Keys Without People - John Heasman on Cleaning Up Non-Human Access - John Heasman - CSP #220

Episode notes

Title: Keys Without People" - John Heasman on Cleaning Up Non-Human Access Summary: John breaks today's non-human identity mess into three buckets: core tools your business runs on, old/one-off integrations that linger, and engineer tokens left behind. His playbook is simple: decide what's truly critical, assign a clear owner, keep access minimal, and review it on a schedule. With AI spawning even more "non-human users," basics done well - prioritize, tighten, rotate, repeat - win the day. This segment is sponsored by Saviynt. Visit to learn more about them! Visit for all the latest episodes! Show Notes:

• Critical Infrastructure: The Risk Hiding in Plain Sight - Jason Manar - CSP #22563 / 100
• IAM for MSSPs: The Hidden Risk of Blind Trust - Dustin Sachs - CSP #224
• Cloud Security: The AI Effect & How to Proceed - Richard Marcus - CSP #223
• From Alerts to Action: Making Public - Private Threat Intel Actually Useful - Ian Washburn - CSP #222
• Beyond Vendor Risk: Real-Time GRC, AI, and Protecting App User Data - Jadee Hanson - CSP #221