My conversation with Edward Amoroso at TAG Infosphere about the need to test your process for complying with the new SEC rules for incident disclosure; the potential for “CYA” filings with the SEC; and how to tell you might be CISO at the wrong company.
Thank you to Ed and TAG who continue to post insightful material on this topic. Interview link
Public / private partnership - 2022 RSA Conference
The FBI is the primary domestic intelligence agency and law enforcement agency for cyber. I had ...
We need offensive GenAI for defensive use
In this substack article, I argue that AI alignment efforts inhibit defensive capabilities. Read ...
SEC Incident Disclosure Rules - Tag Cyber
My conversation with Edward Amoroso at TAG Infosphere about the need to test your process for com...
Law Enforcement - Risks and benefits of AI
In this training session for the Dallas FBI, I covered some of the implications of GenAI for Law ...
Across the pond - Netacea
I joined host Andy Ash (CISO at Netacea) to discuss differences in how CISOs are compensated acro...
AI Defense - Gartner 2024 Security and Risk Management Summit
At the 2024 Gartner Security and Risk Management Summit, my session focused on defending in the A...
Defending in the Era of AI
At this week’s North American Information Security Summit, I made the following points under the ...
