Episode 231 - GluuFederation/identerati-office-hours GitHub Wiki

Title: Beyond Zero: Beyond Zero: Enterprise Security for the AI Era

• Host: Mike Schwartz, Founder/CEO Gluu

• Guest: Joe Valente, ex-Google, Co-Author of Beyond Zero White Paper and ex-Google Enterprise Security Lead

• Guest: Rohit Khare, ex-Google, Product Manager & Software Architect

Channels

• Linkedin
• Youtube
• Short

Description

Google’s ground breaking Beyond Zero architecture could influence the security landscape for the next decade. And it signals a shift from identity to capability based access governance--principle #1 is "Resource and Action-based Security". In this episode of Identerati Office Hours, we’ll discuss how enriched context, risk signals, and real-time challenges could secure both people and AI agents with one of the authors of the Beyond Zero white paper.

Homework

• Google Blog: Going Beyond Zero: A New Paradigm For Enterprise Security

• ACM Paper: Beyond Zero: Enterprise security for the AI era

Takeaways

• ⚡ Beyond Zero "Resource and Action-based security" == capability is the unit of governance.

• ⚡ One of the hardest challenges of governance is properly balancing security, cost, and productivity.

• ⚡ Evidence collection needs an explicit architecture. Developers need clear requirements for recording authorization, invocation, and observed outcomes. Governance won't happen by accident.

• ⚡ It's important to measure the benefits (or "liveness"), otherwise the governors will know the costs only.

Livestream Archive

• Audio
• Transcript