No exceptions: How Amazon killed the password and unified security

About this episode

The episode discusses Amazon's approach to unifying security and identity management with Stephen Schmidt.

In this episode, we sit down with Stephen Schmidt, SVP & Chief Security Officer at Amazon, to explore the engineering and leadership required to run a "no exceptions" identity program at a global scale. Most organizations suffer from the "fragmentation problem"—a mix of high-security cloud apps and vulnerable legacy systems. Stephen explains how Amazon unified its authentication standard to ensure that every internal account, from a fresh developer environment to a legacy application from 2003, meets the same rigorous bar. In our reporter chat, Greg talks with Derek Johnson on why your AI doctor does not have the same privacy protections as your real doctor. https://cyberscoop.com/radio/how-amazon-killed-the-password-and-unified-security/ Join Virtru on Feb 18th for the inaugural DCMMC at 1801 Pennsylvania Ave for a no-nonsense CMMC deep dive followed by a bourbon tasting—grab your spot here. - https://www.virtru.com/dcmmc-event Follow CyberScoop on Social Media • https://www.twitter.com/CyberScoopNews • https://www.linkedin.com/company/cyberscoop • https://www.facebook.com/cyberscoop/ • https://www.instagram.com/cyberscoopnews/ • https://www.tiktok.com/@cyberscoopnews •…

People in this episode

Host: Greg

Guest: Stephen Schmidt

Topics covered

• cybersecurity
• identity management
• cloud security
• AI privacy
• authentication standards

Keywords

• Amazon
• password security
• identity program
• cloud apps
• legacy systems
• AI doctor privacy

Sponsors

Virtru

Mentioned in this episode

Organizations: Amazon, CyberScoop

More episodes of Safe Mode Podcast

• Why the autonomous SOC Is the wrong goal · June 11, 2026 · 34 min
• The last layer standing · June 4, 2026 · 36 min
• From Two Weeks to Three Days: The KEV Deadline Debate · May 29, 2026 · 37 min
• Can specialized security survive Daybreak and Mythos? · May 21, 2026 · 38 min
• Why access brokers have stubbornly remained successful · May 14, 2026 · 32 min
• Can you prove which agent did what? · May 7, 2026 · 28 min