Skip to main content

Jason Garbis

Founder and CEO of Numberline Security, co-author of "Zero Trust Security: An Enterprise Guide" and co-chair of the Cloud Security Alliance Zero Trust Working Group.

Nov 13, 2026

9:00
But at the same time, it comes with its own set of pitfalls when it's all said and done.
9:04
Yeah, it's definitely this.
9:06
whole wave of agentic AI that we've hit in the last couple of years and that shows no sign of decelerating has put a lot of stress onto security organizations and is showing the technical debt or the security debt for many years has come back to roost because the ability of these internal agents to access every piece of data in your office environment and to go around your network, if they're running on the network, is going to expose the lack of basic security controls around both data security, data classification, network segmentation, et cetera, that has been hard to do, has not been funded in many organizations or prioritized.
9:48
And now you've got these agents that are scanning everything and reading every single of the 10,000 documents in SharePoint and presenting that to users and that would never have happened if it was just human users.
10:01
So it's really, it is, these agents are exposing a lot of security debt that we have to reckon with.
14:43
Talk to me about how somebody can engage with you guys and understand better what you guys do from an assessment perspective and how they can get your help.
14:54
Yeah, sure thing.
14:55
So we provide what we call the Zero Trust Blueprint.
17:00
Okay, so what about zero trust done not so well?
17:05
It's lots of ways for them to fail.
17:08
I'm thinking of the, I think it was the Tolstoy quote around, anyway, we're not going to go there.
17:13
There's lots of ways that zero trust programs can go wrong.
17:15
And I think, you know, certainly one failure mode is analysis paralysis, where we as security professionals, we love failure.
17:26
architectures, and we love putting together things that on paper work really well.
17:30
And I've seen organizations that spend far too much time doing this analysis and come up with a beautiful, well-thought-out 75-page architecture document, and it takes them a year and a half, and they've actually never delivered any value because they haven't actually deployed additional capabilities in their environment.

10 MINS LATER

27:37
And whether they

We value your privacy

We use cookies to understand how you use our platform and to improve your experience. Click “Accept All” to consent, or “Decline non-essential” to opt out of non-essential cookies. Read our Privacy Policy.