RSAC Recap: Agentic AI and Interview With Commvault CISO Bill O'Connell
Digest
This podcast explores the evolving landscape of cybersecurity, marked by a significant shift from Zero Trust to Agentic AI as the dominant theme at the RSA Conference. The discussion delves into the economic implications of AI, predicting a potential diversion of investment from cybersecurity to AI development, leading to a market correction for security firms. The emergence of advanced AI models like OpenAI's is highlighted, drawing parallels to a "gold rush" mentality. The conversation emphasizes that while AI offers potential benefits, it also presents challenges, including high compute costs and a disproportionate advantage for attackers due to lower barriers to entry and fewer consequences for failure. The role of the CISO is examined, stressing the need for business acumen, effective communication of risk, and a focus on cyber resilience. The concept of "ResOps" (Resiliency Operations) is introduced as a crucial discipline for practicing recovery and preparedness. The importance of robust backup strategies and the shift from a purely preventative mindset to one that prioritizes resilience and recovery are also key takeaways. Finally, the podcast reflects on the demanding yet vital role of the CISO in protecting stakeholders and ensuring business continuity.
Outlines
Introduction and Sponsor Message
The podcast begins with a thank you to the sponsor, Meter, and an introduction of the hosts, Jim Love and David Shipley.
RSA Conference Trends: Agentic AI and Market Shifts
The RSA Conference has seen a major shift from Zero Trust to Agentic AI. This trend is impacting the cybersecurity market, with AI drawing significant investment and potentially causing a correction in cybersecurity funding. OpenAI's advancements are noted, creating a "gold rush" atmosphere.
The Realities of Agentic AI and Cybersecurity's New Landscape
Cybersecurity is facing a market correction, moving beyond hype to focus on business fundamentals. Agentic AI introduces significant compute costs and offers a disproportionate advantage to attackers. The spectacle of industry events is contrasted with the early stages of AI security.
The Evolving CISO Role: Resilience, Communication, and Business Acumen
An interview with Bill O'Connell, CISO of Commvault, explores the growing importance of the CISO role, focusing on cyber resilience, effective communication of risk to business stakeholders, and understanding the business context. The discussion also covers defining AI, implementing controls for non-human identities, and the critical need for robust backups.
Shifting Focus to Resilience and the Rise of ResOps
The conversation highlights a historical over-emphasis on prevention in cybersecurity, stressing the growing need for resilience and recovery capabilities. The concept of a "resilience gap" is introduced, advocating for proactive practice of incident response and recovery through the discipline of "ResOps."
Advice for CISOs and the Value of the Role
Bill O'Connell advises new CISOs to prioritize understanding the business and its revenue streams. The discussion concludes by celebrating the evolving narrative of CISOs from scapegoats to business enablers, emphasizing their crucial role in protecting stakeholders and the inherent value in the demanding CISO position.
Keywords
Agentic AI
AI systems capable of autonomous action, impacting cybersecurity with potential benefits and risks, including increased costs and advantages for attackers.
Zero Trust
A security framework emphasizing strict identity verification for all network access, operating on the principle of "never trust, always verify."
RSA Conference
A major cybersecurity event showcasing industry trends, technology, and policy, with a recent focus shifting towards Agentic AI.
Cybersecurity Market Correction
A period of slowdown and re-evaluation in the cybersecurity market, leading to a focus on business fundamentals and potential consolidation.
OpenAI
A leading AI research lab whose advancements, like "Open Claw," significantly influence the AI and cybersecurity landscape.
Cyber Resilience
An organization's ability to withstand, respond to, and recover from cyber incidents, emphasizing preparedness and rapid recovery.
CISO (Chief Information Security Officer)
A senior executive responsible for information security, whose role has evolved to require strategic business understanding and communication skills.
Resiliency Operations (ResOps)
An emerging discipline focused on practicing and ensuring an organization's ability to recover from disruptions, complementing traditional security operations.
Backups
Essential data recovery mechanisms, particularly crucial in the unpredictable environment created by advanced AI technologies.
Q&A
What is the main trend observed at the recent RSA Conference regarding cybersecurity focus?
The dominant trend has shifted away from "Zero Trust" as the primary focus. Instead, there's a significant and widespread emphasis on "Agentic AI" across various vendors and product announcements.
How is AI impacting the cybersecurity industry from an investment perspective?
AI is drawing significant investment, potentially diverting funds from traditional cybersecurity. This market shift means cybersecurity companies may face reduced funding and increased pressure to demonstrate profitability and strong business fundamentals.
What are the primary concerns regarding Agentic AI in cybersecurity?
While Agentic AI offers promise for autonomous and faster operations, it also presents risks. The industry is grappling with its potential to go wrong, the high compute costs involved, and the disproportionate advantage it offers to attackers.
What is the significance of "ResOps" in the context of cybersecurity?
ResOps, or Resiliency Operations, emphasizes the critical need for organizations to practice and prepare for disruptions. It moves beyond just defense and prevention to ensure the ability to recover quickly and effectively, treating resilience as a practiced discipline.
What advice is given to new CISOs?
New CISOs are advised to deeply understand the business they are protecting, including how it makes money and the strategic goals of other executives. This understanding allows them to align security initiatives with business objectives and communicate risks effectively.
How does AI disproportionately favor attackers in cybersecurity?
Attackers benefit more from AI because they face no penalties for adoption, are massive risk-takers, and can operate at speed. They don't need to navigate corporate environments, and failure has fewer consequences, allowing them to leverage AI tools more readily.
What is the evolving role of the CISO?
The CISO role has become increasingly critical and strategic, reporting directly to the CEO and engaging with the board. It requires not only technical expertise but also strong business acumen to communicate risks and align security with organizational goals.
Why are backups considered crucial in the age of AI?
With the unpredictable nature of AI, especially agentic AI, robust backups are essential for recovery. Just as in the "Silicon Valley" TV show example, AI actions can have unintended consequences, making the ability to restore systems vital.
Show Notes
RSAC Recap: Agentic AI Takes Over, Security Funding Shifts, and Why CISOs Must Focus on Resilience
Cybersecurity Today would like to thank Meter for their support in bringing you this podcast. Meter delivers a complete networking stack, wired, wireless and cellular in one integrated solution that's built for performance and scale. You can find them at Meter.com/cst
Jim Love and co-host David Shipley recap the RSA Conference in San Francisco, noting that "zero trust" marketing has faded and "agentic AI" (especially "agentic SOC") dominated vendor messaging. David highlights a major market shift: AI is pressuring cybersecurity company valuations and could reduce funding, accelerate consolidation, and raise security costs due to heavy compute requirements, even as demand increases. They discuss how AI disproportionately benefits attackers, including new phishing-as-a-service capabilities, while organizations cut security hiring in anticipation of AI gains. David's standout booth, MindGuard, used a 1990s metaphor to argue AI security is as immature as cybersecurity was decades ago. He also interviews Commvault CSO Bill O'Connell on the evolving CISO role, communicating risk, the importance of recovery and "ResOps," and celebrating CISOs, including Time magazine's CISO of the year concept.
00:00 Weekend Show Kickoff
00:46 RSAC Recap Setup
01:06 Zero Trust Is Dead
01:48 Agentic SOC Everywhere
03:41 AI Shifts Security Valuations
06:55 Peak Security And Consolidation
07:55 Costs And Layoffs Warning
09:35 Attackers Gain The Edge
11:48 RSAC Booth Spectacle
13:39 MindGuard Nineties Metaphor
15:40 Commvault CISO Interview Begins
17:22 Backup To Cyber Resilience
18:04 Modern CISO Role Evolution
19:55 Translating Risk For Leaders
21:44 Risk Versus FUD
22:22 AI Hype And CISO Relevance
23:29 Defining AI And Controls
24:33 Agentic AI And Backups
25:49 Resilience Over Prevention
27:52 ResOps And Practicing Recovery
31:06 Advice For New CISOs
33:30 Celebrating The CISO Role
35:43 Is The Job Worth It
37:06 Host Wrap And Audience Feedback
39:18 Korea Trip And Show Signoff
40:13 Sponsor Message And Closing
Table of contents
United States
