Security Leaders Discuss AI Governance and Cyber Resilience

Summary

Bill O'Connell discusses AI governance and recovery exercises, while ESET's Ryan Grant offers security guidance for smaller businesses and describes a redesigned security offering.

Key points

• O'Connell recommends testing recovery plans with the people responsible for restoring systems, including their dependencies and time to a clean recovery.
• He describes vetting AI use cases, reviewing account permissions and data access, and directing employees toward an approved AI gateway.
• The discussion recommends cross-functional tabletop exercises and prioritizing the systems needed for minimum viable operations.
• The speakers suggest working with finance teams to quantify downtime and contractual penalties when seeking resources for resilience.
• Grant recommends extending existing security frameworks, access controls and training to AI tools and agents.
• ESET says its redesigned offering combines monitoring, vulnerability and patch management, multifactor authentication and a cyber warranty; Grant clarifies that the warranty is not insurance.