# Privileged access management: podcast learning path

Source: https://startwithidentity.com/podcasts/learn/pam/

Vaulting, session control, just-in-time access, and the move to zero standing privileges. 14 episodes, ordered from basics to advanced.

Read alongside: [PAM (glossary)](https://startwithidentity.com/glossary/pam/), [What is PAM?](https://startwithidentity.com/guides/fundamentals/what-is-pam/), [Implementing PAM](https://startwithidentity.com/guides/architecture/implementing-privileged-access-management/), [Zero standing privileges](https://startwithidentity.com/glossary/zero-standing-privileges/), [Just-in-time access](https://startwithidentity.com/glossary/jit-access/), [Best PAM tools](https://startwithidentity.com/rankings/best-pam-tools/)

1. [#294 - Navigating Privileged Access Management with Michiel Stoop](https://podcasts.apple.com/us/podcast/294-navigating-privileged-access-management-with/id1471899975?i=1000662275632) (Identity at the Center, 2024-07-15, 45 min, learner): Why PAM matters, how to sell a PAM program to management, how to choose PAM products, and ways to shrink the privileged attack surface.
2. [#197 - GSA & CISA PAM Playbook with Ken Myers and Ross Foard](https://creators.spotify.com/pod/profile/identity-at-the-center/episodes/197---GSA--CISA-PAM-Playbook-with-Ken-Myers-and-Ross-Foard-e1tqjbr) (Identity at the Center, 2023-01-30, 63 min, learner): What the federal GSA and CISA privileged identity playbook covers, explained by two government practitioners involved with it.
3. [Analyst Chat #156: CIEM Is Entering the Privileged Access Management Market](https://www.kuppingercole.com/watch/ciem-entering-pam-market) (KuppingerCole Analyst Chat, 2023-01-16, 17 min, learner): How the PAM market is changing, including the role of cloud infrastructure entitlement management (CIEM), mergers, and new vendors.
4. [The Evolution of PAM: Why We'll Have to Rethink Access Management](https://www.kuppingercole.com/watch/videocast-saviynt-evolution-of-pam) (KuppingerCole Analyst Chat, 2023-08-24, 15 min, practitioner): Common PAM program challenges and the move toward zero standing privilege, just-in-time access, CIEM, and lower user friction in PAM adoption.
5. [#267 - PAM & IGA with Paul Mezzera](https://podcasts.apple.com/us/podcast/267-pam-iga-with-paul-mezzera/id1471899975?i=1000649302848) (Identity at the Center, 2024-03-15, 71 min, practitioner): What is driving change in privileged access management, predictions for where PAM is heading, and how it relates to the identity governance market.
6. [Redefining Access: The Convergence of IGA and PAM in Identity Security](https://podcasts.apple.com/us/podcast/redefining-access-the-convergence-of-iga-and-pam/id1683228982?i=1000654937290) (The Identity Jedi Show, 2024-05-08, 53 min, practitioner): Why identity vendors are consolidating PAM and IGA into platforms, the security risks of stitching acquired products together, and why just-in-time entitlements beat separate admin accounts.
7. [#232 - Just in Time Access with John Morton of Britive](https://creators.spotify.com/pod/profile/identity-at-the-center/episodes/232---Just-in-Time-Access-with-John-Morton-of-Britive-e293kt9) (Identity at the Center, 2023-09-25, 54 min, practitioner): How just-in-time access works, how it relates to zero standing privileges, and where it fits across cloud, on-prem, Snowflake, and DevOps automation.
8. [401 Access Denied Podcast Ep. 114 | The Rise and Future of Identity with Ian Glazer](https://podcasts.apple.com/us/podcast/401-access-denied-podcast-ep-114-the-rise-and/id1485295700?i=1000668311597) (401 Access Denied, 2024-09-04, 48 min, practitioner): Why role-based access falls short, how event-time data can support dynamic access decisions, and what it takes to move toward zero standing privilege.
9. [#276 - CloudSec with Kat Traxler of TrustOnCloud](https://podcasts.apple.com/us/podcast/276-cloudsec-with-kat-traxler-of-trustoncloud/id1471899975?i=1000653185727) (Identity at the Center, 2024-04-22, 62 min, practitioner): How cloud IAM differs between GCP and AWS, why resource hierarchy and policy inheritance matter, and the tradeoff between least privilege and zero standing privilege.
10. [One Account, $1.4 Billion: Inside the Merck NotPetya Breach with Lance Peterman, CIDPRO](https://www.hipconf.com/podcast/one-account-1-4-billion-inside-the-merck-notpetya-breach-with-lance-peterman-cidpro/) (Hybrid Identity Protection Podcast, 2025-05-29, 17 min, practitioner): A firsthand account of how NotPetya spread through Merck via one overprivileged service account, which identity weaknesses were exploited, and how recovery went.
11. [Entra & Azure Power-Up: Secure Service Principal Impersonation with Simon Gottschlag](https://entra.news/p/entra-and-azure-power-up-secure-service) (Entra.Chat, 2025-05-10, 38 min, practitioner): How a prototype uses Azure Functions, Key Vault, and Entra ABAC so developers can impersonate service principals under four-eyes approval and least privilege.
12. [Analyst Chat #302: PAM Is No Longer a Vault - The New Identity Security Layer](https://www.kuppingercole.com/watch/pam-no-longer-a-vault) (KuppingerCole Analyst Chat, 2026-06-08, 35 min, architect): How privilege shifted from admin accounts to runtime capabilities, PAM convergence with IGA, CIEM and ITDR, machine privilege, just-in-time gaps, and deployment sovereignty.
13. [Pushing Microsoft Entra to its Limits to Secure On-Prem AD](https://entra.news/p/pushing-microsoft-entra-to-its-limits) (Entra.Chat, 2025-06-20, 48 min, architect): How to design a Bastion Forest PAM setup for on-prem Active Directory using Entra PIM for Groups, group write-back, phish-resistant credentials, and privileged access workstations.
14. [Tracking Tier 0 Attack Paths with Ran Harel](https://www.hipconf.com/podcast/tracking-tier-0-attack-paths-with-ran-harel/) (Hybrid Identity Protection Podcast, 2023-03-01, 27 min, architect): What Tier 0 assets are, how attack paths through Active Directory lead to them, and how to manage those paths in hybrid AD environments.