Good product management is not about shipping more. It is about creating value and using evidence to decide what is actually worth building.In this episode of the Inverted Podcast, we sit down with Itamar Gilad, author of *Evidence-Guided Product Development* and former Google product leader, to explore how evidence-guided product management applies to security, infrastructure, quality, and other products where success is often difficult to see or measure.Itamar introduces the GIST framework: Goals, Ideas, Steps, and Tasks, and explains why product teams should replace opinion-driven decision making with progressively stronger evidence. We discuss how security teams can define meaningful North Star metrics, why measuring security posture and coverage may be more useful than simply counting attacks, and how teams can connect security investments to broader business objectives.The conversation also explores one of the biggest challenges facing product teams today: AI makes it easier to build things, but that does not mean we should build more things. Itamar explains why faster development makes product discovery and validation just as important, if not more important, and why launching poorly validated features creates long-term complexity, maintenance costs, and product bloat.We dive into how different forms of evidence should carry different levels of confidence, from opinions and customer conversations to prototypes, fake-door tests, early adopter programs, experiments, and actual release results. And for security teams that believe their work is too difficult to measure, Itamar has a simple message: don't give yourself a free pass.Finally, we discuss why output-based goals and feature roadmaps can become dangerous, how outcome-based OKRs give teams more freedom to solve real problems, and why bottom-up goal setting can help product teams influence company strategy even when security is not one of leadership's headline priorities. Whether you work in security, infrastructure, developer tooling, quality, or traditional product management, this episode is a practical discussion about making better product decisions, learning faster, and staying focused on what ultimately matters: creating value for customers and the business.Chapters:00:00 Introduction01:19 What Is Evidence-Guided Product Management?04:03 The GIST Framework04:29 Finding a North Star Metric for Security07:53 Security Posture as a Product Metric10:33 Connecting Security to Business Priorities14:30 Has AI Changed Product Discovery?19:02 Different Levels of Evidence and Confidence23:17 Measuring the "Badness Funnel"24:48 Connecting Security Work to Company Objectives27:44 Bottom-Up OKRs and Influencing Leadership32:04 Why Output Goals Are Dangerous36:23 Why Security Teams Don't Get a Free Pass39:02 Creating Value Is Still the Job🎧 Listen, learn, and join the conversation! 🎧 Find us on LinkedIn, Spotify, YouTube, Amazon Music/Audible, iHeartRadio or our website, and leave a message with your thoughts or questions.Check out our 🌐 website: https://invertedpm.com/✅ Like 👍 and Subscribe for more deep dives into the world of inverted product management! ✅ 🔗 Join the conversation in the Inverted Product Management community on LinkedIn. Inverted PM LinkedIn Group: https://www.linkedin.com/groups/12902712/Spotify: Music by: Bensound License code: KQNVJHTWQEBEDSEA#ProductManagement #EvidenceGuided #EvidenceGuidedProductManagement #GIST #ProductStrategy #ProductDiscovery #OKRs #NorthStarMetric #Cybersecurity #Security #SecurityProductManagement #AI #ArtificialIntelligence #ProductLeadership #Experimentation #ProductDevelopment #InvertedPodcast #InvertedProductManagement #ProductManagers #Leadership #Startup #Innovation

Business fundamentals still matter, even in the age of AI.

In this episode of the Inverted Podcast, we sit down with Alex Osterwalder, creator of the Business Model Canvas and founder of Strategizer, to explore what has changed, what hasn't, and why the fundamentals of building a business remain timeless.

We discuss how security companies fit into the Business Model Canvas, why founders struggle with prioritization, and how startups should think about security, privacy, trust, and compliance as they grow. Alex Osterwalder shares practical insights on customer discovery, evidence-based experimentation, and the common mistake founders make by building solutions before truly understanding customer problems.

The conversation also dives into the impact of AI on entrepreneurship, why faster product development does not replace customer validation, and how modern companies can build repeatable innovation systems that continuously create new growth opportunities.

Previous Episodes on Business Model Canvas:

➡️The Inverted Podcast #14: The Business Model Canvas for Security - Part 1: https://youtu.be/rCmu6jqEJ44?si=Bs5x2tukpbMuppca

➡️The Inverted Podcast #15: The Business Model Canvas for Security - Part 2: https://youtu.be/ieuHyaGTvss?si=jCNKjgVi2hBz5vvc

Whether you're building a startup, leading product teams, running a security business, or navigating AI-driven change, this episode is packed with practical advice on creating products customers actually want and businesses that can scale.

🎧 Listen, learn, and join the conversation! 🎧

Find us on LinkedIn, Spotify, YouTube, Amazon Music/Audible, iHeartRadio or our website, and leave a message with your thoughts or questions.

Check out our 🌐website: https://invertedpm.com/

✅  Like 👍 and Subscribe for more deep dives into the world of inverted product management!

✅ 🔗 Join the conversation in the Inverted Product Management community on LinkedIn.

Inverted PM LinkedIn Group: https://www.linkedin.com/groups/12902712/

Music by: Bensound

License code: KQNVJHTWQEBEDSEA

#authentication #passkeys #passwordless #cybersecurity #identity #phishing #fido #webauthn #digitalidentity #aiagents #security #podcast #ai #aisecurity #AI #AIAgents #CyberSecurity #IdentityManagement #OpenAI #MCP #OAuth #FIDO #AgenticAI #SoftwareEngineering #InvertedPodcast #ArtificialIntelligence #SecurityEngineering #DeveloperTools #EnterpriseAI #startup #startuptips #aistartup

As AI Agents Rise, Security Must Come First with Nick SteeleIn this episode of the Inverted Podcast, hosts Jeroen Kemperman, Dana Kaufman, and Dario Salice are joined by Nick Steele from OpenAI to explore one of the most important challenges in AI today: identity, permissions, and security for autonomous agents.

The conversation starts with real-world incidents where AI agents caused major operational issues—including deleting critical resources—and expands into a broader discussion about why traditional security models don't fully apply to AI agents. Nick explains how agents differ from conventional software, why permissions should be tied to tasks rather than identities, and how concepts like least privilege, delegation, human-in-the-loop approvals, OAuth, MCP, FIDO, and emerging identity standards can help organizations safely adopt agentic systems.

Whether you're building AI products, managing enterprise security, or preparing your applications for a future filled with autonomous agents, this episode offers practical guidance on what changes, what stays the same, and how to build for an agent-driven world.

Topics covered:

➡️ Why AI agents behave differently from traditional software

➡️ The risks of over-permissioned agents

➡️ Human-in-the-loop security models

➡️ Delegation vs. impersonation

➡️ Agent identity and access management

➡️ MCP, OAuth, and emerging standards

➡️ How companies should prepare their products for agents

➡️ Designing "happy paths" for AI-driven interactions

🎧 Listen, learn, and join the conversation! 🎧Find us on LinkedIn, Spotify, YouTube, Amazon Music/Audible, iHeartRadio or our website, and leave a message with your thoughts or questions.

Check out our 🌐website: https://invertedpm.com/

✅  Like 👍 and Subscribe for more deep dives into the world of inverted product management! ✅ 

🔗 Join the conversation in the Inverted Product Management community on LinkedIn.Inverted PM LinkedIn Group: https://www.linkedin.com/groups/12902712/

Bensound

License code: KQNVJHTWQEBEDSEA

#authentication #passkeys #passwordless #cybersecurity #identity #phishing #fido #webauthn #digitalidentity #aiagents #security #podcast #ai #aisecurity #AI #AIAgents #CyberSecurity #IdentityManagement #OpenAI #MCP #OAuth #FIDO #AgenticAI #SoftwareEngineering #InvertedPodcast #ArtificialIntelligence #SecurityEngineering #DeveloperTools #EnterpriseAI