#455 - CNAPP and the Cloud Identity Problem with Mike Small
Source: YouTube · Identity at the Center · published Oct 19, 2026 · 1:07:50
BLUF: Cloud-Native Application Protection (CNAP) platforms are essential for securing cloud environments because the majority of cloud security incidents stem from customer-side identity misconfigurations rather than provider failures 5:17.
Key Takeaways:
• CNAP consolidates disparate security tools (like CSPM and CIEM) into a unified platform to manage the complexity of virtual identities and access rights in the cloud 5:55.
• Most cloud breaches are caused by weak identity controls, such as inadequate administrative passwords or lack of multi-factor authentication (MFA), highlighting that the "shared security model" places significant responsibility on the customer 8:19.
• CNAP has evolved to include runtime monitoring to detect "paths to risks" and suspicious behavior in ephemeral cloud environments, moving beyond static configuration analysis 17:57.
• The rise of AI agents introduces new non-human identity challenges, requiring robust governance to control agent permissions and prevent data leakage or unauthorized actions 38:00.
• Cloud infrastructure is now considered part of national critical infrastructure, driving governments to enforce data sovereignty and local control over cloud data centers 47:53.
Closing Statement: Organizations must prioritize investing in CNAP solutions to manage the expanding surface area of cloud and AI identities, as effective security relies heavily on proper customer-side configuration and governance.
Sources:
- 5:17 Definition of CNAP as a consolidated platform for cloud-native application protection.
- 8:19 Explanation that most cloud incidents are due to customer identity failures.
- 17:57 Discussion on the evolution of CNAP to include runtime monitoring and risk path detection.
- 38:00 Analysis of identity challenges introduced by AI agents and non-human identities.
- 47:53 Context on cloud infrastructure becoming part of national critical infrastructure.
Generate CPE Credits
Generate a professional CPE document from this video's transcript.
Estimated credit: 1 CPE hours
Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.
Topic: Cloud Security. Commonly maps to: Security Architecture and Engineering, Communication and Network Security. Exact CISSP domains are assigned during generation.
Free account. One generation at a time, with a daily limit.
CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.
Transcript Preview
First 800 characters of the transcript
This is Identity at the Center. >> Welcome to the Identity at the Center podcast. I'm Jeff and that's Jim. Hey Jim. >> Hey Jeff. How are you? >> Oh, not so bad. Yourself? >> Uh, well, you almost forgot the the part >> I did. >> It's been a while since sometimes I was expecting that. You know, I this gives me a little thing. We put that little AI chatbot on our website and somebody put a question in asking, "How does Jim or Jeff typically respond when they say, "How are you?" And it didn't get it right, but that's probably an Easter egg. >> Okay. Well, maybe that's what threw you off. Maybe you got the chatbot living in your brain now. >> I do. I've spent a lot of time on that thing trying to get it right and I'm I think it's like 75% of the way there >> over, you know, to pull back. What d…