Chasing Entropy Podcast 026: Identity, AI, and the Future of Trust with Joseph Carson

In this episode of the Chasing Entropy Podcast, I am joined by Joe Carson, Chief Security Evangelist and Advisory CISO at Delinea (formerly Thycotic), to explore how personal history, technology evolution, and emerging AI challenges shape the cybersecurity landscape.

From Gaming to Global Security

Joe shares his journey from growing up in Belfast with an early passion for gaming and coding, to building a decades-long career in IT and security. His path included pivotal moments—like responding to a massive DDoS attack in the early 2000s—that transformed his focus from systems administration to dedicated security research and identity protection.

Identity as the New Perimeter

Together, Dave and Joe examine how identity has evolved: from managing devices and offices to today’s world of bring your own identity and now bring your own agent. With AI agents increasingly requiring credentials and access, they emphasize the urgent need to rethink identity governance—not just for humans, but also for machines and autonomous systems.

AI, Governance, and Regulation

The conversation dives into the EU AI Act, GDPR, and the risks of poorly governed AI adoption. Joe highlights the importance of a risk-based approach to regulation, transparency in AI decision-making, and the critical role of explainability as the foundation of digital trust in the coming years.

Practical Analogies and Lessons

Using the metaphor of an alarm clock evolving from simple to “agentic,” Joe illustrates how seemingly harmless technologies can become critical risk points as they accumulate access to health, financial, and personal data. The discussion reinforces why privilege management and least-access principles are more crucial than ever.

Key Takeaways

• Identity is central: securing human and non-human access alike is now a strategic priority.
• AI needs governance: explainability and accountability must be built in from the start.
• Community matters: cybersecurity is sustained not just by technology, but by mentorship, collaboration, and shared experience.

🔗 Be sure to like, subscribe, and share the Chasing Entropy podcast. And if you’re attending a security conference soon—keep an eye out for Joe Carson; he’ll probably be there.