Critical infrastructure operators are facing a rapidly evolving threat landscape where cyberattacks can create real-world operational disruption with national and economic consequences. In this conversation, Vaughn Hazen explores the growing convergence of cybercrime, geopolitics, and operational technology risk across transportation and logistics environments. The discussion examines the unique security challenges of protecting large-scale operational systems, the realities of resilience and incident response in critical infrastructure, and whether private industry is truly prepared for its expanding role in national cyber defense.
Nominate the companies setting the standard for innovation, resilience, and leadership in security. Submit your CSO Awards nominations by September 16 and celebrate the organizations shaping the future of cybersecurity at the 2026 CSO Cybersecurity Awards & Conference. #CSOconference #cybersecurity #csoonline
Learn more and submit a nomination today. 2026 CSO Conference: Awards

As enterprises race to integrate AI, SaaS, APIs, and multi-cloud environments, cloud security complexity is accelerating faster than many organizations can realistically govern. In this conversation, Jim Reavis discusses where enterprise cloud strategy continues to break down, why shared responsibility models still create dangerous accountability gaps, and how AI adoption is exposing weaknesses in identity, trust, and risk management. The discussion also explores the long-term implications of increasingly interconnected cloud ecosystems and the security debt organizations may be unknowingly accumulating. Nominate the companies setting the standard for innovation, resilience, and leadership in security.
Submit your CSO Awards nominations by September 16 and celebrate the organizations shaping the future of cybersecurity at the 2026 CSO Cybersecurity Awards & Conference. #CSOconference #cybersecurity #csoonline

Security awareness programs are evolving beyond compliance

AI coding assistants are rapidly changing how software is built,

Development teams are increasingly relying on AI coding tools to

AI adoption is accelerating inside enterprises, but many organizations are still struggling to define what a mature AI security program actually looks like. Lamont Orange discusses the foundational principles of AI security, the risks hiding in plain sight, and the governance decisions organizations need to make now to reduce exposure before AI risk compounds. The conversation also examines practical controls, organizational accountability, and how CISOs can prioritize action when time and resources are limited.

As enterprises move rapidly toward AI and agentic systems, questions around governance, trust, and accountability are becoming increasingly urgent. In this interview, Malcolm Harkins explores what trustworthy AI actually means, what organizations need to achieve it, and how existing cybersecurity and compliance frameworks are struggling to address the realities of AI model security. The discussion also examines the gaps emerging around governance, risk management, and accountability as organizations deploy increasingly autonomous systems.

Traditional security awareness programs often struggle to create lasting behavioral change inside organizations. In this interview, Missy Bentzen discusses how Docusign approached security awareness and human risk management through its partnership with Hoxhunt. The conversation explores the organizational challenges the program was designed to address, the results that stood out most during implementation, and how leadership and employees responded to a more behavior-focused approach to cybersecurity education.

Traditional security models were not designed for environments where AI systems continuously access, process, and learn from enterprise data. In this interview, Todd Moore explains why organizations are shifting toward more data-centric security strategies and what that change means in practice. The conversation explores unified data awareness, the growing importance of crypto-agility, and why organizations need to prepare now for both AI-driven risk and the coming realities of post-quantum security.