Guardians of the Directory26 Jun 2025

Blueprinting Zero Trust From: Strategy to Execution with Jerry Chapman

Welcome back to Guardians of the Directory! In this episode, Craig Birch is joined once again by Zero Trust expert Jerry Chapman for a deep dive into the Zero Trust Blueprint—a practical model to help organizations shift from theory to execution. Jerry shares insights from his work as Co-Chair of the CISA Zero Trust Working Group and provides a clear framework covering assessment, strategy, roadmap development, and execution phases.

Together, they explore:

The critical role of business assets and protect surfaces

The importance of session management, privilege access, and standing permission hygiene in Active Directory

Common pitfalls organizations face as they mature their Zero Trust implementations
How Zero Trust applies equally to human and non-human identities (including AI!)
The value of visibility, automation, and governance in maintaining Zero Trust momentum

If you're looking for a realistic, actionable guide to embedding Zero Trust in your enterprise—and especially within Active Directory environments—this episode is your blueprint.

Resources Mentioned:

CISA Zero Trust Maturity Model
CISA Zero Trust Working Group
Microsoft Entra PIM
Next-gen IGA and Certificate Lifecycle Management

Guest Bio:
Jerry Chapman is a cybersecurity veteran with over 25 years of experience in identity and Zero Trust. He serves as a Co-Chair for the CISA Zero Trust Working Group and is a recognized thought leader in strategy-driven security.

Denne episoden er hentet fra en åpen RSS-feed og er ikke publisert av Podme. Den kan derfor inneholde annonser.

Episoder(18)

Hybrid Identity is Broken: Rethinking AD, Entra ID & the Bridge in Between

Welcome to another episode of Guardians of the Directory, where we pull back the curtain on the real-world challenges in securing and managing Active Directory and hybrid identity environments. In thi...

21 Aug 202541min

AdminSDHolder in Active Directory: Hidden Risks and Persistent Threats

In this episode of Directory Insights in 10 Minutes, Craig Birch breaks down the often-misunderstood AdminSDHolder object in Active Directory and why it's a high-value target for attackers. Learn how ...

1 Mai 20256min

Admin Accounts with SPNs — Hidden Risk Behind Kerberoasting

🔍 Admin Accounts with SPNs — Hidden Risk Behind Kerberoasting | Directory Insights in 10 MinutesIn this episode, Craig Birch breaks down a major Active Directory security blind spot: Kerberoasting vi...

15 Apr 20255min

Kerberos Pre-Auth: Hidden AD Risk

In this episode of Directory Insights in 10 Minutes, Craig Birch breaks down one of the most overlooked Active Directory misconfigurations: the "Do not require Kerberos pre-authentication" setting.🔍 ...

9 Apr 20257min

Directory Insights in 10 Minutes: Remediating DES Encryption in Active Directory

Welcome to another episode of Directory Insights in 10 Minutes, powered by Guardians of the Directory. In this quick-hitting session, host Craig Birch walks through the process of identifying and reme...

1 Apr 20254min

Directory Insights in 10 Minutes Reversible Password Encryption – A Hidden Risk

Summary:In this episode of Directory Insights in 10 Minutes, we dive into a critical yet often overlooked Active Directory misconfiguration—Allowing Password Storage with Reversible Encryption.This se...

18 Mar 20254min

Directory Insights in 10 minutes: Password Not Required - The Hidden Risk

Episode OverviewIn this episode of Directory Insights in 10 Minutes, we’re exposing a dangerous yet overlooked Active Directory misconfiguration—PasswordNotRequired.Most AD admins assume password poli...

11 Mar 20255min