Techsplainers by IBM

This episode of Techsplainers explores zero downtime migration, the practice of moving databases, applications, or middleware to a new environment without interrupting the services that rely on them. It explains why this approach matters in sectors where even brief outages can mean lost revenue, broken service commitments, or compliance exposure.

The episode walks through the core challenge of keeping source and target systems online, synchronized, and accurate at the same time. It covers common migration patterns such as change data capture, synchronized, and accurate at the same time. It covers common migration patterns such as change data capture, dual-write, expand-and-contract, blue-green deployment, and phased migration, showing how each balances speed, complexity, and risk differently. It also examines the operational demands behind successful migrations, including planning, backfilling, testing, synchronization, cutover, and post-migration monitoring.

Along the way, listeners learn why zero downtime migration can improve user experience and business continuity, but also why it can introduce difficult troubleshooting, higher costs, and data integrity risks. The episode closes with a look at how AI is beginning to support migration workflows and where human oversight still remains essential.

Find more information at https://www.ibm.com/think/insights/zero-downtime-migration
Find more episodes: https://www.ibm.biz/techsplainers-podcast

Narrated by Anna Gutowska

This episode of Techsplainers explores zero trust, the broader security framework that ties together the week’s discussions of least privilege, just-in-time access, continuous authentication and risk-based authentication. Instead of relying on a traditional network perimeter, zero trust applies security policies to each individual connection between users, devices, applications and data.

The episode explains why zero trust has become so important in modern IT environments and breaks down the core principles shared across most zero trust models. It also walks through the five pillars commonly used to structure zero trust implementations: identity, devices, networks, applications and workloads, and data.

Find more information at https://www.ibm.com/think/topics/zero-trust
Find more episodes: https://www.ibm.biz/techsplainers-podcast

Narrated by Dan Nosowitz

This episode of Techsplainers explores risk-based authentication (RBA), a security approach that adjusts authentication requirements based on the risk level of a login or access request. Building on the week’s discussion of the principle of least privilege, just-in-time access and continuous authentication, the episode explains how organizations use RBA to decide how much proof of identity to require before granting access in the first place.

The discussion breaks down how RBA works, the importance of logging, and how RBA works with continuous authentication and adaptive authentication in a layered trust model.

Find more information at https://www.ibm.com/think/topics/risk-based-authentication
Find more episodes: https://www.ibm.biz/techsplainers-podcast

Narrated by Dan Nosowitz

This episode of Techsplainers explores continuous authentication, a security approach that keeps verifying a user’s identity throughout an active session instead of relying on a single login check.

The discussion contrasts continuous authentication with traditional one-time authentication models and explains why that older “front-door only” approach leaves gaps for session hijacking, insider threats and the abuse of valid credentials. It walks through how continuous authentication works in practice, including behavioral biometrics, adaptive risk scoring and contextual signals. It also clarifies the difference between continuous authentication and adaptive authentication, showing how the two can work together as a layered trust model.

Finally, the episode examines why continuous authentication is increasingly important for nonhuman identities such as service accounts, machine identities and AI agents.

Find more information at: https://www.ibm.com/think/topics/continuous-authentication
Find more episodes: https://www.ibm.biz/techsplainers-podcast

Narrated by Dan Nosowitz

This episode of Techsplainers explores just-in-time access, an identity security model that grants users temporary permissions only when they need them and removes that access automatically when the task is complete. Building on the principle of least privilege, the episode explains why time matters just as much as scope when controlling access to sensitive systems.

The discussion looks at the risks created by standing privileges, including how stolen credentials can give attackers ongoing access to critical environments and make lateral movement easier. It breaks down the typical JIT workflow and compares three common implementation models: broker-and-remove, ephemeral accounts and temporary elevation.

Along the way, listeners learn how JIT fits into broader identity security practices like privileged access management, zero trust, and zero standing privileges. The episode also examines why JIT is increasingly important for nonhuman identities and AI agents, which often operate at higher speed and scale than human users.

Find more information at https://www.ibm.com/think/topics/just-in-time-access
Find more episodes: https://www.ibm.biz/techsplainers-podcast

Narrated by Dan Nosowitz