RBAC is Broken (Here's Why) with Dmitri Altum, GitLab, ex-Ramp | Patch Me If You Can™ скачать в хорошем качестве

RBAC is Broken (Here's Why) with Dmitri Altum, GitLab, ex-Ramp | Patch Me If You Can™

In this episode of Patch Me If You Can™, host Arek Dreyer sits down with Dmitri Altum, Identity Group Product Manager at GitLab, to explore why role-based access control (RBAC) is failing fast-moving businesses—and how behavior-based access control powered by AI is changing the game. They dive into GitLab’s approach to removing standing access while speeding up workflows, how they reached 93% automation with just a 3-second delay, and why enabling business outcomes—not technical perfection—should be security’s true north. Dmitri also shares the pivotal moment an executive abruptly shut down their YubiKey rollout, forcing a total security strategy reset, and outlines his vision for a universal behavioral signals framework to support real-time access decisions. 🎧 More episodes: https://www.kandji.io/podcast/ Listen on Spotify: https://open.spotify.com/show/6H9E2xV... Listen on Apple Podcasts: https://podcasts.apple.com/us/podcast... Chapters: 00:00 Intro 01:25 Why role based access control fails 02:49 When static roles break productivity 04:20 Building dynamic access request processes 05:35 Credit card fraud detection for identity 07:37 AI powered identity gets better daily 08:57 Executive kills security rollout instantly 11:06 Communication gaps derail security projects 14:04 Removing production access without delays 15:28 93 percent auto approval in 3 seconds 17:15 Stop optimizing for technical perfection 18:45 Measuring productivity over compliance scores 20:40 Security and speed pull same direction 22:38 Shared signals framework missing everywhere