Privileged access management, by ear
14 episodes, in order, 6 checked against the publisher's transcript. Vaulting, session control, just-in-time access, and the move to zero standing privileges. Start at the top if the topic is new to you, or jump to the stage that matches where you are.
Start here: the basics
- 1#294 - Navigating Privileged Access Management with Michiel StoopIdentity at the Center · 2024-07-15 · 45 min · Learner
Why PAM matters, how to sell a PAM program to management, how to choose PAM products, and ways to shrink the privileged attack surface.
Michiel Stoop (Philips)pam - 2#197 - GSA & CISA PAM Playbook with Ken Myers and Ross FoardIdentity at the Center · 2023-01-30 · 63 min · Learner
What the federal GSA and CISA privileged identity playbook covers, explained by two government practitioners involved with it.
- 3Analyst Chat #156: CIEM Is Entering the Privileged Access Management MarketKuppingerCole Analyst Chat · 2023-01-16 · 17 min · Learner
How the PAM market is changing, including the role of cloud infrastructure entitlement management (CIEM), mergers, and new vendors.
Checked against the publisher's transcriptPaul Fisher (KuppingerCole Analysts)what is ciem
In practice: rollouts and operations
- 4The Evolution of PAM: Why We'll Have to Rethink Access ManagementKuppingerCole Analyst Chat · 2023-08-24 · 15 min · Practitioner
Common PAM program challenges and the move toward zero standing privilege, just-in-time access, CIEM, and lower user friction in PAM adoption.
Includes a promotion of the publisher's own product.
Checked against the publisher's transcript - 5#267 - PAM & IGA with Paul MezzeraIdentity at the Center · 2024-03-15 · 71 min · Practitioner
What is driving change in privileged access management, predictions for where PAM is heading, and how it relates to the identity governance market.
Paul Mezzera (formerly Saviynt and UC Davis)pam - 6Redefining Access: The Convergence of IGA and PAM in Identity SecurityThe Identity Jedi Show · 2024-05-08 · 53 min · Practitioner
Why identity vendors are consolidating PAM and IGA into platforms, the security risks of stitching acquired products together, and why just-in-time entitlements beat separate admin accounts.
Paul Lanzipam - 7#232 - Just in Time Access with John Morton of BritiveIdentity at the Center · 2023-09-25 · 54 min · Practitioner
How just-in-time access works, how it relates to zero standing privileges, and where it fits across cloud, on-prem, Snowflake, and DevOps automation.
John Morton (Britive)jit access - 8401 Access Denied Podcast Ep. 114 | The Rise and Future of Identity with Ian Glazer401 Access Denied · 2024-09-04 · 48 min · Practitioner
Why role-based access falls short, how event-time data can support dynamic access decisions, and what it takes to move toward zero standing privilege.
Checked against the publisher's transcript - 9#276 - CloudSec with Kat Traxler of TrustOnCloudIdentity at the Center · 2024-04-22 · 62 min · Practitioner
How cloud IAM differs between GCP and AWS, why resource hierarchy and policy inheritance matter, and the tradeoff between least privilege and zero standing privilege.
Kat Traxler (TrustOnCloud) - 10One Account, $1.4 Billion: Inside the Merck NotPetya Breach with Lance Peterman, CIDPROHybrid Identity Protection Podcast · 2025-05-29 · 17 min · Practitioner
A firsthand account of how NotPetya spread through Merck via one overprivileged service account, which identity weaknesses were exploited, and how recovery went.
Lance Petermanbreaches - 11Entra & Azure Power-Up: Secure Service Principal Impersonation with Simon GottschlagEntra.Chat · 2025-05-10 · 38 min · Practitioner
How a prototype uses Azure Functions, Key Vault, and Entra ABAC so developers can impersonate service principals under four-eyes approval and least privilege.
Checked against the publisher's transcriptSimon Gottschlag (Co-native)
Going deeper: standards, architecture, and attacks
- 12Analyst Chat #302: PAM Is No Longer a Vault - The New Identity Security LayerKuppingerCole Analyst Chat · 2026-06-08 · 35 min · Architect
How privilege shifted from admin accounts to runtime capabilities, PAM convergence with IGA, CIEM and ITDR, machine privilege, just-in-time gaps, and deployment sovereignty.
Checked against the publisher's transcriptAlejandro Leal (KuppingerCole Analysts)pam - 13Pushing Microsoft Entra to its Limits to Secure On-Prem ADEntra.Chat · 2025-06-20 · 48 min · Architect
How to design a Bastion Forest PAM setup for on-prem Active Directory using Entra PIM for Groups, group write-back, phish-resistant credentials, and privileged access workstations.
Checked against the publisher's transcriptMark Renoden (Increment) - 14Tracking Tier 0 Attack Paths with Ran HarelHybrid Identity Protection Podcast · 2023-03-01 · 27 min · Architect
What Tier 0 assets are, how attack paths through Active Directory lead to them, and how to manage those paths in hybrid AD environments.
Includes a promotion of the publisher's own product.
Ran Harel (Semperis)techniques
How this list was built
Episodes are chosen for what they teach, not for who published them, and ordered so each one builds on the last. Each note is checked against the transcript the show publishes on its own site where one exists (marked and linked under the episode), and against the show notes otherwise. We link to episodes; we do not copy, host, or transcribe them. Vendor-produced shows are labelled on their directory profiles. Know a better episode for a step on this path? Email community@startwithidentity.com.