Zero Trust and Identity
I've spent 30 years in IT, from the help desk to leading cloud infrastructure, and I write from New Jersey. On Baseline Zero I write about Zero Trust, identity security and AI governance: where access really gets decided, why MFA is not the finish line, and what changes when AI agents hold the keys. Here are those posts, grouped by topic.
Free to read
Zero Trust in practice
Zero Trust is a way of deciding access, not a network project or a product.
Identity, MFA and sessions
MFA protects the login. Attackers want the session, the token and the keys handed out years ago.
AI agents as identities
An AI agent that acts with your access is a privileged identity. It needs an owner, a limit and a way to switch it off.
AI governance and AI security
Rules for AI tools only work if people can follow them. Trusting the output without checking it is a risk too.
New posts go out on Baseline Zero first. Subscribe on Substack: https://romankruglov.substack.com