Hybrid Identity Protection Podcast

Epizodes

• 
  Why AI Makes Your Legacy Systems the Biggest Target with Andre Priebe, CTO at iC Consult Group 21.07.2026 46min

  This episode features Andre Priebe, Chief Technology Officer at iC Consult Group, where he steers the Centers of Excellence, service portfolio, and vendor strategy across a global team of over 850 identity experts. In this episode, Andre explains why the gap between identity security awareness and maturity is growing, how AI is helping attackers find weaknesses faster than ever, and why recovery is the most underestimated phase of any incident response plan.
• 
  The Entra ID Recovery Gap with Tim Wolf and Tim Springston, Semperis 07.07.2026 54min

  This episode features Tim Wolf and Tim Springston, two Semperis colleagues and former Microsoft veterans with deep roots in Active Directory and Entra ID. In this episode, they break down the real state of Entra ID recoverability: what Microsoft's shared responsibility model actually means for tenant data, how token-based attacks are outpacing traditional defenses, and why the gaps in Microsoft's new backup and recovery feature matter more than most organizations realize.
• 
  Practice Makes Progress in Cyber Resilience with Jim Bowie, VP and CISO at Tampa General Hospital 23.06.2026 35min

  This episode features Jim Bowie, VP and CISO at Tampa General Hospital, joined by co-host Courtney Guss, Director of Crisis Management at Semperis. He discusses why healthcare is uniquely exposed during cyber incidents, why recovery is where most organizations are losing time, and how disciplined rehearsal is the highest-leverage move available to resource-constrained security teams.
• 
  Agentic AI and the Authorization Gap No One Closed with Geoffrey Mattson, CEO of SecureAuth 09.06.2026 34min

  This episode features Geoffrey Mattson, CEO of SecureAuth, joined by co-host Sarah Cecchetti, Director of Product Management at Semperis. He discusses why agentic AI has made authorization the most urgent unsolved problem in enterprise identity. He also covers the “friendly fire” incidents already happening, where MCP vendors are falling short, and what real guardrails for agent deployments actually look like.
• 
  Where Gartner Sees Identity Security Heading with Mark Diodati, Managing VP of IAM at Gartner 26.05.2026 45min

  This episode features Mark Diodati, Managing Vice President for IAM at Gartner, where he leads a global team of analysts and sets the identity research agenda. In this episode, Mark explains how Gartner's research model actually works, what IAM topics his team is prioritizing right now, and what he's seeing at the frontier of AI and decentralized identity.
• 
  Why Identity Security Needs Its Own Program with Angie Klein, IAM Business Technology Manager at Federated Insurance 12.05.2026 38min

  This episode features Angie Klein, IAM Business Technology Manager at Federated Insurance and a decade-long IAM practitioner. In this episode, Angie explains why identity security needs to stand as its own program, how organizational change management helps bring resistant stakeholders on board, and why governance and the people side of implementation matter as much as the technology.
• 
  Securing Non-Human Identities in the Age of Agentic AI with Sarah Cecchetti, Director of Product Management at Semperis 28.04.2026 43min

  This episode features Sarah Cecchetti, Director of Product Management at Semperis, and longtime identity executive. She presents her Bsides Seattle talk "Identity Crisis: IAM's Wild Ride in the AI Jungle," covering why the assumptions that shaped modern identity have been overturned by agentic AI and what the industry is building to catch up.
• 
  1 Thing to Do to Avoid a Breach: 5 Identity Experts Answer 14.04.2026 28min

  This episode features a virtual roundtable hosted by Michele Crockett, Associate VP of Product Marketing at Semperis, with five identity security practitioners: Alex Weinert, Christopher Brumm, Eric Woodruff, Jorge de Almeida Pinto, and Michael Van Horenbeeck. The panel addresses how to allocate limited security budgets across prevention and recovery, why the same AD misconfigurations keep surfacing in assessments year after year, and what AI means for defenders and attackers alike.
• 
  Governance After the Fact: The Hidden Risk of App Sprawl with Sander Berkouwer and Raymond Comvalius, Microsoft MVPs 31.03.2026 28min

  This episode features Sander Berkouwer and Raymond Comvalius, two longtime identity security experts and Microsoft Most Valuable Professionals (MVPs). With decades of experience in identity security, Sander and Raymond have helped many organizations design and secure complex identity environments. In this episode, they explore why application governance is becoming a major blind spot for organizations and what security teams can do to regain control before hidden risks turn into real incidents.
• 
  130 MPH Decisions: What Drag Racing Teaches About Incident Response with Krista Arndt, Associate CISO at SLUHN 17.03.2026 28min

  This episode features Krista Arndt, Associate CISO at St. Luke’s University Health Network. With experience across healthcare, finance, crypto, and the Department of Defense, Krista has built and led security programs in high-stakes, highly regulated environments. In this episode, she explains why identity is at the core of nearly every major cyber incident, how attackers exploit trust and credential gaps to escalate access, and what security leaders must do to stay calm and effective when pressure is highest.
• 
  Is Active Directory Dead? The Future of Microsoft AD with Cliff Fisher, Senior Solutions Architect at Semperis 03.03.2026 47min

  This episode features Cliff Fisher, Senior Solutions Architect at Semperis and former Senior Technical Program Manager on Microsoft’s Active Directory product group with nearly 20 years of AD experience. In this episode, Cliff explains why Active Directory isn’t going away, what customer data reveals about the slow shift to cloud identity, and why hybrid has become the long-term reality for most enterprises.
• 
  How a Single Breach Can Turn into a Full Compromise with Tim Beasley, Senior Incident Response Consultant at Semperis 17.02.2026 39min

  This episode features Tim Beasley, Senior Incident Response Consultant at Semperis. A veteran incident responder with decades of experience in compromise recovery and post-breach response, Tim has led recovery efforts across ransomware, nation-state, and large-scale identity compromise cases. In this episode, he breaks down why gaining access is only the beginning of modern attacks, how identity enables escalation after access, and what incident response reveals about containing and limiting the impact of identity compromise.
• 
  Rethinking the Human Factor in Identity Security with World-Leading Cyberpsychologist, Dr. Mary Aiken 03.02.2026 26min

  World-renowned cyberpsychologist Dr. Mary Aiken explains why humans aren’t the weakest link in cybersecurity; they’re the most targeted, yet the most critical to resilience. In this episode, she breaks down how attackers exploit trust, fatigue, bias, and decision-making in hybrid identity environments, turning human behavior into a primary attack surface. Dr. Aiken explores online disinhibition, MFA fatigue, phishing, and insider threats through a psychological lens, while emphasizing how human-aware security design can build long-term resilience. She also looks ahead to a future where intelligence augmentation and AI “co-workers” help support human judgment in an increasingly complex and hostile digital world.
• 
  Stopping Ransomware at the Backup Layer with Andy Drag, Staff Product Manager at Cohesity 20.01.2026 20min

  A former systems administrator and founder of two managed service provider startups, Andy Drag, Staff Product Manager at Cohesity, brings deep, hands-on insight into how IT teams operate. In this episode, he talks about how these teams now build backup and continuity products focused on integrations, cyber recovery, and resilience. Learn how ransomware has raised the stakes for backup and identity, why they must be treated as Tier 0, and how attackers now target backup platforms. Andy also discusses what tighter roles, isolation, immutability, and rehearsed recovery look like in practice.
• 
  Inside HIP Conf 2025 with Guido Grillenmeier, Semperis Principal Technologist 06.01.2026 38min

  This episode features host Sean Deuby and fellow Semperis colleague Guido Grillenmeier, Principal Technologist, EMEA, in a candid recap of the 2025 Hybrid Identity Protection Conference in Charleston. They trade takeaways on what they heard, what surprised them, and what the event revealed about where hybrid identity security is headed. Sean and Guido highlight some key observations from keynote speakers including Chris Inglis (former US National Cyber Director), Alex Weinert (Semperis CPO and former VP of Identity Security at Microsoft), and other identity security and recovery experts across the world. This is a fast, grounded debrief designed to help you take in the conference highlights and carry forward the insights that will matter most in the year ahead.
• 
  Fixing Legacy AD Risk in a Hybrid World with Christopher Brumm, Cyber Security Architect at glueckkanja AG 16.12.2025 22min

  This episode features Christopher Brumm, Cyber Security Architect at glueckkanja AG. A longtime identity security practitioner, Chris has spent 15+ years working across Microsoft’s security stack, from network defense to deep Active Directory and Entra ID security, and is an active community moderator and speaker. In this episode, he breaks down where Active Directory security falls short in hybrid environments, and how Microsoft’s new Global Secure Access applies Zero Trust and identity-first, granular controls to close those gaps and modernize access to on-prem resources.
• 
  The Anatomy of Attack Path Management with Daniel Stefaniak, VP Architect - Cybersecurity and Identity at JPMorgan Chase 02.12.2025 17min

  This episode features Daniel Stefaniak, Vice President Architect - Cybersecurity and Identity at JPMorgan Chase. A respected expert in identity and access management, Daniel has spent his career architecting and deploying large-scale Active Directory, Entra ID, and cloud-based IAM solutions for millions of users. In this episode, he explains why attack path management is never a one-time effort, how environments drift toward risk without dedicated ownership, and what it takes to build a sustainable approach to reducing exposure in complex identity systems.
• 
  Beyond Firewalls: The People Behind Cyber Resilience with Nathan Wenzler, Field CISO at Optiv 18.11.2025 50min

  This episode features Nathan Wenzler, Field Chief Information Security Officer at Optiv. A veteran CISO with nearly three decades of experience, Nathan has led cybersecurity programs across government agencies, nonprofits, and Fortune 1000 companies. In this episode, he shares why effective security starts with communication, not technology, how empathy and culture shape stronger defenses, and what it takes to turn cybersecurity from a technical function into a business enabler.
• 
  The DNA of Organizational Resilience: Leadership First, Technology Last with Heather Costa, Director of Technology Resilience at Mayo Clinic 04.11.2025 41min

  This episode features Heather Costa, Director of Technology Resilience at Mayo Clinic. A leading voice in organizational resilience, Heather has spent over two decades shaping recovery and continuity programs at world-class healthcare institutions. In this episode, she explains why true resilience begins with leadership, not technology, how to prioritize when everything feels critical, and what it takes to build organizations that can adapt and thrive through disruption.
• 
  The Cyber War We Can’t See with Dr. Chase Cunningham, CSO of Demo-Force.com 21.10.2025 29min

  This episode features Dr. Chase Cunningham, Chief Strategy Officer at Demo-Force.com. Widely known as “Dr. Zero Trust”, he’s the creator of the Zero Trust Extended Framework and former Forrester principal analyst. With decades of experience supporting the NSA, U.S. Navy, FBI Cyber, and other government missions, Chase brings deep expertise on how nation-states wage digital conflict. In this episode, Chase explains how China, Russia, and North Korea use cyber operations to advance long-term strategic goals, why critical infrastructure has become a silent battlefield, and why attribution makes retaliation so difficult.