“Nobody holds powerful access at rest… only have that powerful access where and when I need it… credentials have zero entitlement after use.”
The Enterprise AI Show · Agents Are Identities Too: Identity Security After CyberArk with Amy Blackshaw
Play from 31:30
31:30
Audio streams from the publisher’s own feed. Verbatim does not host or copy it.
What was described
Implement a “zero standing privilege” model where credentials have no permanent entitlements and are granted only at runtime
Said nearby on the same subject
“We need to move to zero standing privileges…just in time access so that if an attacker finds an identity, they can't do anything because the entitlement doesn't exist.”
“We also have an academic grant program where we give academic gift grants to academic groups ... it will be exciting to just get more papers come out”