Zero Trust Journey

Welcome to I Zero Trust What You’re Saying – Aug 2025 Edition! In this episode, we break down the latest Zero Trust news, trends, and updates that matter to security practitioners. No hype—just real insights to help you navigate the evolving cybersecurity landscape.

Stay informed, stay secure, and as always, Zero Trust everything!

🔗 News Links:
--| https://www.illumio.com/blog/top-cybersecurity-news-stories-from-august-2025
--| https://xage.com/blog/cyber-attack-news-august-2025/
--| https://www.cybersecuritydive.com/news/government-zero-trust-migration-black-hat/756985/
--| https://thehackernews.com/2025/08/new-rce-vulnerability-api-gateway.html
--| https://www.bleepingcomputer.com/news/security/new-chronostealer-malware-bypasses-mfa-and-edr-tools/
--| https://cloud.google.com/mandiant/m-trends/apt44-supply-chain-report
--| https://krebsonsecurity.com/2025/08/massive-data-scraping-exposes-professional-data/

Subscribe to our LinkedIn to never miss news, updates, and quizzes to earn digital badges.

• https://ztjourney.com
• LinkedIn
• YouTube

Disclaimer: The views expressed are those of the speakers.

In this episode, we bridge the gap between Zero Trust theory and real-world deployment with Norman Wong, a key contributor to NIST's groundbreaking implementation guide (SP 1800-35).

Guest: Norman Wong (https://www.linkedin.com/in/gahnormanwong)
Host: Dr. Victor Monga (https://www.linkedin.com/in/victorvirtual)

https://csrc.nist.gov/pubs/sp/1800/35/final

Highlights:
--| Why the "if it ain't broke, don't fix it" mindset is the biggest barrier to Zero Trust adoption.
--| Inside baseball from the NIST NCCoE project: how competitors like Palo Alto Networks, Cisco, and Zscaler collaborated to build a real-world Zero Trust architecture.
--| The "crawl, walk, run" method: implementing Zero Trust incrementally without disrupting business operations.
--| Beyond the user: why identity is crucial for visibility but isn't the only place to start your journey.
--| The biggest trap organizations fall into: creating fragmented "Zero Trust silos" that don't integrate.
--| Bringing a knife to a gunfight: How AI is becoming non-negotiable for defending against AI-powered attacks.

An essential guide for any leader feeling overwhelmed by Zero Trust, this episode offers a practical roadmap for moving from planning and theory to a mature, measurable program.

Subscribe to our LinkedIn to never miss news, updates, and quizzes to earn digital badges.

• https://ztjourney.com
• LinkedIn
• YouTube

Disclaimer: The views expressed are those of the speakers.

In this episode, we take on a candid debate: is Zero Trust a real strategy or just another layer of marketing? Guest Ken Yao challenges the industry’s favorite buzzword while unpacking what truly matters for building security programs.

Guest: Ken Yao (https://www.linkedin.com/in/kennethyao)
Host: Dr. Victor Monga (https://www.linkedin.com/in/victorvirtual)

Highlights:
--| Why Ken sees Zero Trust as “Trust but Verify, minus the politeness.”
--| The bear-chase analogy: benchmarking against peers instead of chasing perfection.
--| Big GRC vs. little gRC—and why compliance alone is never enough.
--| The danger of buzzwords overshadowing execution in contracts and programs.
--| Why long-term trust, not short-term slogans, should guide strategy.
--| Looking ahead: how AI could make security a “solved problem” in the next five years.

A rare episode that puts Zero Trust under the microscope, weighing strategy against marketing and forcing us to ask—are we building real security, or just selling stories?

Subscribe to our LinkedIn to never miss news, updates, and quizzes to earn digital badges.

• https://ztjourney.com
• LinkedIn
• YouTube

Disclaimer: The views expressed are those of the speakers.

Welcome to I Zero Trust What You’re Saying – July 2025 Edition! In this episode, we break down the latest Zero Trust news, trends, and updates that matter to security practitioners. No hype—just real insights to help you navigate the evolving cybersecurity landscape.

Stay informed, stay secure, and as always, Zero Trust everything!

🔗 News Links:
--| https://www.cisa.gov/news-events/alerts/2025/07/29/cisa-releases-part-one-zero-trust-microsegmentation-guidance
--| https://thehackernews.com/2025/07/assessing-role-of-ai-in-zero-trust.html
--| https://federalnewsnetwork.com/cybersecurity/2025/07/trump-admin-focuses-on-zero-trust-2-0-cybersecurity-efficiencies
--| https://atis.org/press-releases/atis-advances-industry-cybersecurity-and-network-resilience-imperatives-in-zero-trust-architecture
--| https://www.govtech.com/security/rhode-island-builds-zero-trust-center-of-excellence
--| https://www.techradar.com/pro/how-ai-is-finally-erasing-the-security-vs-experience-tradeoff-that-has-plagued-enterprise-it-for-decades
--| https://www.itpro.com/cloud/cloud-security/majority-of-engineers-bypass-security-controls-to-do-their-job

Subscribe to our LinkedIn to never miss news, updates, and quizzes to earn digital badges.

• https://ztjourney.com
• LinkedIn
• YouTube

Disclaimer: The views expressed are those of the speakers.

00:00 Introduction to Zero Trust and Anupam's Background
00:55 Evolving Perspectives on Zero Trust
03:04 Common Misconceptions in Zero Trust Implementation
05:32 Key Pillars of Zero Trust: Identity, Segmentation, and Control
08:59 Cultural Challenges in Adopting Zero Trust
11:29 The Role of Centralized Policy in Zero Trust
13:32 AI and Automation in Security
16:37 Future Security Challenges and the Role of AI
18:27 Adapting Zero Trust Principles for AI

In this episode, we unpack how true Zero Trust isn't about controlling everything in one box — it's about creating a single source of policy truth, and pushing that enforcement to where users, devices, and data live.

Guest: Anupam Upadhyaya (https://www.linkedin.com/in/anupamupadhyaya)
Host: Dr. Victor Monga (https://www.linkedin.com/in/victorvirtual)

Highlights:
--| Why Zero Trust and least privilege are not the same thing—and why that matters.
--| The three pillars every ZT program must get right: identity posture, segmentation, and security posture.
--| Why centralized policy is key, even when enforcement is distributed across users, devices, and apps.
--| How point solutions and disconnected consoles are the biggest blocker to Zero Trust success.
--| The role of AI in reducing false positives—and why human feedback still matters.
--| Future challenges: AI agents, faster ransomware, and the need to adapt ZT principles to emerging threats.

Another Zero Trust Journey episode packed with strategic clarity, operational insight, and real-world lessons from the front lines—minus the marketing fluff.

Subscribe to our LinkedIn to never miss news, updates, and quizzes to earn digital badges.

• https://ztjourney.com
• LinkedIn
• YouTube

Disclaimer: The views expressed are those of the speakers.

Guest: George Finney (https://www.linkedin.com/in/georgefinney/)
Host: Dr. Victor Monga (https://www.linkedin.com/in/victorvirtual)

In this episode, the host sit down with George Finney, CISO at the University of Texas System and bestselling author of Project Zero Trust and Rise of the Machines. George shares why Zero Trust isn’t a product or a marketing term—it’s a long-term security strategy that helps organizations reduce blind spots, shift culture, and stay resilient in the face of evolving threats.

From his now-famous “jawbreaker” analogy to the difference between a concept and a true strategy, George breaks down what Zero Trust actually is—and what it’s not. Whether you're building from scratch or evolving your current program, this episode offers actionable insights that go beyond buzzwords.

Highlights:
--| Why Zero Trust is not just “trust but verify” rebranded—it's a complete shift in mindset.
--| The “jawbreaker vs. M&M” metaphor and how to communicate Zero Trust across the org.
--| Cultural blockers: why tech isn’t the hard part—people are.
--| Measuring success: how to evaluate ZT maturity using visibility, segmentation, and blind spot reduction.
--| Protect surface vs. attack surface: what defenders can control—and why it matters.
--| A sneak peek into George’s new book, Rise of the Machines, and how AI fits into the Zero Trust future.

Another Zero Trust Journey episode full of real-world experience, strategic clarity, and advice you can actually use—minus the vendor hype.

Subscribe to our LinkedIn to never miss news, updates, and quizzes to earn digital badges.

• https://ztjourney.com
• LinkedIn
• YouTube

Disclaimer: The views expressed are those of the speakers.

Welcome to I Zero Trust What You’re Saying – June 2025 Edition! In this episode, we break down the latest Zero Trust news, trends, and updates that matter to security practitioners. No hype—just real insights to help you navigate the evolving cybersecurity landscape.

Stay informed, stay secure, and as always, Zero Trust everything!

🔗 News Links:
--| https://www.techradar.com/pro/live/infosec-europe-2025-were-live-at-the-show-and-heres-everything-weve-seen
--| https://federalnewsnetwork.com/cybersecurity/2025/07/trump-admin-focuses-on-zero-trust-2-0-cybersecurity-efficiencies
--| https://timesofindia.indiatimes.com/business/cybersecurity/cyber-risks-in-financial-sector-rbi-calls-for-ai-aware-defence-and-zero-trust-approach-warns-of-systemic-threat-from-vendor-lock-ins/articleshow/122164857.cms
--| https://www.illumio.com/blog/top-cybersecurity-news-stories-from-june-2025
--| https://www.prnewswire.com/news-releases/keeper-security-wins-2025-fortress-cybersecurity-award-for-zero-trust-keeperpam-302471405.html
-| https://community.sophos.com/zero-trust-network-access/b/announcements/posts/sophos-ztna-updates-for-june-2025

👉 Learn more at: ztjourney.com

Subscribe to our LinkedIn to never miss news, updates, and quizzes to earn digital badges.

• https://ztjourney.com
• LinkedIn
• YouTube

Disclaimer: The views expressed are those of the speakers.

Guest: Jamie Kennedy (https://www.linkedin.com/in/jamiebrookekennedy)
Host: Dr. Victor Monga (https://www.linkedin.com/in/victorvirtual)

🎙️ Thinking about starting a podcast? In this episode, we break down the real talk on launching your own show—without burning a hole in your wallet.

From finding your niche to using smart tools and strategies, we cover what most "how to start a podcast" guides leave out. Whether you're just starting or refining your setup, these tips will save you time, money, and a lot of frustration.

What you'll learn:
--| Why passion and clarity of purpose matter before you hit "record"
--| Budget-friendly tools and software that actually work
--| How to promote your podcast using SEO, social media, and email lists
--| The secret power of good show notes and clickable titles
--| Why mistakes aren't failures—they're part of the process
--| If you're ready to build something real (not just viral), hit play.

Subscribe to our LinkedIn to never miss news, updates, and quizzes to earn digital badges.

• https://ztjourney.com
• LinkedIn
• YouTube

Disclaimer: The views expressed are those of the speakers.

Guest: Ben Tyminski
Host: Dr. Victor Monga
Co-host: Steve Turner

In this episode, the hosts are joined by Ben Tyminski, a security architect whose hands-on experience spans from finance to media, and from traditional endpoints to the ever-expanding universe of OT and IoT. Ben breaks down why “endpoint” is a moving target in today’s Zero Trust landscape—covering everything from laptops and servers to containers, appliances, and industrial controls. If you think endpoint security is just about laptops, think again.

Highlights:
--| The evolution of endpoints: why they now include OT, IoT, containers, and even Fargate.
--| Asset management and device posture: what’s actually possible in a hybrid, always-changing environment.
--| Microsegmentation, host firewalls, and how real-world Zero Trust controls get deployed.
--| Navigating the tension between super user/admin flexibility and organizational risk.
--| Cross-industry lessons learned: why working closely with help desk and SOC unlocks smarter security.

Another candid “Geek Show” discussion with technical deep-dives and real stories from the front lines of Zero Trust transformation.

Subscribe to our LinkedIn to never miss news, updates, and quizzes to earn digital badges.

• https://ztjourney.com
• LinkedIn
• YouTube

Disclaimer: The views expressed are those of the speakers.

Guest: https://www.linkedin.com/in/stahltom/
Host: https://www.linkedin.com/in/victorvirtual
Co-host: https://www.linkedin.com/in/beingageek/

In this episode, the hosts are joined by Tom Stahl, a seasoned Senior Solutions Architect supporting end-user computing in one of the top six U.S. banks. Tom brings a wealth of frontline experience from the trenches of implementing Zero Trust—from mobile to desktop, from networking to identity. If you're an engineer, architect, or admin who's ever been told to “go implement Zero Trust,” this episode is your playbook.

Highlights:
--| Why enterprise mobility was Zero Trust before Zero Trust was cool.
--| Building strong internal and vendor relationships as the key to implementation success.
--| Conditional Access, device compliance, and identity: how to align these critical pieces.
--| Certificates: useful until they’re not—why PKI planning still matters.
--| Tactical advice for prototyping, passwordless, and building your Zero Trust baseline.

This episode kicks off our “Field Stories” series—real-world, technical deep-dives from practitioners who’ve had to make Zero Trust work under real constraints.

Subscribe to our LinkedIn to never miss news, updates, and quizzes to earn digital badges.

• https://ztjourney.com
• LinkedIn
• YouTube

Disclaimer: The views expressed are those of the speakers.