See, Our Compliance Framework Includes a Checkbox for Resilience
Summary
Host David Spark interviews Rivian CISO Mike Johnson and Vanta’s Kush Kashyap on AI’s impact on security. They discuss avoiding token-cost micromanagement, framing risk through business commitments rather than dollars, and the trade-offs of autonomous AI agents. The conversation also covers preventing team burnout and ensuring compliance emerges naturally from robust security controls.
Topics discussed
Intro, 8-year anniversary, and AI psychic joke
AI token costs, literacy, and experimentation phase
Measuring AI risk: business outcomes vs. technical metrics
Quantifying risk and communicating with executives
Agentic AI: autonomous action vs. constant permission
Audit implications of autonomous AI agents
Security team resilience and burnout
Using AI to improve security workflows and efficiency
Security vs. Compliance: incentives and alignment
Closing thoughts and Vanta sponsorship
Listen ad-free on Castria