09/11/2026
Spent the day at Official Cybersecurity Summit and came away with a lot! The discussions covered a fascinating range of issues around the rapidly changing cybersecurity landscape, especially the impact of AI. Thx CyberRisk Alliance and ISACA Global.
Some of the sessions and conversations that stood out to me:
AI Governance Without the Handcuffs. A great discussion around how organizations can move quickly with AI without losing control.
Proving Cyber Resilience: Measuring Outcomes, Not Effort. An important reminder that security isn't just about how much effort you put in, but whether you can actually demonstrate resilience when something goes wrong.
Real World Incident Response with ESET. Practical perspectives on what incident response really looks like when you're dealing with an actual security event.
How Cloud Security Is Adapting to the Age of AI. Especially interesting as AI changes both the attack surface and the way organizations have to think about cloud environments.
Loop Engineering: Guardrails Your AI Coding Agent Can't Bypass. One of the more forward looking convos, considering what happens as AI agents become increasingly involved in actually building and deploying software.
Beyond the Prompt: Architecting Trust for Autonomous AI Agents. Another important discussion about the shift from simply using AI tools to managing increasingly autonomous AI systems.
Measuring Impact When AI Can Find and Patch Vulnerabilities. A fascinating question: if AI can dramatically accelerate vulnerability discovery and remediation, how should orgs measure the value and effectiveness of their security programs?
There were plenty of other interesting convos around AI powered phishing, deception and threat detection, data resilience, immutable backups, Shadow AI, and securing everything organizations build and run.
What I found most interesting was the common thread running through so many of the sessions: AI isn't simply another technology being added to cybersecurity. It's changing the underlying assumptions about how security is designed, operated, measured, and managed.
