The CISO's 2026 AI Agenda: Govern What You Use, Defend with What You Build
CISOs have always owned the risk. Anything that creates risk in the company (every IT system, every employee, every vendor, every contractor) has always landed somewhere on the security org's plate. The scope is not new.
What's new is how the risk shows up.
Most of us lived through the last big shift like this: cloud. Before cloud, you spin up a new server in the data center, by default it's only exposed internally. The blast radius of a misconfiguration was bounded by your network. Then cloud came, someone clicks a button, a new instance is up, and by default it's exposed to the internet. The whole risk model changed in a weekend. Cloud security as a discipline came after that, not before. CSPM, CIEM, CNAPP, all of it showed up after cloud was already in production.

In Partnership With
