How are cybersecurity strategies adapting to AI risks?

Mandy Andress

CISO · Elastic

Inventory AI usage

Mandy Andress says the first thing CISOs should focus on is getting an inventory and a handle on AI usage in their organization, because without clarity on where it's used, it's harder to put controls and structure around it.

The answer starts at 15:01.

Ronan Murphy

Chief Data Strategy Officer · Forcepoint

Protecting their data

Ronan Murphy says organizations are adapting by protecting their data, the intelligence or "alpha" he calls the new perimeter, because data is the oxygen that makes AI tools effective.

Jacob Thomas

Manager of Information Security · Texas Children'S Hospital

Good governance model

Jacob Thomas says his approach is a good governance model with mitigating and compensating controls that reduces the attack surface — an approach he says isn't unique to AI but applies across their cyber stack.

AK

Alton Kizziah

Chief Executive Officer · Beazley Security

Dedicated AI risk project

Alton Kizziah says the insurer Beazley has a whole effort and project underway with people assigned just to the AI question, asking what the risk will be and how it changes cyber.

JA

James J Azar

Chief Information Security Officer · Artera Services

Strict segmentation & validation

James J Azar says organizations should make strict network segmentation, outbound communication controls, limited privileges and continuous AI validation standard architectural requirements, since attackers now target trusted control-plane platforms and AI can move laterally faster than most organizations can detect.