series, I walked through what zero trust actually is, why it matters more now than ever, and how to

Zero Trust — From Concept to Board Room Post 1 of 4

Zero Trust — From Concept to Board Room Post 1 of 4

Blog Series: Zero Trust — From Concept to Board Room Post 1 of 4 A Practical Guide for InfoSec Professionals, Aspiring CISOs, and New Security Leaders I have been in this industry for more than twenty years. I have lived through the transition from perimeter-centric firewalls to cloud-native architectures.

NCSC Secure Connectivity Principle 8: Establish an Isolation Plan

NCSC Secure Connectivity Principle 8: Establish an Isolation Plan

InfoSec Made Easy OT Security Leadership | NCSC Guidance Series The plan you hope you never need — and why having it ready is non-negotiable in OT security Every other principle in this series has focused on preventing compromise, detecting threats, and limiting the spread of attacks that do occur. Principle

Shadow AI — What New CISOs Need to Do Before It Bites Them

Shadow AI — What New CISOs Need to Do Before It Bites Them

It was a Tuesday afternoon when one of our business analysts dropped a file into the shared drive with a note attached: “Used Claude to summarize all the customer complaint data — saved me three hours!” She was thrilled. I was not. Not because she had done something wrong. She hadn’