And they’ll have to change their operating model. “Security has always been about managing uncertainty. What’s changing is the speed at which uncertainty develops,” he says. “AI is accelerating vulnerability discovery, software development, and attacker innovation simultaneously. That means the CISO must evolve from managing security programs to managing adaptive security systems.”
However, he believes the fundamental mission will stay the same.
“The CISO’s responsibility is still to protect the organization’s ability to operate by understanding risk, communicating it effectively, and helping the business make informed decisions,” he adds. “Technology evolves, but leadership, trust, sound judgment, and clear communication remain constant requirements.”
