Cybersecurity Awesomeness Podcast - Episode 172

In this "Cybersecurity 101" episode of the Cybersecurity Awesomeness Podcast, host Chris Steffen breaks down the history, fundamentals, and modern challenges of access control.

Steffen reviews the foundational "AAA" framework—Authentication, Authorization, and Accounting—and traces how access control has evolved from 1970s mainframe military models (like Bell-LaPadula and the Orange Book) to 1990s Role-Based Access Control (RBAC), 2010s Zero Trust, and today's modern cloud and Privileged Access Management (PAM) ecosystems.

The core challenge, Steffen argues, is that traditional access control models were built for a world where every identity had a human face. Today, the explosion of non-human identities (NHIs) and AI agents has left organizations struggling with unmonitored privileges, standing access, and severe visibility gaps. Steffen concludes with three actionable takeaways: treating access control as a living inventory problem, moving beyond human-centric RBAC models, and ensuring that regular enterprise access reviews explicitly include service accounts and AI agents.

What is Cybersecurity Awesomeness Podcast?

The Cybersecurity Awesomeness Podcast from Enterprise Management Asscoaites (EMA) features cybersecurity expert Chris Steffen discussing critical cybersecurity issues. They cover everything from the challenges of certificate management and the cyber workforce talent shortage to deep. Available on all major platforms, this podcast offers credible, well-regarded insights into today's top security topics.