AI Resilience as CISOs Can Balance Internal AI Risk and Productivity Concerns - Ryan Grant, Bill O'Connell - BSW #469
Summary
Bill O’Connell, CISO of Commvault, discusses the shift from pure defense to organizational resilience, urging leaders to practice recovery through cross-functional tabletop exercises and define minimum viable operations. He addresses AI governance by advocating for controlled adoption, treating AI agents like employees with strict access controls, and balancing innovation speed with security. The episode also features a live interview with ESET, which highlights findings from its 2026 SMB Cyber Readiness Index, emphasizing that while AI accelerates threats like phishing, foundational cyber …
Topics discussed
Intro, host welcome, and Patriots banter
Sponsor: Network security in digital transformation
Bill O'Connell intro and CISO role at Commvault
Sponsor: ThreatLocker Zero Trust execution
The 'resilient boxer' philosophy and availability
Shifting from zero-breach to resilience mindset
KPIs, business continuity, and recovery planning
AI in security: risks, controls, and governance
Balancing speed and security: the governance paradox
Personal AI usage and avoiding the 'department of no'
Configuration management and asset visibility
Tabletop exercises and the importance of practice
Partnering with the CFO to quantify risk in dollars
Defining minimum viable operations for recovery
Cross-functional drills and final advice on sparring
Sponsors: Google Cloud, ISARA, and Semprus
Cyber Risk TV intro with ESET's Ryan Grant
Survey findings: AI threats and fundamental hygiene
Phishing, culture, and the human element
Shadow AI and extending governance to new tools
Starting with frameworks and addressing resource gaps
ESET Protect line, cyber warranty, and insurance
Listen ad-free on Castria