# Zero trust: podcast learning path

Source: https://startwithidentity.com/podcasts/learn/zero-trust/

Identity as the control plane: what zero trust means in practice and how programs roll it out. 14 episodes, ordered from basics to advanced.

Read alongside: [Zero trust (glossary)](https://startwithidentity.com/glossary/zero-trust/), [What is zero trust?](https://startwithidentity.com/guides/fundamentals/what-is-zero-trust/), [Zero trust rollout](https://startwithidentity.com/guides/implementation/zero-trust-rollout/)

1. [Analyst Chat #41: NIST’s Zero Trust Architecture](https://www.kuppingercole.com/watch/nist_zero_trust) (KuppingerCole Analyst Chat, 2020-08-21, 22 min, learner): Walks through NIST SP 800-207 and explains why zero trust is an architecture joining identity and security, with every session authenticated and authorized.
2. [401 Access Denied Ep. 39 | Zero Trust Fundamentals with Dave Lewis](https://podcasts.apple.com/us/podcast/401-access-denied-ep-39-zero-trust-fundamentals-with/id1485295700?i=1000539131310) (401 Access Denied, 2021-10-20, 40 min, learner): Covers zero trust basics and its deperimeterization roots, building a strategy from an inventory of users, devices and workloads, winning board buy-in, and giving people simple security tools.
3. [#129 - Zero Trust in 2022 with Den Jones](https://creators.spotify.com/pod/profile/identity-at-the-center/episodes/129---Zero-Trust-in-2022-with-Den-Jones-e1cjme0) (Identity at the Center, 2022-01-17, 64 min, learner): A security chief who led zero trust programs explains what zero trust looks like in practice and how an organization can get started.
4. [Analyst Chat #213: The Foundation of Secure Communication: Digital Identities in Zero Trust](https://www.kuppingercole.com/watch/foundation-secure-communication) (KuppingerCole Analyst Chat, 2024-05-06, 17 min, learner): Explains why zero trust depends on verifying every access request using identity, device health, and context, and how identity lifecycle management supports it.
5. [Zero Trust Maturity Model 2.0](https://the443.podbean.com/e/zero-trust-maturity-model-20/) (The 443: Security Simplified, 2023-04-17, 53 min, practitioner): Reviews CISA's Zero Trust Maturity Model version 2.0 and how organizations can use it to measure progress and choose next steps.
6. [The Zero Trust Mistakes 90% of Companies Are Making (Microsoft Insiders Reveal All)](https://entra.news/p/the-zero-trust-mistakes-90-of-companies) (Entra.Chat, 2025-08-02, 54 min, practitioner): Microsoft architects walk through the Zero Trust Workshop and the rollout gaps they see most, such as device compliance policies never enforced through Conditional Access.
7. [#376 - Understanding Device Identity in a Zero Trust Framework with Shea McGrew](https://podcasts.apple.com/us/podcast/376-understanding-device-identity-in-a-zero-trust/id1471899975?i=1000729054885) (Identity at the Center, 2025-09-29, 74 min, practitioner): A county government CTO explains how device identity fits into a zero trust program alongside human identity in a complex public-sector organization.
8. [How to Migrate from Legacy VPNs to Entra Private Access (Real Strategies from a Veteran)](https://entra.news/p/how-to-migrate-from-legacy-vpns-to) (Entra.Chat, 2026-03-14, 43 min, practitioner): A remote access veteran explains replacing VPNs with identity-based zero trust network access, running both side by side during migration.
9. [How to Design Bullet-Proof Conditional Access Policies in Microsoft Entra ID](https://entra.news/p/how-to-design-bullet-proof-conditional) (Entra.Chat, 2026-04-11, 57 min, practitioner): Gives a design method for Conditional Access: block-by-default policies, persona-based naming, and tested break-glass accounts protected with FIDO2.
10. [#255 - CAEP and SSF 101 with Atul from SGNL and Sean from Disney](https://podcasts.apple.com/us/podcast/255-caep-and-ssf-101-with-atul-from-sgnl-and-sean-from-disney/id1471899975?i=1000642483044) (Identity at the Center, 2024-01-22, 53 min, architect): Explains the Shared Signals Framework and CAEP with real examples, such as services sharing session and location signals so access can be changed in near real time.
11. [#402 - An Update on SSF and CAEP with Atul Tulshibagwale](https://podcasts.apple.com/us/podcast/402-an-update-on-ssf-and-caep-with-atul-tulshibagwale/id1471899975?i=1000749954596) (Identity at the Center, 2026-02-16, 62 min, architect): Updates the state of the Shared Signals Framework and CAEP standards, including adoption by major technology companies.
12. [Analyst Chat #248: Zero Trust and Beyond - Dynamic Authorization in 2025](https://www.kuppingercole.com/watch/zero-trust-dynamic-authorization) (KuppingerCole Analyst Chat, 2025-04-07, 25 min, architect): Traces authorization from static entitlements to externalized, policy-based decisions that use real-time context, the per-request model zero trust requires.
13. [Analyst Chat #284: Beyond ZTNA, the Rise of Zero Trust Platforms](https://www.kuppingercole.com/watch/rise-of-zero-trust-platforms) (KuppingerCole Analyst Chat, 2026-01-26, 24 min, architect): Argues ZTNA alone cannot cover hybrid environments, AI agents, and ephemeral workloads, and describes integrated zero trust platforms enforcing policy for every identity type.
14. [Continuous Access Evaluation Protocol (CAEP) with Tim Cappalli and Atul Tulshibagwale](https://open.spotify.com/episode/3AhlEwLFNi3guBhZScYaJJ) (Identity, Unlocked, 2021-02-22, 35 min, architect): Explains why long-lived federated sessions need continuous signals, and how the OpenID Shared Signals and Events work on CAEP lets providers share session changes.