KBKAST

In this episode, we sit down with Paul Davis, Field CISO at JFrog, as he explores JFrog’s approach to building trust in software development pipelines and the evolution towards DevGovOps. Paul shares his perspective on elevating trust from the granular level of software releases to the broader application layer, emphasising the need for consistent, automated, and reliable methodologies in development. He discusses the critical role of automation in balancing speed and security, tackling tool sprawl, and mitigating risks posed by open source dependencies. The conversation touches on the realities of legacy tech debt, the challenges of integrating and consolidating security tooling, and the importance of having a single source of truth.

Paul is an experienced IT Security Executive who, as Field CISO at JFrog, works to help CISOs, IT execs and security teams, enhance protection of their software supply chain. Additionally, he advises IT security startups, mentors security leaders, and provides guidance on various IT security trends.

In this episode, we sit down with M.K. Palmore, Chief Executive Officer at Apogee Global RMS, as he explores strategies for leading through uncertainty with a focus on security, safety, and cyber awareness in times of crisis. M.K. emphasises the critical importance of practicing security response scenarios, noting that organisations truly respond better in real-world incidents when they’ve regularly rehearsed decision-making with their teams. He discusses the value of people-centric leadership, the need for strong relationships with both internal stakeholders and external partners, and the dangers of letting practice fall to the bottom of the priority list. As security concerns grow globally—particularly for government officials and public leaders—M.K. reflects on the heightened threat landscape, the impact of political divisiveness, and the role of leadership in lowering tensions. He concludes by highlighting the enduring need for leaders to maintain humanity and remain diligent, ensuring decisions are always made with people at the centre.

M.K. Palmore is an award-winning cybersecurity executive, military veteran, public speaker, and leadership advisor with more than 30 years of combined public- and private-sector experience. He is the Founder and CEO of Apogee Global RMS, a veteran-owned enterprise risk management advisory firm delivering solutions across cyber and physical risk landscapes. Through Apogee, he also leads the Apogee Speakers Bureau, a premier platform showcasing more than 40 diverse experts at the intersection of technology, leadership, and security.

Palmore’s distinguished career includes service as a commissioned officer in the U.S. Marine Corps, leadership as head of the Cyber Security Branch at the FBI’s San Francisco Field Office, and senior executive roles in the private sector, including VP/Field CSO at Palo Alto Networks and Director in Google Cloud’s Office of the CISO.

A graduate of the U.S. Naval Academy, Palmore also holds an MBA from Pepperdine University. His expertise spans cybersecurity strategy, executive risk management, leadership, digital transformation, cloud security, and national security. He is widely sought after as a keynote speaker and advisor to boards and senior executives navigating today’s complex threat landscape.

Through Apogee Global RMS and its Speakers Bureau, Palmore is advancing his mission to amplify diverse voices and perspectives shaping the future of technology, leadership, and security.

In this episode, we sit down with Eric Stride, Chief Security Officer at Huntress, to discuss the escalating cybersecurity challenges facing the aviation industry. Eric highlights the alarming 600% year-over-year surge in cyberattacks targeting the sector, emphasising how attackers are exploiting the interconnected and fragile aviation supply chain—most notably seen in recent incidents like the ransomware strike on Collins Aerospace. He explores the growing risk posed by both IT and OT system convergence, the shift in regulation tying cybersecurity readiness directly to airworthiness, and the increasing adoption of robust frameworks to mitigate operational disruptions and data breaches. Eric also highlights the critical need for holistic supply chain security, the importance of regulatory enforcement, and a cultural shift in the industry toward prioritising safety and cyber resilience to restore public trust in air travel.

Eric Stride is the Chief Security Officer at Huntress, where he oversees the company’s 24/7 Global Security Operations Center, Detection Engineering, Adversary Tactics, IT Operations, and Internal Security. A 20+ year cybersecurity leader, Eric has held senior roles spanning the U.S. Air Force, NSA, and private sector. 

During his 12 years on active duty, Eric helped architect the Air Force’s first cyber combat mission team, co-authored its first offensive cyber operations manual, and rose to Deputy Chief for Cyber Operations at NSA Georgia. He continues to serve as a Colonel in the Air Force Reserve, where he established its first cyber range squadron. 

In the private sector, Eric co-founded Atlas Cybersecurity, advised defense and enterprise clients as an independent consultant, and led Deloitte’s Advanced Cyber Training portfolio, generating $135M+ in new business. He holds an M.S. in Information Technology Management, a B.S. in Computer Science, and multiple cybersecurity certifications (CISSP, GCIH, CEH). 

In this episode, we sit down with Christine Gadsby, Chief Security Advisor at BlackBerry, as she explores why mobile espionage has become a critical national security threat in Australia and globally. Christine unpacks the mounting risks posed by outdated telco infrastructure, the vulnerability of mobile communications, and the rapid evolution of attacker tactics—fueled by AI, automation, and the expansive attack surface created by free messaging apps. She highlights the real-world impact of scams, cultural differences in social engineering, and the challenges faced by both consumers and organizations in protecting sensitive information.

Christine Gadsby is the Vice President and Chief Information Security Officer for BlackBerry Secure Communications. With over 20 years of experience in mobile and information security, Christine is known for her strategic vision and leadership skills, with a proven track record of developing and implementing robust strategies that protect organizations from evolving risks and digital threats – particularly in the areas of communications security and critical event management.

She is a sought-after panelist, moderator, and keynote speaker with several awards for challenging security mindsets and leading Diversity efforts, including Cybersecurity Woman of the Year, Power 100 Women in Security, and Top 10 Women Leading Cybersecurity. She is a well-known contributor, including RSA, CES, Black Hat and has been quoted in notable media outlets Fox News, CBS, Yahoo, MSN, CSO Magazine, CyberScoop, and Dark Reading.

Joe Cozzupoli is a Principal Security Advisor / Field CISO at Cosive with a focus on helping clients operationalise Cyber Threat Intelligence and Security Operations to reduce risk and deliver measurable business outcomes. With over 20 years in cyber security, Joe has led strategy and delivery for enterprises and government, translating board priorities into executable security programs and aligning identity, data protection, and cloud controls with organisational goals. Equally comfortable in the boardroom and at the whiteboard, he bridges business, architecture, and operations across Australia and internationally.

Prior to joining Cosive, Joe held senior roles at Microsoft, Citrix, Palo Alto Networks, and Cisco where he focused on AI and Data Security, cloud security, risk management, and executive engagement. He has served as a Virtual CISO and Security Architecture Advisor for complex transformations, including industrial and mining clients undergoing separation programs and Azure cloud migrations. Joe works extensively with Australian frameworks and regulations including the ACSC Essential Eight, APRA CPS 234, the SOCI Act, the PSPF, and ISO/IEC 27001, and partners with boards, CISOs, and delivery teams to operationalise pragmatic controls. A committed mentor to the next generation of practitioners, Joe has also completed ISACA training in AI Governance, AI Risk, and Auditing AI.

In this episode, we sit down with Anne-Marie Paterson, a profound risk executive, to explore the evolving role of the Chief Risk Officer and the changing face of risk management. Anne-Marie shares her perspective on how risk now has a real seat at the C-suite table, emphasising the shift from being a business roadblock to serving as an enabler of strategy. She addresses the traditional stereotypes of risk professionals, contrasts conservative legacy approaches with the need for creativity and relevance, and highlights the increasing focus on non-financial risks such as conduct, reputation, and operational challenges—especially in light of rapidly advancing technologies like AI. Anne-Marie also provides insights into Australia’s regulatory landscape, discusses the balance between regulation and innovation, and underscores the importance of fostering a proactive risk culture throughout organisations.

Blending legal expertise with executive leadership to deliver risk transformation and regulatory uplift at scale.

Anne-Marie Paterson is a risk executive and former legal partner with more than two decades of experience spanning risk management, governance, and legal services. Beginning her career in top-tier law firms before founding and leading her own practice, Anne-Marie has gone on to hold senior executive roles across ASX-listed companies and the financial services sector. Recognised as both a strategist and a problem-solver, she has built and led teams that deliver lasting impact in risk management, compliance, legal services, and organisational integrity.

Anne-Marie has shaped enterprise-wide risk culture strategies recognised by APRA, designed whistleblowing and investigation frameworks for ASX-listed companies, and steered some of the largest regulatory uplift programs in the financial services sector. Her career highlights include establishing AMP’s inaugural Group Integrity Office, uplifting governance for Colonial First State post-demerger, and most recently leading Bendigo and Adelaide Bank’s largest multi-stream risk transformation program.

Equally comfortable in the boardroom and at the front line of crisis management, Anne-Marie is known for her values-based leadership, her ability to influence stakeholders from directors to regulators, and her focus on embedding sustainable change. A qualified lawyer, and graduate of the Australian Institute of Company Directors, she is also a regular keynote speaker on risk, governance, and whistleblowing.

In this episode, we sit down with Brad Jones, CISO at Snowflake, as he unpacks the evolving challenges of securing AI deployments and defending against large language model (LLM) powered attacks.

Brad explores the complexities enterprises face in keeping up with the rapid pace of AI innovation, especially as traditional policy frameworks struggle to adapt. He outlines the growing use of LLMs in both consumer and enterprise environments, the unique risks of agentic workflows, and the blurred boundaries between public and private AI deployments.

He also highlights the increased sophistication of social engineering threats fueled by LLMs and discusses strategies for observability, governance, and keeping security teams ahead of the curve in a fast-changing landscape.

Brad serves as the Chief Information Security Officer and has been with the company since 2023. Prior to joining Snowflake, Brad was the CISO and VP of Information Security at Seagate for over six years. Before his tenure at Seagate, Brad oversaw Information Security at Synopsys and SanDisk. Additionally, he has actively participated in a number of customer advisory boards and is currently part of the CISO Advisor Council at NightDragon. Brad earned his Bachelor of Science in Mechanical Engineering from the University of California, Davis.

In this episode, we sit down with Prashant Vadlamudi, Senior Vice President of Product Security at Salesforce, as he explores how organisations can build secure foundations for agentic AI. Prashant offers a holistic view of agentic AI, highlighting its shift from simple generative models to autonomous agents capable of reasoning, sequencing complex tasks, and performing actions—while emphasising the productivity benefits and the imperative for strong trust and security principles. The conversation covers the balance between fostering innovation and maintaining robust governance and security, the evolving nature of guardrails as AI models mature, and the importance of ongoing policy updates to keep pace with rapid technological changes. Prashant also discusses Salesforce’s approach to deploying AI responsibly, the role of trust metrics such as bias and hallucination scores, the necessity for data governance as the backbone of AI strategies, and the shared responsibility between providers and customers to ensure that agentic AI operates securely and transparently.

Prashant Vadlamudi is a strategic leader with two decades of experience driving transformative information security and compliance initiatives. As Senior Vice President of Product Security at Salesforce, he is responsible for safeguarding the company’s products and ensuring adherence to global standards. His career is marked by pivotal leadership roles, including Vice President of Information Security and Cloud Compliance at Cisco, where he established robust security baselines for SaaS offerings, and Director of Technology GRC at Adobe, where he architected the Adobe Common Controls Framework (CCF), a cornerstone of their global trust strategy. Prashant’s expertise spans cloud security, global certifications, and data-driven risk management, allowing him to navigate and mitigate complex security challenges in today’s dynamic landscape. He utilises a risk-based approach to decision-making and focuses on operational efficiency. He has experience in team development and mentoring, with individuals he has mentored holding security leadership positions across the industry. His professional experience includes strategic planning, technical implementation, and team management within the field of information security.

In this episode, we sit down with Emilio Escobar, Chief Information Security Officer at Datadog, as he explores the evolving definition of the modern CISO and what it means to lead security programs in today’s technology-driven organisations. Emilio delves into the transition of CISOs from traditional audit and IT backgrounds to deeply technical and business-savvy leaders, emphasising the importance of being part of the C-suite and understanding both regulatory and technological risks. We discuss the growing need for CISOs to embrace failure as part of innovation, the increasing accountability and liability facing security leaders, and the shift in expectations as companies fine-tune their search for security executives with both operational expertise and business acumen. Emilio also shares his views on the “technical enough” debate within the industry, the potential splitting of the CISO role, and the value of fostering trust and adaptability in security leadership.

Emilio Escobar is Chief Information Security Officer (CISO) at observability and security company Datadog (NASDAQ: DDOG). With two decades of experience in Information Security and Compliance, Emilio has worked at large enterprises, medium-sized companies, and government organizations. Before Datadog, Emilio served as the VP of Information Security for Hulu, where he played a pivotal role in setting up key security functions. Prior to that, Emilio worked for PlayStation, where he built and ran the software security teams. Emilio’s unique approach to security and compliance has always prioritized partnerships and people—hiring the right talent to build the processes, procedures, and technologies that unite Security, Engineering, and Operations teams. Emilio holds a BS in Computer Science from the University of Puerto Rico.

In this episode, we sit down with Christian Morin, Chief Security Officer and Vice President of Product Engineering at Genetec, as he shares his insights on the critical importance of moving beyond a “checkbox” approach to incident response, emphasising the value of regular tabletop exercises and fostering genuine security muscle memory within teams. He highlights the convergence between physical security and cybersecurity, arguing for a unified approach that bridges silos and enhances both protection and response capabilities. Christian also reflects on the growing risks posed by connected IoT and OT devices, the challenges of asset inventory, and the cultural shifts required to improve cyber awareness.

Christian Morin is the Chief Security Officer at Genetec. With over 20 years of experience in IT, telecommunications and physical security industries, Chris has a keen ability to anticipate technological trends and drive meaningful organizational growth. He is a multidisciplinary business leader, having managed the Operations, Customer Service, Sales Engineering, Technical Support, Professional Services, and IT Teams since joining Genetec in 2002. Chris’ executive leadership continues to support the strategic direction and success of the company.