# Keys Without People — John Heasman on Cleaning Up Non-Human Access - John Heasman - CSP #220 Page: https://stenobird.com/podcast/ciso-stories-podcast-audio-3570889/keys-without-people-john-heasman-on-cleaning-up-non-human-access-john-heasman-csp-220 Text version: https://stenobird.com/podcast/ciso-stories-podcast-audio-3570889/keys-without-people-john-heasman-on-cleaning-up-non-human-access-john-heasman-csp-220.md Podcast: [CISO Stories Podcast (Audio)](https://stenobird.com/podcast/ciso-stories-podcast-audio-3570889) Published: 2026-01-12T17:00:00+00:00 Episode link: https://cspaudio.libsyn.com/keys-without-people-john-heasman-on-cleaning-up-non-human-access-john-heasman-csp-220 Audio file: https://dts.podtrac.com/redirect.mp3/traffic.libsyn.com/secure/cspaudio/CSP_220_1--a233686e-eab6-4c6f-acf5-97fe8e9bddde--audio-converted--7fa0a2ae-f911-4090-81ac-41c2a0506ec2.mp3?dest-id=2584793 Processing state: not_requested JSON: https://stenobird.com/v1/public/podcasts/ciso-stories-podcast-audio-3570889/episodes/keys-without-people-john-heasman-on-cleaning-up-non-human-access-john-heasman-csp-220 Duration seconds: 1573 ## Resource Title: Keys Without People" — John Heasman on Cleaning Up Non-Human Access Summary: John breaks today's non-human identity mess into three buckets: core tools your business runs on, old/one-off integrations that linger, and engineer tokens left behind. His playbook is simple: decide what's truly critical, assign a clear owner, keep access minimal, and review it on a schedule. With AI spawning even more "non-human users," basics done well—prioritize, tighten, rotate, repeat—win the day. This segment is sponsored by Saviynt. Visit https://cisostoriespodcast.com/saviynt to learn more about them! Visit https://cisostoriespodcast.com for all the latest episodes! Show Notes: https://cisostoriespodcast.com/csp-220 ## Actions - request_transcript: `POST https://stenobird.com/v1/public/podcasts/ciso-stories-podcast-audio-3570889/episodes/keys-without-people-john-heasman-on-cleaning-up-non-human-access-john-heasman-csp-220/transcription-requests` — Idempotently request low-priority transcript generation for this episode. - read_markdown: `GET https://stenobird.com/podcast/ciso-stories-podcast-audio-3570889/keys-without-people-john-heasman-on-cleaning-up-non-human-access-john-heasman-csp-220.md` — Read the agent-friendly Markdown representation of this episode resource. A page view does not enqueue transcription. Agents should invoke `request_transcript` explicitly when they need this episode processed. ## Transcript Full transcripts are not published on public pages unless there is a clear rights basis.