Zero Trust, Zero Passwords: Mobile Mentor’s Blueprint for Hybrid Work Security

[00:00:00] Denis O’Shea: There’s one thing I would share with everyone I talk to: go passwordless as fast as you can. Passwords were a great invention in 1961—around the same time as the telex machine. Now, we’ve managed to take telex machines out of our businesses, but we’re still asking our employees to take a colossal risk every time we ask them to type a password.

We know that 97% of all cyber breaches start with compromised credentials. So, the number one thing I say to everyone is: set a strategy to go passwordless and put the building blocks in place. It’s not as hard as we think. We’ve already done it on our smartphones. We can do it on our Windows machines and our MacBooks; we just need to make it our North Star.

[00:00:36] Intro: Technology has transformed how we live, work, and connect. Behind that change are visionary people with bold ideas. Welcome to the Bridgecast, where host Scott Kinka explores hybrid work, AI, and our evolving future with tech’s brightest minds. Presented by Bridgepointe Technologies, the nation’s leading tech advisory firm. Experience a better way—the Bridgepointe way.

[00:01:11] Scott Kinka: Welcome to the Bridgecast. Today, I’m joined by Denis O’Shea, founder and CEO of Mobile Mentor. Denis founded Mobile Mentor back in 2004 with a mission to empower people to achieve more with their technology. Two decades later, that mission has scaled into a global company operating across the US, Australia, and New Zealand, and they were recognized as Microsoft’s Global Partner of the Year.

Under Denis’s leadership, Mobile Mentor has helped over 1,000,000 people become more secure, more productive, and better equipped to work across remote, hybrid, and frontline environments. Before starting Mobile Mentor, Denis spent 15 years at Nokia during one of the most transformative eras in mobile technology.

In a world where every device is now both a productivity tool and a potential vulnerability, Denis is here to help us unpack how modern endpoint management, identity, and AI are reshaping the future of secure workforces. Denis, welcome to the Bridgecast.

[00:02:14] Denis O’Shea: Scott, thank you for having me on your podcast. I’m delighted to be here.

[00:02:18] Scott Kinka: How did I do, by the way, with the description?

[00:02:20] Denis O’Shea: You’re hired! That was a fantastic introduction. I couldn’t have done it any better.

[00:02:27] Scott Kinka: I love it. Well, tell us a little bit about you. Let’s start there—how you got into this, where you live, and your family. Give us the whole skinny.

[00:02:34] Denis O’Shea: I was born in Ireland and went to three universities: in Ireland, Finland, and Switzerland. I started my career with Nokia in Finland for a few years. They asked me to move to New Zealand to set up the world’s first cellular network back in ’91 or ’92. It was meant to be a nine-month contract, but I stayed for 25 years because New Zealand is such a cool place.

I married a Kiwi, and our kids were actually born in Switzerland a few years later, but my entire family moved from Ireland out to New Zealand. It was a massive shift; I’ve got five sisters, and they all moved to New Zealand.

I set up Mobile Mentor in New Zealand, then went on a vacation a few years ago to Nashville, Tennessee. It was the first stop, and we all fell in love with it. The kids and my wife said, “Hey Dad, let’s move to Nashville.” Long story short, here we are. We’re music fans and just love the culture, the vibe, the energy, and the lifestyle. We came here with a four-year plan, and we’re now in year nine of that plan.

[00:03:33] Scott Kinka: It always seems to work out that way! Denis, we’re going to come back to Mobile Mentor in a minute, but I find your history with Nokia super interesting. You were literally going to set up the network. You’ve led teams across Nokia, founded Mobile Mentor, and spent 20 years helping organizations modernize technology. Before we get into the technical side, tell us a story from that journey that shaped the way you think about leadership and technology. Give us an anecdote.

[00:04:12] Denis O’Shea: I guess for me, it started with the realization that I was not a good engineer. I did engineering, I was in the lab doing design work, and I even got a couple of patents. But I realized my heart wasn’t in it. I was much more interested in people and understanding how businesses worked.

I started to find exit pathways out of technical engineering into project management, account management, and leadership roles. I learned to hire really good engineers because I knew what a bad one looked like—I saw it in the mirror every morning!

I was able to attract really good engineers to work for me. That was the key to building strong teams: being able to recognize the difference between a strong engineer and a weak one through my own limitations. I’ve focused on surrounding myself with strong people, both technically and commercially, and setting a clear vision—a “North Star” that inspires people.

[00:05:26] Scott Kinka: You’ve got 5,000 CIOs listening to this right now asking: what’s the one thing that makes a good engineer over a bad engineer? What did you figure out?

[00:05:44] Denis O’Shea: One thing that turns me off immediately is if I see someone who is an extrovert like me. I was too extroverted and too interested in people and business to go super deep into the tech. I always have an “allergic reaction” to pumped-up, extroverted, super-happy engineers. I’m not sure they’ll have the sticking power when things get really tough.

[00:06:13] Scott Kinka: You’re saying they’re not enough of a “tinkerer” if they’re that interested in what’s going on with you?

[00:06:17] Denis O’Shea: Exactly. The other thing I look for is evidence of depth and complexity in the person’s life. I look for people with hobbies they’ve pursued for a long time. If someone is a passionate gamer or guitarist and has been doing it for 10 or 20 years, that’s great. I’m looking for depth, longevity, and passion. If we create the right culture, they will bring that mastery to the work environment.

[00:07:00] Scott Kinka: That’s amazing. Let’s bridge the gap. You were doing the Nokia thing, and then you started Mobile Mentor to solve a specific problem. What was that problem, and is it different today?

[00:07:21] Denis O’Shea: The problem I was solving came when I was running Nokia’s operation in Switzerland building a 3G network. I essentially “got my ass kicked” by the CEO of Orange, a big European telco. He said, “We bought all this technology from Nokia last year, but our customers aren’t using it. Why would we continue this rollout when you’ve done nothing to help us drive adoption of the billions of euros we’ve already invested?”

I realized we had sold the infrastructure and the smartphones, but end-users were only making calls and sending texts. The mobile internet hadn’t taken off. Setting up email on a smartphone was a nightmare; you needed two different server addresses, and syncing contacts or music was a struggle.

I had a moment where I thought: somebody needs to help the end-user get on top of this. I left Nokia—they were very good to me and even funded a pilot—to help people unlock the full potential of smartphone technology. This was back in 2003 or 2004. The idea was simple: sit down with someone for one hour and get their email working, calendar syncing, and contacts formatted so they could actually be productive.

[00:09:40] Scott Kinka: And it’s changed. The technology is different, but how we work and what’s considered a “mobile experience” is also different. How has your approach helped organizations succeed in this increasingly hybrid world?

[00:10:05] Denis O’Shea: It changed quickly. We rolled out that mentoring service to a million people across Brazil, Australia, China, the UK, and more. We learned what drives technology adoption and what the barriers are.

Over time, devices got simpler, but then laptops, tablets, Microsoft 365, and AI came along. Our mission remains the same: unlock the full potential of the technology people are paying for. Nowadays, we’re doing that with Microsoft 365 and Microsoft Copilot. The old stuff is easy; the new stuff is hard and requires effort.

[00:11:04] Scott Kinka: And that led you to focus on the Microsoft stack?

[00:11:10] Denis O’Shea: It was a happy accident. Microsoft came to us and told us how much we were annoying them! They were seeing us in their big enterprise and government accounts, but we were usually deploying competitive products to manage devices. They asked if we’d consider becoming a partner and helping them take an immature new product called Intune to the market. This was around 2015, and back then, Intune was—frankly—a “dog.”

[00:11:52] Scott Kinka: Every guy listening to this who tried to turn it on back then is nodding!

[00:11:57] Denis O’Shea: My engineers said, “No way.” But I said, “Boys, we’re doing this because the power of the partnership is the key.” Our “North Star” was to become the best in the world at deploying Microsoft Intune. We knew the product would mature and Gartner had predicted that 95% of organizations would eventually land on Intune for endpoint management. They were spot on.

That focus is how we won Microsoft Global Partner of the Year. Now we manage the largest tenant in the world, I’m on the Microsoft advisory board for Intune, and our engineers are part of the Microsoft elite engineering team.

[00:13:01] Scott Kinka: You’ve seen mobility go from pulling out an antenna to today’s handheld supercomputers. But for an IT leader listening, have we “slept” on the risks of mobile computing in light of post-COVID hybrid work? Are we doing ourselves a disservice by not prioritizing it?

[00:13:50] Denis O’Shea: We think of “mobile” as an adjective—how we work—rather than a noun. To me, mobility is the ability to start a task on my desktop, continue it on my laptop, and finish it on my smartphone in the car. It might be a Copilot task or a Teams meeting with a seamless transfer.

True mobility is the ability to work on any device, anywhere, with the same information while remaining secure. It’s having a continuous thread of Zero Trust architecture across all devices—and doing it all without ever typing a password.

[00:14:58] Scott Kinka: Let me challenge you. As we’ve moved toward hybrid work, I feel like discipline around the endpoint has actually degraded. People use home devices, or we just let them access Microsoft 365 on iOS without a second thought. I feel like we’ve gotten worse at securing the PC because it’s now sitting in someone’s living room. Am I wrong?

[00:15:57] Denis O’Shea: I partially agree. Many organizations are still reliant on last-century security architecture: Windows machines on a domain, behind a firewall, joined to AD, and patched inconsistently.

Then there’s the MacBook problem. Many organizations say, “We only have a small number of Macs, so we don’t worry about them.” But when you pressure test that, you find those Macs belong to the executives who handle the most privileged information. Often, those machines aren’t encrypted, don’t have FileVault, and lack endpoint privilege management.

Ironically, smartphones are easier to secure today because we can wrap security around the data in the Microsoft apps—Teams, Outlook, OneDrive—and block man-in-the-middle attacks. It’s actually harder with the legacy Windows environment.

[00:17:51] Scott Kinka: Right. The reasons for having a domain almost don’t exist anymore because resources are in SharePoint and Microsoft 365. It’s limiting for the user, too. Why should I have to log into a domain to do things I can do easily on my mobile? You always talk about the human element. Is that the biggest mistake IT leaders make—too much tech for tech’s sake and not enough thinking about the people?

[00:19:21] Denis O’Shea: Definitely. We run assessments covering 120 topics—identity, endpoints, AI readiness, etc. We find that organizations are only using 44% of the licenses they purchase from Microsoft. They likely have that same 44% utilization rate for CrowdStrike, Okta, or Duo, with massive product overlap.

The challenge we put in front of clients is: why not consolidate? Why not squeeze more value out of strategic platforms rather than being spread thin across half-utilized, poorly integrated technologies? You’re missing out on automation and wasting money.

[00:20:34] Scott Kinka: How do you turn a technical upgrade into a digital transformation? What advice would you give IT leaders?

[00:21:09] Denis O’Shea: I’ve seen two great approaches. One was Vanderbilt University Medical Center. They wanted to go fully modern with the Microsoft stack. We designed a system where they could buy a new machine and deploy it with a completely biometric sign-in, no passwords, and fully automated provisioning and patching. We proved it first for the CIO. She watched the entire “Windows Hello” experience happen and said, “This is good enough for me. Let’s roll.” They rolled it out to 38,000 clinicians.

The other approach is to make security invisible. Step-by-step, you hide the technology. Stop people from typing passwords, stop annoying MFA prompts, and move away from VPNs toward Zero Trust. We rely on your identity and a secure, correctly provisioned device. We verify you aren’t on the dark web, check that your machine is patched, and then use conditional access to give you the data you need. No domain, no on-prem—just cloud-native.

[00:23:25] Scott Kinka: Are you still spending a lot of time getting people to wrap their heads around moving away from a network-centric model?

[00:23:54] Denis O’Shea: Not anymore. A few years ago, we put out white papers on Zero Trust that got massive downloads, but that’s eased off because everyone “gets it” now. They realize the tools of the last century aren’t right for today.

And, as I said before, go passwordless as fast as you can. Passwords were a great invention in 1961, like the telex machine. We still ask employees to take a colossal risk every time they type one. 97% of breaches start with compromised credentials. Make passwordless your North Star.

[00:25:09] Scott Kinka: Is that the one thing an IT leader should take away?

[00:25:25] Denis O’Shea: Yes, and it’s surprisingly easy. Set a mandate that every new piece of hardware must have TPM 2.0 and an infrared camera for facial recognition. Every new application needs native SSO with Entra. Ensure MFA is rolled out to every person and that it’s phish-resistant.

I haven’t typed a password in three and a half years. I don’t even know my password. If someone sends me a phishing email asking for it, I couldn’t give it to them if I wanted to! That’s where we want to go. Get rid of these damn passwords.

[00:26:30] Scott Kinka: But people have budgets and equipment that is still depreciating. How do you build a business case for this outside of just risk avoidance?

[00:26:45] Denis O’Shea: You can build a case based on time saved. This is easy in healthcare, where clinicians sign in and out of EMRs many times per shift. There is a clear ROI there, as well as in law enforcement.

In general, we advise people to go passwordless “quietly.” Don’t make a big splash. For something like OneDrive, you have to be explicit: “Stop sending attachments; share a link.” But for passwordless, just configure the new machines with Windows Hello. People realize they can sign in with their face and they love it. Do it by stealth, then tell the business later how much time you’ve saved them.

[00:29:30] Scott Kinka: I love that—security by stealth. What is the Denis O’Shea credo in one sentence?

[00:29:56] Denis O’Shea: It evolves, but right now, it’s this: people are tired of “best-of-breed” and are ready for “best-of-platform.” The average enterprise has 52 security tools. It’s like Ukraine buying every missile defense system they can because they are under attack. Enterprises have spent years in “fear mode” and now they have 52 solutions that are impossible to integrate.

The shift now is toward consolidating on strategic vendors, squeezing value out of them, and setting up a data estate so AI can reason over your data and do the work humans used to do.

[00:31:46] Denis O’Shea: Scott, can I make a prediction? I predict that in the same way we got to 52 security tools, we’re going to get to 52 AI tools. The trigger with security was fear; the trigger with AI is FOMO. The board and exec teams will scramble and buy way too many AI tools all over the business.

[00:32:26] Scott Kinka: And we’ll be doing this same cycle in ten years?

[00:32:31] Denis O’Shea: Probably sooner! We’ll need AI tools just to sort out our AI tools.

[00:33:14] Scott Kinka: Put your sci-fi hat on. In a dystopian future, only one app still works on your phone. What is it?

[00:33:19] Denis O’Shea: An app for pickleball tournaments. I could live without everything else!

[00:33:38] Scott Kinka: I see the bookshelves behind you. What’s on the nightstand right now?

[00:33:46] Denis O’Shea: A book called Theo that my wife convinced me to read, plus What You Need to Know About AI, Let Them by Mel Robbins, The Blue Zones, Unreasonable Hospitality, and Buy Back Your Time by Dan Martell.

[00:34:10] Scott Kinka: Denis, I really enjoy chatting with you. For listeners who want to learn more about Mobile Mentor, where should they go?

[00:34:24] Denis O’Shea: mobile-mentor.com, through Bridgepointe, or on LinkedIn—we’re quite active there.

[00:34:35] Scott Kinka: Any last words of wisdom on AI?

[00:34:42] Denis O’Shea: Take a structured approach. Find the use cases, secure the data, train users, build agents methodically, and measure the ROI. There are no shortcuts.

[00:35:02] Scott Kinka: That’s a whole other episode! It’s a gray area where infrastructure is smashing up against usage.

[00:36:02] Denis O’Shea: Exactly. Success happens when the mandate comes from the top—the CEO or COO—not just the CIO. The IT department makes it secure, but the line of business must own the use cases.

[00:36:50] Scott Kinka: I always say: any tool that does everything doesn’t do anything when you turn it on. Dennis, this was entertaining and fun. I appreciate you joining us.

[00:37:07] Denis O’Shea: Thank you, Scott. I look forward to continuing the partnership.

[00:37:11] Scott Kinka: That’s a wrap for this episode of the Bridgecast. If you enjoyed the show, please subscribe and leave a review. We appreciate you spending your most valuable asset with us—your time. Thanks to Bridgepointe Technologies for their sponsorship. If you’re looking for help with digital transformation, visit bridgepointetechnologies.com. I’m Scott Kinka—do what you can to be the signal in the noise.