CISO Series Podcast sponsors and ad reads

Coming up next, if every AI use case goes through the same committee, your governance is both too slow and too weak. This AI governance and AI security tip is sponsored by Speakeasy. Here's a pattern that stalls AI programs. Every AI idea, from internal models used by HR to customer-facing chatbot agents get funneled into one committee that reviews them all the same way. The trivial cases wait months. The genuinely dangerous ones get the same rubber stamp as the rest. As the way you handle oversight is the same no matter the AI use case, you're in for a world of hurt. Mature programs tier their AI by risk and match the level of scrutiny to the tier. The EU AI Act uses this as a basis for its core logic. Some uses are prohibited outright. High-risk uses carry heavy obligation like human oversight and documentation, and low-risk uses carry almost none. NIST's AIRMF says the same on the accountability side, that governance needs clear roles and named owners, not diffuse committee consensus. So classify your use cases before you review them and route the high-risk ones to real scrutiny while letting the low-risk ones move. And for each AI system, name a single accountable owner, one person who answers for its risks. Shared accountability is just another way of saying nobody is accountable. Go to speakeasy.com to see how leading enterprises are scaling AI securely with the Speakeasy AI control plane.

Thank you, both gentlemen. That was excellent. I want to thank our sponsor, and that would be Vanta. Remember, trust is everything. Earn and prove it with Vanta. Go ahead. Get that Vanta agent working for you 24-7. A GRC engineer that's always working, looking out for you. Go to Vanta.com slash CISO and add the slash CISO. Easiest way to let Vanta know that you heard about them from the CISO series.

And also, most importantly, as much as I love you, I have to thank our wonderful sponsor. And that'd be Native Security. Unify, manage and maximize built-in cloud security controls and achieve secure by design consistency across cloud environments. You in more than one of them? You in Azure, Google Cloud, AWS? I'm sure you are. You're all over the place. Take a look at what they're doing over at native security, native.security.

Who's our sponsor this week? It is no secret that AI is only as good as the data available to it. That's where most AI security solutions fall short. Strike 48 takes a different approach. The platform unifies agentic AI with unmatched log visibility, querying your data wherever it lives, including cold storage logs. Now that means no blind spots, no data gaps, and no rip and replace. This gives Strike 48's purpose-built agents the full picture they need to actually do the work, not summarize it, not suggest next steps, but actually do it, and with a full audit trail. Use the no-code agent builder to create and deploy agents for phishing detection, alert triage, threat correlation, and more, or get started immediately with pre-built agent clusters. Your agents run investigations, complete incident reports, and hand off findings to each other around the clock, compressing what used to take hours into minutes. You can learn more at strike48.com.

Let's hear it for our sponsors, Strike 48. the agentic operations platform without blind spots, and Dropzone AI hunt, investigate, and respond at machine scale. Go to strike48.com and dropzone.ai.

Let's hear it for our sponsors, Strike 48. the agentic operations platform without blind spots, and Dropzone AI hunt, investigate, and respond at machine scale. Go to strike48.com and dropzone.ai.

I want to thank, again, Aqueduct Technologies for hosting this event. Let's hear it for them. And we loved being here. We'd love to come back.

I want to thank our sponsor, and that would be Vanta. Remember, automate compliance, manage risk, and accelerate trust with AI. Go to their website, vanta.com, and do me a favor. Go to vanta.com. Just a super simple way to let them know, hey, we heard you on the CISO series. This is how you'll know that we heard you. We're going to type in vanta.com. So thank you for doing that.

Excellent. Well, that brings us to the tail end of this very show. I want to thank Amit, and I want to thank Andy, but I also want to thank Amit's company, and that would be Native. Remember, the cloud security control plane for the enterprise. Amit, I'm going to let you have the very last word. If you have a offer or anything that you would like to give to our audience, and also for that matter, if you're hiring over at Native, by the way, let me remind everybody that their website is native.security. Go check it out there. Any last words from you, Amit? first of all yes we're hiring across functions we're we're growing very fast and opportunity work was really some of the foremost experts in this space and with security teams across the most forward-thinking organizations and companies out there so so big opportunity we we welcome anyone can reach reach me directly on linkedin as well i think it's back to sort of you know we touched on it on on different points throughout the show, right? Where things are moving very fast. It's about how do we adapt to it? I think it's hard for us to predict now what things are going to look like. I think it's that continuous adaption to this changing reality. And in the end, I think the fundamental shift we're going to see across security, we're starting with cloud, but across security is that shift down where security is part of the infrastructure, part of the services, part of the platforms where we're building and operating. And that's what will allow us ultimately to adapt quickly enough to this changing landscape. But yeah, it was great being here. Andy, always great to chat. And yeah, thank you, David.