Guest:

Topics:

How does "outsourcing" security to the cloud change the intensity of the security vs. privacy struggle for a CISO?
Does the centralization of cloud make it a bigger target for regulators, or is there a dimension we're missing?
Does the Shared Responsibility Model actually survive contact with regulators, and how does AI complicate that boundary?
Can AI actually automate the translation of fragmented rules into evidence, or are we just dreaming?
How do we navigate the collision between transparency (logging everything) and privacy (recording nothing)?
What is your one piece of practical advice for leaders helping their teams adopt AI?

Resources:

EP273 From CISA to Cloud: AI Assurance, Concentration Risk, and the New Regulatory Frontier

Cloud Security Podcast by Google