Inverted Podcast #30 – Evidence Guided Product Management with Itamar Gilad

Listen on Spotify

Good product management is not about shipping more. It is about creating value and using evidence to decide what is actually worth building.

Inverted Podcast #30 features Itamar Gilad, author of Evidence-Guided and former Google product leader, on how evidence-guided product management applies to security, infrastructure, quality, and other products where success is hard to see or measure.

Itamar walks through the GIST framework (Goals, Ideas, Steps, and Tasks) and why teams should replace opinion-driven decisions with progressively stronger evidence. The conversation covers how security teams can define a meaningful North Star metric, why measuring security posture and coverage can be more useful than counting attacks, and how to connect security investments to broader business objectives.

We also dig into what AI changes (and what it does not): faster building makes discovery and validation just as important, if not more so, because poorly validated launches create long-term complexity, maintenance cost, and product bloat. Itamar explains how different kinds of evidence (opinions, customer conversations, prototypes, fake-door tests, early adopter programs, experiments, and release results) deserve different levels of confidence.

The final stretch tackles output-based goals and feature roadmaps, why outcome-based OKRs give teams more freedom to solve real problems, and how bottom-up goal setting lets product teams influence strategy even when security is not a headline priority. For security teams who think their work is too hard to measure, Itamar’s message is simple: don’t give yourself a free pass.

About the guest

Itamar Gilad is a coach, author, and speaker specializing in evidence-guided product management and product strategy. For over two decades he held senior product management and engineering roles at Google, Microsoft, and a number of startups; at Google he worked at YouTube and led parts of Gmail. He is the author of Evidence-Guided: Creating High-Impact Products in the Face of Uncertainty, publishes a popular product management newsletter, and created methodologies including the GIST Framework and the Confidence Meter. Itamar is based in Barcelona, Spain. Learn more at itamargilad.com.

Key takeaways

  • Evidence-guided product management means injecting evidence into every step of the process instead of deciding on opinions, logic, or the highest-paid person’s view.
  • GIST (Goals, Ideas, Steps, Tasks) gives teams a structure for moving from goals to validated work.
  • Security teams can define a North Star around what they control: coverage and security posture (users, devices, or assets fully protected) rather than counts of invisible attacks.
  • AI makes building faster, but not every idea deserves to ship; poorly validated features add complexity, maintenance cost, and bloat.
  • Not all evidence is equal: opinions and anecdotes rank below prototypes, fake-door tests, early adopter programs, experiments, and real release results.
  • Output goals (“build this feature”) are guesswork dressed as a plan; outcome-based OKRs, often set bottom-up, give teams room to solve real problems.
  • Security work is not exempt from measurement. Don’t give yourself a free pass. The job is still creating value for customers and the business.

Chapters

00:00 Introduction
01:19 What Is Evidence-Guided Product Management?
04:03 The GIST Framework
04:29 Finding a North Star Metric for Security
07:53 Security Posture as a Product Metric
10:33 Connecting Security to Business Priorities
14:30 Has AI Changed Product Discovery?
19:02 Different Levels of Evidence and Confidence
23:17 Measuring the “Badness Funnel”
24:48 Connecting Security Work to Company Objectives
27:44 Bottom-Up OKRs and Influencing Leadership
32:04 Why Output Goals Are Dangerous
36:23 Why Security Teams Don’t Get a Free Pass
39:02 Creating Value Is Still the Job

Episode notes by topic (searchable excerpt)

These notes expand the public chapter list and episode description. They are editorial summaries for search and skimming, not a full transcript or verbatim quotations.

What is evidence-guided product management?

Itamar frames evidence-guided development by comparison with law, medicine, and science, where decisions are not made solely on what seems right. Product teams should do the same: bring evidence into goals, ideas, and execution rather than relying on opinion or seniority.

The GIST framework and a North Star for security

GIST stands for Goals, Ideas, Steps, and Tasks. At the goals layer, a North Star metric captures the value created for users. For security products, Itamar suggests focusing on the side teams can control: coverage, such as the number of users, devices, or assets fully protected against known attacks. The hosts discuss security posture as a baseline product metric.

AI, discovery, and levels of evidence

AI lowers the cost of building, but shipping more unvalidated features bloats products and confuses users. Evidence carries different weight: a couple of customer conversations are anecdotal, repeated signals from many customers are market data, and prototypes, usability tests, fake-door tests, and A/B experiments raise confidence further. Itamar’s Confidence Meter turns this into a score.

Connecting security to company objectives

The hosts raise the “invisible line” problem (not knowing how much badness is out there) and how to argue for posture improvements against the next hot feature. The discussion covers linking security work to company objectives so it competes on value, not fear.

Outcome OKRs over output goals

Output goals and long roadmaps are guesswork pretending to be certainty. Itamar argues for outcome-based key results, many of which should come bottom-up, and for gently questioning feature requests by asking what will change if they succeed.

People on this episode

FAQ

Who should watch this episode?

Product managers and leaders in security, infrastructure, developer tooling, and quality, and any PM who wants to make better decisions with evidence instead of opinions.

What is the GIST framework?

GIST (Goals, Ideas, Steps, and Tasks) is Itamar Gilad’s model for evidence-guided product development: clear outcome goals, ideas evaluated by evidence, incremental steps that test them, and tasks that execute the work.

How can a security team pick a North Star metric?

Rather than counting attacks you cannot fully see, focus on what you control, for example, coverage or security posture: how many users, devices, or assets meet a defined protection baseline.

Where should I go next on Inverted PM?

Pair this with Episode 29 on the Business Model Canvas with Alex Osterwalder and Episode 22 with Eric Ries, then browse the podcast hub for more inverted-product conversations.

Related on Inverted PM

Connect with the hosts and guests on the video or on LinkedIn to continue the conversation.

🎧 Subscribe on YouTube, follow on Spotify, or find the Inverted Podcast on LinkedIn, Amazon Music/Audible, iHeartRadio, or invertedpm.com. Join the Inverted PM LinkedIn group.

Explore more

Browse all Inverted Podcast episodes, read the blog, or meet the hosts.