In Episode 14 of Secure by Design, powered by Secnora, Dan Sinawat, Founder of AI CONNEX, joins host Daniel Kulig for a conversation about what happens when AI adoption starts moving faster than our ability to secure it.

They get into some of the questions business leaders should be asking right now:

Has AI made cybercrime easier?

What happens when we can no longer trust what we see or hear?

Could employees using AI become one of the biggest security risks inside a company?

How do you encourage AI adoption without losing control of sensitive data?

How much authority should companies give AI agents?

Will AI and cybersecurity become basic workplace skills?

And what should every CEO be doing now?

The message is simple: AI and cybersecurity can no longer be treated as separate conversations.

There is enormous opportunity ahead, but the companies that benefit most will be the ones that move fast without becoming careless.

In this episode, Daniel Kulig interviews Ken Huang about the evolving landscape of AI security, the limitations of traditional vulnerability scoring systems like CVSS, and the development of new frameworks such as AI VSS to better assess AI risks.

key topics

• AI security and risk assessment
• Limitations of CVSS for AI agents
• Introduction to AI VSS and its significance
• Autonomy and non-determinism in AI agents
• Integration of frameworks like OWASP top ten and NIST AI RMF

Guest name :Ken Huang

Resources

• OWASP AI VSS Project

• Secnora Cybersecurity

In this episode, cybersecurity expert Victor Marte discusses the critical importance of preparing your organization for AI adoption. We explore foundational security practices, data governance, and the future of AI agents to ensure safe and effective AI integration.

key topics

• AI as a computing revolution and its security implications
• The importance of infrastructure and data quality in AI adoption
• AI agents as autonomous entities and security challenges
• Data classification and control for safe AI use
• Leadership's role in AI readiness and security
• The analogy of building on a cracked foundation for AI deployment
• The evolution of security controls for AI and data
• Practical steps for organizations to prepare for AI integration

Resources

• TechPoly TechPiler
• Victor Marte - LinkedIn
• Secure by Design Podcast

In this episode, cybersecurity expert Adeel Shaikh Muhammad discusses the realities, myths, and marketing hype surrounding Zero Trust security. He explains its importance in modern cybersecurity, how to implement it effectively, and the role of AI and leadership in the Zero Trust journey.

In this insightful interview, cybersecurity pioneer Winn Schwartau shares his decades of experience, discussing the persistent issues in cybersecurity such as apathy, arrogance, and ignorance. He emphasizes the importance of time-based security, trust, decision-making, and the evolving landscape of cyber threats including AI and deepfakes.ResourcesInformation Warfare by Wynn SchwartauThe OODA Loop by John BoydAnalog Network Security by Wynn Schwartau

Summary

In this groundbreaking episode, cybersecurity expert Len Noe discusses the fusion of human and machine, the future of cyber defense, and the ethical implications of transhumanism. Discover how AI, biohacking, and cognitive security are shaping our digital and biological identities.

Key topics

• The definition and philosophy of transhumanism
• Biohacking and human augmentation with implants
• The impact of AI on trust and identity
• Cognitive security and the human mind as an attack surface
• Neural interfaces and brain-computer communication
• The ethical and legal considerations of biohacking
• Future technological advancements in cybersecurity and medicine
• The societal implications of merging biology with technology

Resources

• Cognitive Security Institute - https://cognitivsecurityinstitute.org/2045 Project - https://2045.com/
• Neuralink - https://neuralink.com/
• Synchron (Brain-Computer Interface) - https://synchron.com/
• The Art and Science of Meta War (Book) - https://www.amazon.com/dp/B09XYZ1234

summary

In this episode of Secure by Design, Daniel Kulig and Aylin Orial discuss the rapid evolution of AI in the FinTech sector, emphasizing the shift from experimentation to accountability. They explore high-impact AI use cases, the importance of security in AI implementation, and the need for effective governance and compliance. Aylin shares insights on the shared responsibility of cybersecurity and the necessity of clarity in decision-making processes. The conversation concludes with practical lessons for leaders in the industry and a forward-looking perspective on the future of AI in FinTech.

Takeaways

• AI has transitioned from experimentation to production accountability.
• Fraud detection and risk management yield the fastest ROI in FinTech.
• Security must be integrated into the development process, not treated as an afterthought.
• Governance frameworks should scale with the risk associated with AI use cases.
• The role of the CTO is evolving to include shared cybersecurity responsibilities.
• Clarity in decision-making processes is crucial for successful AI implementation.
• Organizations must prioritize human oversight in AI systems to mitigate risks.
• Effective collaboration between CTOs and CISOs is essential for managing AI-related risks.
• AI can enhance security but also introduces new vulnerabilities.
• A hybrid approach of buying and building AI solutions is often the most effective strategy.

Chapters

• 00:00 The Rapid Evolution of AI in FinTech
• 11:48 High Impact AI Use Cases in FinTech
• 24:08 The Role of Security in AI Implementation
• 36:00 Governance and Compliance in AI
• 43:01 Lessons Learned and Future Outlook

Summary

In this episode of Secure by Design, host Daniel Kulig and guest Eric Boemanns discuss the complexities of vendor management in IT security. They explore the pros and cons of multi-vendor strategies versus consolidation, emphasizing the importance of independence in building and validating security programs. The conversation highlights the challenges organizations face with vendor sprawl, the triggers for vendor conversations, and the need for clarity in decision-making. Practical steps for managing vendors and ensuring effective security outcomes are also shared, culminating in actionable takeaways for listeners.

Takeaways

• Leaders face pressure to consolidate or use multiple vendors.
• Independent validation is crucial for effective security programs.
• Vendor sprawl complicates security management.
• Consolidation can lead to vendor lock-in risks.
• Multi-vendor strategies can enhance resilience.
• Clarity in vendor choices is essential for decision-making.
• Audits can lead to optimizing for compliance over resilience.
• Continuous testing is necessary for security effectiveness.
• Building and validating should be separate processes.
• An inventory of security tools is the first step in management.

Summary:

In this episode, Daniel Kulig and cybersecurity expert Philip Lee discuss the importance of tabletop exercises in securing executive buy-in for cybersecurity initiatives. They explore how these exercises can transform abstract cyber risks into tangible business impacts, the common misconceptions executives have about cybersecurity, and the key ingredients for designing effective tabletop exercises.

Philip shares insights on how to engage executives, the importance of cross-functional communication, and how to measure the success of these exercises. The conversation emphasizes the need for tailored scenarios, the role of lessons learned, and the frequency of tabletop exercises to build organizational resilience.

Takeaways:

• Tabletop exercises can bridge the gap between cybersecurity and executive leadership.
• Engaging executives in realistic scenarios helps them understand the impact of cyber risks.
• Avoid fear-based tabletops; focus on proactive engagement and learning.
• The right attendees are crucial for effective tabletop exercises.
• Informal communication channels often develop as a result of tabletop exercises.
• Tailor scenarios to the specific business context and threat landscape.
• Lessons learned discussions are critical for translating insights into action.
• Frequency of tabletop exercises should balance engagement and effectiveness.
• Cross-functional communication improves after tabletop exercises.
• Success is measured by engagement and actionable insights, not just attendance.

In this episode of the Secure by Design podcast, host Daniel Kulig engages with Horatio Morgan, a digital innovation expert, to explore the intricate relationship between big data, AI, and cybersecurity. They discuss the importance of data governance, the challenges organizations face in balancing data scale with security and privacy, and the emerging threats in AI.

Horatio shares insights on the key stakeholders in AI governance, influential regulatory frameworks, and practical tools for ensuring privacy. The conversation also covers case studies of successes and failures in data governance, predictions for the future of AI, and advice for organizations and professionals navigating this complex landscape.

Takeaways

• Data is the foundation of everything.
• Big data can give you power, but if you can't use it, that equals zero.
• Treat data as a governed asset.
• Privacy gives us permission to do stuff.
• Governance isn't a department, it's a coordinated teamwork.
• You must promote a culture of responsible curiosity.
• Explainable AI is a compliance tool.
• The future belongs to tech philosophers.
• If the customers are not on board, that equals no trust.
• The smarter the system gets, the smarter the attackers become.