KBKAST

KB grabs the mic backstage at SPHERE 2026 by Atmos for two conversations that sit on either end of the same problem: how leaders should be thinking about risk in an unstable world, and what it actually looks like when a sector has been living that instability for years. First up, KB sits down with Chris Krebs, former Director of the U.S. Cybersecurity and Infrastructure Security Agency (CISA). They get into the CISA cuts making headlines, why old assumptions baked into risk registers no longer hold, and the five cracks Chris sees forming in the foundation of modern risk management. He also breaks down why boards need to push vendors harder on third-party risk, and why cyber has become the opening move in every modern conflict. Then Tom Huth, Specialist in Energy Market Cyber Incident Coordination at AEMO, and Ryan McLaren, co-founder and COO of Retrospect Labs, bring it back to ground level. They unpack why the energy sector’s tight-knit supply chain has made it a genuine leader in cyber resilience, the difference between a tabletop exercise and a full functional simulation, and the trust problem nobody’s fully solved: how do you verify who’s really on the other end of the phone when your systems go down? A grounded look at what it takes to build real muscle memory before the bad day arrives.

KB is on the ground at SAP Sapphire in Orlando, where AI has officially moved beyond experimentation and into the core of enterprise decision making. In two conversations, Marielle Ehrmann (Chief Security, Compliance and Risk Officer, SAP) unpacks why AI governance has entered the boardroom as an accelerator rather than a brake, what separates responsible AI from AI theater, and why the biggest risk usually isn’t the model itself but the humans around it. Then Martin Merz (President Sovereign Cloud, SAP) explains why sovereign cloud has surged back into the conversation, the four dimensions SAP uses to define it, and why Australia’s pragmatic regulatory approach puts it among the top countries he works with globally. A grounded look at trust, governance and what it actually takes to innovate at enterprise scale. Keywords: AI governance, sovereign cloud, enterprise AI risk, digital sovereignty, responsible AI

Mark Jones is Co Founder of MosaicalAI and has spent more than 25 years working across cybersecurity, technology risk, governance and resilience in complex environments where decisions need to be defensible and the cost of getting it wrong is high. His work sits at the intersection of security, business leadership and change. He helps organisations understand risk, build capability in their people, create practical operating models, and move with confidence when technology is changing faster than traditional governance can keep up. Today, Mark’s work is focused on AI. At MosaicalAI, he helps Australian organisations rebuild how teams work for the agentic era. His view is that every team runs on three things: people, technology and data, but most teams are still operating on a model built before AI. MosaicalAI maps how a team works today, builds the agentic version beside it, then rebuilds it with them. Mark’s approach is AI native and cybersecurity driven. He does not start with tools or generic productivity use cases. He starts with the team, the workflow, the data, the controls, the risks and the decisions that matter. The goal is practical AI capability that the organisation owns, understands and can govern. Cybersecurity is MosaicalAI’s first proof point because it is where AI adoption gets real quickly. Cyber teams already understand risk, evidence, accountability, control and resilience. When they use AI to improve triage, reporting, exposure management, control mapping, evidence gathering and decision support, they are better placed to guide safe AI adoption across the broader business. Mark believes AI cannot simply be bolted onto an organisation. It needs ownership, guardrails, evidence, accountability, resilience and control from day one. He is a Certified Information Security Manager and Certified Information Systems Security Professional, combining practical executive experience with globally recognised security credentials.

Recorded at Cisco Live 2026 in Las Vegas, where 20,000 operators, engineers and executives gathered at Mandalay Bay to shape the future of networking, AI and cybersecurity. KB sits down with two Cisco security leaders on the front lines of agentic AI. Peter Bailey, SVP and GM of Cisco Security, breaks down why the security frameworks built over the last 20 years weren’t designed for machine-speed agents, and what governance actually needs to look like now. Then Amy Chang, Head of AI Threat Intelligence and Security Research, reveals how adversarial attacks are moving beyond text into images and audio in ways that are invisible to the human eye but not to your agents. Key topics: agentic AI governance, prompt injection and jailbreaks, multimodal attack vectors, MCP security gaps, identity in AI environments, security by design, and the post-Mythos threat landscape.

KB grabs the mic backstage at SPHERE 2026 by Atmos for two conversations that couldn’t look more different on the surface, but end up pointing at the same thing: where cyber threats really come from, and who’s pushing back. First up, KB sits down with Lieutenant General Michelle McGuinness, Australia’s National Cybersecurity Coordinator, and Steph Way, Director of the National Office of Cybersecurity. They get into what those 60 actions under Horizon 1 actually delivered, how limited use legislation is changing the way businesses talk to government after an incident, and why cyber resilience can’t just sit with the technical few — it has to be something every Australian feels some ownership of. Then James Taliento, CEO of AFTRDRK, and Jeremy Kirk, Director of Intelligence at Okta, bring it down to ground level. Cybercrime-as-a-service has made it possible for almost anyone with a internet connection to get in the game, and the latest wave of threat actors isn’t in it for ideology or even the money. It’s the thrill, the bragging rights, and a kind of rockstar lifestyle that’s being actively sold to a younger generation. It’s a candid, practical chat about what all of that means for defenders today.

Pete Harteveld was appointed CEO of Exabeam in October 2025 and most recently served as the company’s Chief Revenue Officer.  He has more than two decades of leadership experience having built a reputation for scaling revenue and building high-performing global teams across the cybersecurity and technology sectors. Pete played a pivotal role in uniting Exabeam and LogRhythm in 2024, leveraging his deep expertise in mergers and acquisitions to drive a seamless integration and maximise stakeholder value. His earlier career included leadership roles at Aryaka, Veracode, Compuware, and Deloitte, where he guided complex integrations, redefined go-to-market strategies, and delivered measurable impact for customers and partners alike. At Exabeam, Harteveld is focused on advancing the mission to secure the world from cyberthreats. His leadership centers on empowering customers with cutting-edge solutions, fostering innovation that drives business outcomes, and cultivating a culture of excellence that inspires teams to achieve their best.

KB is on the ground at the ISACA 2026 North American Conference in Las Vegas, this time for the AI conversation that’s reshaping ROI, risk and governance all at once. Sushila Nair, Independent Information Security Consultant, and President of the ISACA Greater Washington D.C. chapter, opens with the AI ROI question everyone keeps circling. She walks through ISACA’s latest AI Pulse research, explains why last year’s AI was your friend and this year’s AI has put its hard hat on, and breaks down the shift from chatbots to agents that’s finally moving the numbers. One of her clients went from 4 agents in proof of concept to 140 in production this year. She also covers the workforce transformation underneath all of it, who’s getting displaced first, and why automation is the real driver of cost savings. Then Mark Thomas, Founder & President of Escoute Consulting and board advisor and ISACA hall of Fame entrant, joins to talk about what all of this means for governance and risk. He walks through ISACA’s new AAIR certification (Advanced AI Risk), why traditional frameworks aren’t outdated but incomplete, and how concepts like drift, calibration and model cards are becoming non-negotiable. His central argument: accountability has to come before architecture, and you can’t certify a moving target with a static framework. More about ISACA’s AAIR Certification here: https://www.isaca.org/credentialing/aair ISACA® 2026 AI Pulse Poll: https://www.isaca.org/resources/ai-pulse-poll

As a specialist in networking and software development, Vincent joined the F5 team in France in 2000 as a pre-sales engineer. Having contributed to F5’s growth initially in the French market and South EMEA region, he took on several managerial roles before overseeing from 2018 the EMEA pre-sales teams as the VP of Solutions Engineering for Europe, Middle East, and Africa (EMEA).  From 2025, Vincent has been appointed into the role of VP Global AI Leader managing an international team of Global Solutions Architects focused on AI.  Vincent holds a degree in network engineering and software development from ESITCOM, and a technical degree in Telecommunications and Network engineering.  He speaks at events across the globe about Artificial Intelligence and specifically about performing AI inference at scale.

KB takes the mic behind the scenes at SPHERE 2026 by Atmos, where 1,500 people from across cyber, legal, tech and government packed a room to do something rare: shift the entire industry’s focus from the moment of crisis to what comes before it. In two conversations, Reece Corbett-Wilkins and Leah Pinto reflect on the day, the speakers, and what it actually takes to change an industry’s centre of gravity. Then Anthony Cooke, James Blakely and Michael Boyd unpack why government can be a friend and a facilitator rather than the fun police, the trust that limited use disclosure has unlocked, and what frameworks like Horizon 2 mean for the small businesses sitting at the underbelly of every supply chain. A practical, hopeful look at collaboration, accountability and what cyber resilience looks like when everyone in the room speaks the same language.

Snowflake has recently appointed Mayank Upadhyay its Chief Security and Trust Officer to lead security efforts. Mayank brings one of the most influential careers in enterprise security to Snowflake. During his more than two decades at Google, he shaped the modern security landscape, ultimately serving as Vice President of Engineering for Google Cloud where he secured both the public-facing Google Cloud Platform and the private cloud infrastructure powering core Google services. Prior to this, his career progression to Distinguished Engineer was defined by a sequence of foundational technologies he delivered. Today, as CSTO at Snowflake, he secures the data and AI foundation for 11,000+ customers (including over a third of the Fortune Global 2000), giving him a unique, front-row vantage point on how AI is fundamentally reshaping enterprise security.

KB is on the ground at ISACA 2026 North American Conference in Las Vegas, sitting down with two guests pulling at the same thread from different angles: the gap between how dependent we’ve become on modern tools and how little we actually understand them. First, Pam Nigro, SVP of Security and Security Officer at Medecision and Board Director at ISACA, unpacks why supply chain has become the most vulnerable area in cyber security right now. She gets into the hidden risks sitting inside SaaS dependencies, API chains and open source libraries deployed once and forgotten, what operational paralysis actually looks like when a critical tool goes down, and why companies need to stop treating supply chain as a vendor risk checkbox and start treating it as a resilience problem. Then Asaf Weisberg, CEO of introSight and Board Director at ISACA, joins to flip the AI ROI conversation. While recent ISACA research shows most companies still can’t measure return on AI investment, Asaf argues the ROI is already obvious if you know where to look. He breaks down why traditional ROI calculations don’t fit AI, what’s happening inside software teams right now with tools like Claude Code, and the very real risk of leaking your most valuable IP through free AI subscriptions. More about ISACA’s AAIR Certification here: https://www.isaca.org/credentialing/aair ISACA® 2026 AI Pulse Poll: https://www.isaca.org/resources/ai-pulse-poll

John Wojcik, Senior Threat Researcher, Infoblox: Based in Bangkok, Thailand, John is a seasoned threat intelligence researcher who has spent his career following cybercriminal activity in the Southeast Asia region. Recently, his work at Infoblox has focused on pig butchering as a service, exposing sophisticated global money laundering, human trafficking and slave operations in Cambodia, Laos, Myanmar and the Philippines. John previously worked for the United Nations Office on Drugs and Crime, where he worked with local and international authorities on uncovering major cybercriminal activities in the region.

In this episode of KB on the Go, recorded at Atmos SPHERE 2026, Karissa Breen brings together two conversations united by one uncomfortable truth: we have built fast, efficient, hyper connected societies, and quietly traded away our resilience. First, Karissa sits down with Admiral Mike Rogers, Global Advisory Board member at CyberCX, and Alastair MacGibbon, Independent Adviser, to unpack what real national resilience looks like in 2026. They explore why cyber is no longer just about protecting data, but about availability and integrity, what happens when you can no longer trust the systems you depend on, and why it so often takes a crisis before meaningful change happens. Then, Karissa is joined by Heather Osborne, Director of Global Events and Programming at NetDiligence, and Stefanie Luhrs, Partner, First Response at Atmos, to dig into what the 2026 cyber loss data is really telling us. The conversation covers the rising cost of business interruption, the long tail of human and reputational impact after a breach, the strain on B2B relationships, and the wave of regulatory activity expected in Australia over the next twelve months. Two conversations, one shared message: we are optimised for cheapest and fastest, but not for when things break, and resilience is the conversation we keep putting off.

Dominic Vogel is a well-respected cyber security thought leader appearing on media news outlets across the world. As a veteran cyber security expert and thought leader, Dominic holds a proven track record across multitude of industries (financial services, logistics, transportation, healthcare, government, telecommunications, and critical infrastructure). Dominic is a firm believer in delivering sustainable security that supports and protects business goals. Having worked within large and globally diverse organizations he has extensive security experience that has been forged over the past two decades as an information security professional. Dominic is a 2x founder who has focused on providing unbiased actionable cyber security strategic guidance and advice to startups and small businesses across North America. Dominic is the President at Vogel Cyber Leadership & Coaching, a Vancouver-based leadership advisory company specializing in cyber risk management He is also a self-professed positive troll and professional hype man and believes in the power of uplifting others through his high-energy coaching practice.

Dmitry Volkov is a cybersecurity veteran, technology entrepreneur, and the dynamic leader of Group-IB and its team of over 250 cyber defenders. Recognized as one of the top seven influencers in global cybersecurity by Business Insider, Dmitry is also a member of the Europol EC3 Advisory Group and the UN Open-ended Intergovernmental Expert Group. In 2003, Dmitry co-founded Group-IB as a cyber investigations startup. Two decades later, the company has evolved into a cybersecurity leader known for its engineering innovations. Group-IB now protects public and private enterprises in more than 60 countries, supported by strategic and autonomous operational units, Digital Crime Resistance Centers (DCRCs), located in the Middle East, Europe, Central Asia, Asia-Pacific, and Chile.  

Recorded live from Extreme Connect in Orlando, KB sits down with Markus Nispel, CTO EMEA & Head of Office of the CTO at Extreme Networks, and Michael Jones (MJ), VP of AI and Innovation, Office of the CTO at Extreme Networks. Markus gets into why networks are now a boardroom conversation, what real time data means for agentic systems, and the shift from human in the loop to human on the loop. He also unpacks the guardrails and controls that determine whether agentic AI becomes a trusted operator or a liability. MJ tackles agent sprawl, why context beats the model, and the “jagged edge of intelligence” where AI can do PhD level work one minute and fumble basic tasks the next. Plus why sitting out the experimentation phase is the most expensive thing you can do right now.

John Hines is the Senior Director of Enterprise Business for the Asia-Pacific and Japan region at Lumen Technologies. With more than 25 years of leadership experience in IT solutions and cybersecurity, John has led and grown businesses across diverse global markets. His expertise spans cybersecurity, risk management, network and cloud solutions, consulting services, and new market acquisitions, serving industries such as manufacturing, government, healthcare, transportation, financial services, energy, and retail. At Lumen, John is responsible for driving enterprise growth by delivering secure, agile, and innovative technology solutions that help customers connect people, data, and applications seamlessly. He is a proven leader in building high-performance teams, modernising operating models, and executing strategic programs that deliver measurable business outcomes. His work has included partnering with global law enforcement on cyber threat takedowns through Lumen’s Black Lotus Labs, underscoring his commitment to safeguarding the digital ecosystem.

Davyn Baumann has been in the threat intelligence industry for over 10 years, and in that time has helped uplift cyber awareness by providing comprehensive strategic level intelligence for Australian government and critical industry organisations. Davyn currently is a member of the Custom Intelligence Team at Mandiant, part of Google Cloud.

Ashley Rose is the CEO and Co-Founder of Living Security, where she is building the future of workforce security through AI-native Human Risk Management (HRM). Her work sits at the intersection of AI, cybersecurity, and business transformation—helping enterprises turn human and workforce risk into a measurable, manageable business outcome. Since founding Living Security in 2017, Ashley has led the company through rapid growth, raising more than $25M for product development and scale, and driving consecutive years of revenue acceleration. Today, her focus is on helping CISOs and security and risk leaders move beyond traditional awareness to a data-driven, predictive model that reduces real risk and supports organizational growth. Ashley speaks regularly at industry forums including EWF, Security ISACs, and other security and leadership conferences, sharing practical insight on topics such as human risk, AI in the enterprise, and building security programs that executives and boards actually care about. She also contributes thought leadership to outlets such as Forbes and other publications. At her core, Ashley is a builder—of companies, products, teams, and categories. She is committed to creating a diverse and inclusive organization that reflects the communities Living Security serves, and to leading with transparency, curiosity, and accountability. Ashley holds a BBA from the University of Michigan and is a serial entrepreneur with a background in tech and product management. She founded Living Security on a simple belief: when you empower people, they become your strongest security asset—not your weakest link.

In this episode, we sit down with Malcolm Turnbull, former Prime Minister of Australia, current Chairman of Fortescue Future Industries, Senior Advisor to KKR, and Strategic Advisor at Semperis. Malcolm reflects on his leadership in launching Australia’s first national cybersecurity strategy and examines the evolution of cyber as a vital component of national security and statecraft. He shares insights into the challenges faced by governments and businesses in raising digital awareness, the necessity of mandatory breach reporting, and the importance of sharing intelligence to combat cybercrime. The conversation covers Australia’s approach to critical infrastructure protection, foreign interference reforms, and the nuances of risk management in telecom and utility sectors. Malcolm also discusses the legal landscape around cybersecurity liabilities and the growing impact of class actions on corporate accountability, emphasizing adaptability, setting realistic expectations, and continual vigilance as key lessons for future leaders. The Honourable Malcolm Turnbull AC Australia’s 29th Prime Minister (2015-2018) had international careers in law, business and the media before entering politics at the age of 50. As Prime Minister, he reformed Australia’s personal income tax, education and childcare systems, oversaw the legalisation of same sex marriage and announced the construction of Snowy Hydro 2.0 the biggest pumped hydro scheme in the southern hemisphere. Mr Turnbull embarked on the largest peacetime investment in Australian defence capabilities and set out Australia’s first national cybersecurity strategy. Globally, Mr Turnbull played a leading role in reviving the Trans Pacific Partnership (TPP-11 or CPTPP) after the United States withdrew. He also struck deals with US Presidents Obama and Trump to accept refugees who tried to arrive in Australia illegally by boat. As a young lawyer, Mr Turnbull successfully defended former MI5 agent Peter Wright against the British Government in the 1986 “Spycatcher” trial before entering business where he ran his own investment banking firm for a decade before joining Goldman Sachs as a partner in 1997. Both before and after his political career, Mr Turnbull has been a successful venture capitalist. He co founded OzEmail Limited, the first Australian tech company to be listed on the NASDAQ. Since leaving politics, Mr Turnbull has resumed his business career. He is a senior adviser to KKR and an investor in, and adviser to, many Australian technology businesses. He is a director of the International Hydropower Association and Chairman of Australian Fortescue Future Industries. Mr Turnbull speaks and writes on a range of issues including cyber security, geopolitics and renewable energy.  

In this episode, we sit down with Nathan Thomas, Senior Vice President of Product Management at Oracle Cloud Infrastructure (OCI), to explore Oracle’s evolving multi cloud strategy and the major trends shaping the cloud landscape. Nathan discusses the company’s shift from an Oracle-first approach to a multi cloud reality, driven by customer expectations for flexibility, governance, and sovereignty of data. He highlights the persistent demand for sovereign solutions, the impact of AI on accelerating multi cloud adoption, and the need for seamless integration and portability as customer loyalty becomes more fluid. Nathan also delves into the complexities of cloud migration, Oracle’s focus on delivering efficient and cost-effective infrastructure, and how maintaining a narrow focus on core services differentiates OCI in a crowded marketplace. Finally, he emphasizes the importance of holding cloud vendors accountable for innovation, value, and enabling truly multi cloud operations. Nathan Thomas is senior vice president of Product Management at Oracle Cloud Infrastructure (OCI), overseeing product strategy and development of Oracle’s cloud and multicloud services. His organization is responsible for providing secure, reliable, and high-performance solutions that enable customers to run Oracle’s industry-leading services across their preferred cloud environments, addressing complex technical challenges and promoting long-term innovation and growth. Prior to Oracle, Nathan held senior product and engineering leadership roles at Amazon Web Services, Epic Games, Google Cloud, and Red Hat. His work has been instrumental in promoting enterprise adoption of open-source technologies, driving the commercialization of cloud computing, and broadening the application of real-time 3D technology across multiple industries. Nathan is based in Nashville, Tennessee.

In this episode, we sit down with César Cernuda, President at NetApp, as he explores the growing significance of data and the evolving role of trust, governance, and transparency in managing this strategic asset. César discusses how organizations and nations must build intelligent data infrastructures to enable AI and navigate complex regulatory landscapes, emphasizing the importance of cybersecurity, interoperability, and modernizing data lakes. We also examine the balance between protection and openness, the resurgence of sovereign cloud requirements, and the pressure for leaders to cultivate a data-first mindset to stay competitive. César Cernuda has led NetApp’s integrated go-to-market organization since July 2020, delivering on the company’s promise to meet customers wherever they are on their digital-transformation journeys by providing the superior products, specialist skills, and services they need to architect, build, and manage their data fabrics. César joined NetApp following a long career at Microsoft, where he served as President of Microsoft Asia Pacific, President of Microsoft Latin America, and Global Corporate Vice President of the brand. Having walked in the shoes of NetApp’s enterprise customers, he brings a customer-centric perspective to all he does as president. César serves as the non-executive director and Chairman of the ESG committee at Gestamp, an international organization dedicated to the automotive industry; as an advisory board member of Georgetown University’s McDonough School of Business; and as an international advisory board member of IESE Business School – University of Navarra.    

Richard Stiennon is Chief Research Analyst for IT-Harvest, the firm he founded in 2005 to cover the 3,051+ vendors that make up the IT security industry. He has presented on the topic of cybersecurity in 31 countries on six continents. He was a lecturer at Charles Sturt University in Australia. He is the author of Surviving Cyberwar (Government Institutes, 2010) and Washington Post Best Seller, There Will Be Cyberwar.  Stiennon was Chief Strategy Officer for Blancco Technology Group, the Chief Marketing Officer for Fortinet, Inc. and VP Threat Research at Webroot Software. Prior to that he was VP Research at Gartner. He has a B.S. in Aerospace Engineering and his MA in War in the Modern World from King’s College, London. His latest book Security Yearbook 2022 was released in June, 2022. Get a copy here.  

Data is exploding. Environments are getting noisier and the line between observability and security, it’s basically gone. Search isn’t just a feature anymore, it’s infrastructure. It’s how you see, how you detect, and ultimately how you defend from ai, power detection, engineering to unified visibility across logs, metrics, t races and security telemetry. We’re officially in a world where if you can’t search it in real time, you can’t secure it. This bonus episode features Mandy Andress, CISO at Elastic, live from Elastic{ON} Sydney 2026. As Australia navigates its unique, sector-led approach to AI regulation, Karissa Breen and Mandy Andress explore the challenges—and opportunities—facing CISOs on the front lines of the agentic AI revolution. Mandy Andress is currently the CISO of Elastic and has a long career focused on information risk and security.‬ Prior to Elastic, Mandy led the information security function at MassMutual and established and built information security programs at TiVo, Evant, and Privada. She worked as a security consultant with Ernst & Young and Deloitte & Touche, focusing on energy, financial services, and Internet technology clients with global operations. She also founded an information security consulting company with clients ranging from Fortune‬ 100 companies to start up organizations.‬ ‭She is a published author, with her book Surviving Security having two editions and used at multiple‬ universities around the world as the textbook for foundation information security courses. Mandy also tested‬ and reviewed information security products for multiple publications as well as serving as the author for the weekly InfoWorld security column. She has been a sought after expert in the field, speaking at signature‬ security conferences such as BlackHat and Networld+Interop. In addition, she has taught a graduate level‬ Information Risk Management course for UMass Amherst in the College of Information and Computer‬ Sciences.‬ Mandy has a JD from Western New England University, a Master’s in Management Information Systems from Texas A&M University, and a B.B.A in Accounting from Texas A&M University. Mandy is a CISSP, CPA, and‬ member of the Texas Bar.‬      

In this episode, we sit down with Simon Cook, Director of New Offerings at Genetec, as he discusses the convergence between physical and cybersecurity, and the impact of global standards such as GDPR and IRAP on industry practices. Simon details the shift from siloed teams to collaborative approaches, highlighting how increased connectivity and advancements like generative AI have expanded the attack surface, making cyber risks a broader business concern. He explores the ongoing challenges of device security—from consumer cameras to enterprise solutions—and the market’s growing awareness of attack vectors stemming from seemingly innocuous network devices. Simon also unpacks the complexities of privacy legislation, especially the right to be forgotten, emphasizing the need for technology providers to embed privacy and trust by design at every stage of product development. Finally, he offers insight into the future direction of physical security, predicting the acceleration of proactive, technology-driven systems and deeper integration of compliance frameworks worldwide. Simon is a highly motivated, innovative and creative security professional with almost 20 years’ experience in the Pre-Sales and design space working with hardware, software and cloud solutions. Leadership experience and a proven track record of success growing and evolving teams in both medium and large organisations and on a global scale. Accustomed to speaking up to C- Level, in public forums and to press. A commercial techie that is inspired by good products, and passionate and motivated people.    

In this episode, we sit down with Omar Khawaja, Vice President of Security and Field CISO at Databricks, as he explores the intersection of data, AI, and cybersecurity defense. Omar addresses the real fatigue facing CISOs amidst rising AI hype, emphasizing that combining high-quality data with AI—not just AI alone—is pivotal to effective cyber defense. He shares insights on the growing need for organizations to get their data in order, challenges in adapting operating models for AI, and the importance of reducing security tool sprawl through robust, unified platforms. Omar also discusses the increasing role of AI agents in automating routine tasks, the evolving skills required to leverage AI securely, and why mature frameworks and a growth mindset are critical as organizations navigate the complexities and risks of AI adoption. Omar Khawaja is the VP, Field CISO at Databricks where he gets to work with CISOs to help them securely shepherd their organisations’ data+AI journey. He leads Databricks’ Field Security practice globally, teaches at Carnegie Mellon’s CISO program, sits on the boards of HITRUST and FAIR Institute, spent 9 years as CISO of a $26B enterprise and is leading a team that developed an actionable AI security framework for 11,000 enterprise data platform customers at Databricks.

In this episode, we sit down with Lisa Black, Director of Public Sector at Aeon Nexus Corporation, as she shares her perspectives on crisis leadership and organizational resilience when critical systems fail. Lisa draws from her extensive background leading government operations to highlight how real risk in a crisis is often less about technology and more about maintaining trust, clear communication, and effective decision-making under pressure. We explore the pitfalls of traditional and predictable crisis training, the importance of cross-training team members, and the value of embedding continuous improvement and consequence-based learning into daily operations. Lisa also discusses the crucial role of cadence in incident communications, the need to manage rumor mills and public scrutiny, consequences of over-reliance on technology, and why true collaboration between public and private sectors is essential to strengthen defenses against modern threats. Lisa Black is the Director of Public Sector at Aeon Nexus Corporation where she consults with government clients who are committed to enhancing justice through modernizing technology. Utilizing Aeon’s legal case management solution to deliver a single, secure, centralized, cloud-based system to public sector entities Lisa and her company work with public safety agencies, the offices of District Attorneys, Public Defenders, mediators and courts throughout the US. With over two decades of government experience, Lisa previously served as the Chief Deputy County Executive in Suffolk County, NY. There she managed the daily operations of a local government that served 1.5 million residents with a $4 Billion budget and a workforce of approximately 12,000 staff. Lisa has also held leadership roles with two NY State Senate Majority Leaders, two New York City Mayors and a NY Governor serving as Senior Advisor at the NYS Division of Homeland Security and Emergency Services. Lisa’s advantage in serving in both republican and democratic governments has been instrumental in her ability to communicate across the aisle where she has been involved in crisis and emergency management for over half of her career. Formerly trained in emergency management and operational decision-making during crisis, Lisa has also earned certificates in Government Leadership and Cybersecurity Policy and Technology from the JFK School of Government at Harvard University Executive Education Program. Importantly, her skills and training helped her lead the Unified Command Incident Response to a 2022 countywide ransomware attack including incident identification, containment, eradication and operational recovery. She has spoken publicly about the experience at conferences and forums across the US including those with the NY State Association of Counties (NYSAC), the US Secret Service Cyber Fraud Task Force, NY State Local Government Information Technology Directors Association (NYSLGITDA), the National Federation of Municipal Analysts (NFMA), the International Association of Emergency Manager’s (IAEM) Region II Inaugural Conference, the National Association of Counties (NACo) Chief Information Officer Forum, the FBI & Fordham Law School’s International Cyber Security Summit and the 2020Partners Counterterrorism, Counter-Narcotics & Cyber Security Miami Conference.

Karissa Breen [00:00:10]: Welcome to KB On The Go. I’m coming to you from my new place of residence, Orlando, Florida. And today I’m being hosted at the SimSpace Summit. Cybersecurity is hitting a breaking point, compliance checklists, tabletop exercises, and confidence claims. Aren’t enough anymore, especially as AI accelerates both attack and defense. This summit is about something different, proving readiness under real pressure, real tools, real teams, real-world chaos. Today, I’m speaking with leaders and former US government officials pushing cyber training testing and validation out of theory and into reality. Because when the next incident hits, what matters isn’t what looks good on paper, it’s what actually holds up. Karissa Breen [00:00:57]: Stay with me, we’re diving into the conversations that matter. This is KB On The Go from SYNSPACE Summit 2026. Karissa Breen [00:01:04]: Let’s get into it. Joining me now in person is Rochelle Hopkins, Professor, Computer Science and Cybersecurity at Florida Southwestern State College, and today we’re discussing the future of cyber workforce. So, Rochelle, thanks for joining and welcome. Rushell Hopkins [00:01:23]: Well, thanks for having me. Karissa Breen [00:01:24]: Okay. So Rochelle, I’m really interested in the work that you do. And when we were talking before, you were sort of describing like how things are nowadays. And I think it’s really interesting to explore that a little bit more. So I want to start perhaps with your view on the growing concern about cognitive atrophy in the younger generation. And what are your thoughts here? Rushell Hopkins [00:01:46]: Absolutely. One of the things I also didn’t share with you is I’m part of a cohort or consortium called the AAC&U, which is the American Association of Colleges and Universities. And I’m in this cohort where we’re trying to bring AI into higher education and kind of look at what that’s going to do. I share concerns with many of the educators in what they’re calling cognitive offloading or cognitive atrophy in our younger generation. In cybersecurity, I tend to have really remarkable, creative, compassionate, and technically advanced students. But what I’m seeing and the shift that I’m seeing is that these students are using AI at a level where it’s eroding their patience, their deep focus, and their willingness to wrestle with the deeper problems. And learning, especially in cybersecurity, requires discomfort. We have to think outside the box. Rushell Hopkins [00:02:33]: It really requires us to sit with something, and if we don’t understand it, we are breaking it down and we’re building up that mental endurance, right, to solve it. And when their answer is just one click away, right, to these problems, that muscle greatly weakens. Karissa Breen [00:02:50]: This is where I think it gets really interesting as well, because I’m a millennial, and even when we were learning things, it’s still fundamentally different. Doesn’t feel that long ago. But when you’re talking about what you’re describing versus when I came up through the ranks, it’s not that long ago, but it does feel a lot longer. So I’m curious to see What does this sort of mean now for how people are actually learning things? You mentioned before 15-minute to 20-minute blocks before you had to say, right, we’re gonna get up, go for a walk, we’re gonna do something else. That’s a very short period of time when you think about it. How, what’s going on here? Rushell Hopkins [00:03:32]: So there’s a lot, there’s a lot of things. People are starting to do a lot of research on attention span, right? And I don’t wanna go down too much that down that road because I don’t have any degrees in psychology or, you know, I teach computer science and cybersecurity. But I’ve watched a lot of content, and I don’t mean social media content, I mean research, where shows like Cocomelon, right, that we put our kids in...

Cybersecurity is hitting a breaking point. Compliance checklists, tabletop exercises and confidence claims aren’t enough anymore, especially as AI accelerates both attack and defense. In this bonus episode, KB sits down with Peter Lee, Chief Executive Officer and President of SimSpace, and Ernie Ferraresso, Senior Director of Cyber Florida. Together they discuss cyber readiness and why Florida treats cyber like a mission. Peter Lee, Chief Executive Officer and President of SimSpace Peter serves as the Chief Executive Officer and President of SimSpace, the realistic, intelligent cyber range that strengthens teams, technologies, and processes to outsmart adversaries before the fight begins. Previously, Peter was co-founder and CEO of DataSynapse, an infrastructure software company acquired by TIBCO; and CEO of RapidMiner, an open source machine learning platform acquired by Altair. At TIBCO, Peter served as Executive Vice President responsible for multiple businesses including the security, cloud computing, B2B, CX, and analytics product groups. Before launching his career in software, Peter was a strategy consultant with Deloitte and an investment banker with JP Morgan. Peter has extensive Board experience collaborating with top tier investors to grow innovative software companies, serving as Chairman for Attivio (acquired by ServiceNow), WorldQuant Predictive, and ActiveState, and as Director for Ektron (acquired by Accel-KKR), Vesta (acquired by TINT), Infomatix (acquired by EPAM), OpenAssemby (acquired by Fulcrum), BlogTalkRadio (acquired by iHeartRadio), Entrio and Chattermill. Peter also serves on the investment committees of Advanced Finance & Investment Group and Communitas Capital Partners. Peter graduated from Harvard College with an AB degree in Government (cum laude), received an MBA degree from The Wharton School in Entrepreneurial Management and an MA degree from The University of Pennsylvania in International Affairs. Peter has been invited twice to speak at the World Economic Forum in Davos and four times at The Milken Institute Global Conferences in LA and Singapore, explaining the impact of AI in terms of its business value and key use cases. Peter is a former Board member of Upwardly Global, alumnus of YPO and a member of the Development Board for Phillips Academy Andover. Ernie Ferraresso, Senior Director of Cyber Florida As the senior director of Cyber Florida, Ernie drives the organization’s strategic vision while overseeing the center’s day-to-day operations. He started with Cyber Florida in 2017 as associate director of programs and partnerships and brings decades of technology expertise and leadership experience to his role. Prior to Cyber Florida, Ernie worked for a small technology design and integration firm as the Director of Operations, overseeing the design and implementation of cybersecurity and emergency operations center technology solutions in the U.S. and throughout Latin America. He is a retired U.S. Marine Intelligence Officer who served in the U.S. and abroad. His work included assignments with the U.S. Special Operations Forces, the intelligence community, the George C. Marshall European Center for Security Studies, and U.S. Cyber Command.

In this episode, we sit down with James Tennant, Partner and Head of JAPAC at Boka Capital, as he discusses why AUKUS needs sovereign capital to successfully deliver on its strategic ambitions. James explores the disparity between the headline-grabbing investments of AUKUS Pillar 1 and the overlooked capital shortfalls of Pillar 2, emphasizing the urgent need to build a unified capital architecture across Australia, the UK, and the US. He highlights the challenges faced by defense technology startups, such as the “valley of death” funding gap and ESG constraints that lock out institutional investment, and draws valuable lessons from international examples like In-Q-Tel and Israel’s Yozma. Throughout the conversation, James argues for a coordinated sovereign capital framework, increased public education about dual-use technologies, and transparent government action to move from strategic announcements to real capital deployment, ensuring AUKUS can compete effectively on a global stage. James Tennant, Partner – Head of JAPAC, BOKA Capital James Tennant is a Fellow with ASPI’s Cyber, Technology and Security Program and a Partner at BOKA Capital, a leading AUKUS Investment House in London, Sydney and New York. His key role at BOKA is complemented by his service as an Officer in the Australian Army, where he specialises in Capability Development. He is also a Senior Partner at Gilmour Space Technologies, an Australian-based rocket company innovating in the field of low-cost small satellite launch vehicles. James is a seasoned investor and corporate leader with deep interests and investments in diverse fields such as Quantum, Artificial Intelligence, Space, CyberSec, Machine Learning, Internet of Things, Drones, Enterprise Infrastructure, and Autonomous Vehicles. His professional journey, spanning across different continents and industries, uniquely positions him at the intersection of finance, defence, and technology including artificial intelligence. James holds a Bachelor of Commerce degree with a specialisation in International Business from the University of Sydney, is a Graduate of Applied Finance at Macquarie University, and holds management courses in Private Equity and Venture Capital from Harvard Business School. He has also completed the Company Directors Course at the Australian Institute of Company Directors.

In this episode, we sit down with Strategic Advisor at Semperis, as he shares his personal experience with burnout during his tenure as CISO at BP. Simon provides a candid look into the immense pressures and responsibilities of overseeing cybersecurity across a massive, global organisation, highlighting the challenges of balancing work with personal well-being and family life. He discusses the emotional toll of always being “on,” the importance of transparent communication about risks, and the necessity of setting clear boundaries—what he calls “red lines”—to safeguard health and relationships. Simon also reflects on the industry-wide burnout crisis, the tendency for CISOs to prioritize work over their own needs, and the critical role of organisational support and personal maturity in sustaining a long career in cybersecurity leadership. Simon Hodgkinson is a Strategic Advisor at cybersecurity firm Semperis, and a former Chief Information Security Officer at multinational energy company BP. In his 18 year tenure at BP, Simon held several senior IT leadership roles and was responsible for the company’s cybersecurity strategy, governance, architecture, education, counter threat operations, and incident response.   During this time, he drove a significant improvement in IT operational integrity, led a transformation program and spearheaded the commitment to improve employees’ IT experience. He led the CISO function in BP Supply & Trading, where he delivered a program to improve cyber-controls, many of which have been implemented across the BP group. Before joining bp, Simon worked in IT for a dotcom, an investment bank, and commercial software companies

Samuel J. Cummings III is an award-winning data scientist, keynote speaker, and renowned thought leader in AI, specializing in complex reasoning and memory architecture. In his recent work he has created AI model architecture that runs 94% less tokens than standard LLMs. As Director of Education at Gen AI Works, Sam brings over a decade of expertise in AI and runs a podcast called Gen AI Talks. In this episode, we sit down with Sam Cummings, Director of Education at Gen AI Works, as he explores the current and future landscape of large language models (LLMs) and their impact on cybersecurity. Sam unpacks the technical and economic limitations of LLMs, highlighting issues such as model cost, scalability, hallucination, and the looming challenges around reasoning and memory management. The conversation delves into the shift from universal LLMs to specialized models, the inevitability of market monopolization by big tech firms, and the environmental cost of massive data centers. Sam also paints a vivid picture of the “arms race” in the cybersecurity sector, predicting a boom in both offensive and defensive capabilities powered by AI, and offers actionable insights for professionals and entrepreneurs looking to thrive in this rapidly-evolving environment.

In this episode, we sit down with Lili Infante, CEO of CAT Labs, as she discusses the evolving landscape of crime in the crypto space and her work combating crypto-enabled criminal activity. Lili, drawing from her experience as a former DOJ and DEA agent who pioneered the DEA Cyber Investigations Task Force, explains the rise of crypto as both a tool for criminals and a unique opportunity for law enforcement due to its traceability. She highlights the challenges surrounding self-custody private keys, the increased risks and opportunities for asset seizure, and the emerging insider threat within law enforcement agencies handling crypto evidence. Lili also shares her perspective on regulatory debates between banks and crypto exchanges, the necessity for policy grounded in technological understanding, and the innovations CAT Labs is bringing to government agencies, including tools for key management, data scanning, and digital asset recovery. Lili Infante is the CEO and Founder of CAT Labs, a technology company helping government agencies find, seize and secure illicit cryptocurrency assets hidden in their seized evidence. As a former DEA Special Agent, she pioneered the first federal task force focused on Dark Web and crypto investigations, leading landmark cases including the takedown of Hydra Market, the world’s largest dark-web marketplace. Her work has earned national awards for cybercrime investigation and helped establish the investigative and policy frameworks now used by law-enforcement agencies worldwide.

In this episode, we sit down with River Nygryn, CISO and AI thought leader, as she explores the critical concepts outlined in the executive playbook for AI leadership: Trust, Test, and Transform. River provides a comprehensive overview of AI’s evolution—from its historical roots in early automated machines and neural networks to the development of large language models (LLMs) and generative assistants. She emphasizes the importance of “trust but verify” in deploying AI, warning against overreliance and the risk of diminishing critical thinking skills. River introduces the 4Ds—dull, dangerous, difficult, and dirty work—where AI delivers the greatest value, and cautions about the loss of creativity and authenticity with widespread use of AI-generated content. She encourages organizations to leverage their unique data sets, underscoring that human judgment and oversight are essential for harnessing AI’s transformative opportunities. River is a visionary cybersecurity and technology leader with a dynamic career spanning traditional banking, cutting-edge blockchain innovation, and Web3 transformation. As a Chief Information Security Officer (CISO) and fractional C-suite executive, River has driven security and operational excellence across highly regulated industries, including healthcare, financial services, and emerging tech. Renowned for bridging the gap between strategic leadership and hands-on execution, River has played a pivotal role in modernising risk and security frameworks, scaling secure systems, and advising on crypto, digital asset infrastructure, and decentralized technologies. Her influence extends beyond the boardroom – she is a powerful voice in the tech community, advocating for digital trust, innovation, and ethical leadership in the AI era. In 2025, River was named one of The CEO Magazine’s Top 50 Women of Influence, recognised not only for her technical expertise but for her commitment to shaping a more secure and inclusive digital future. She is a sought-after speaker, frequently appearing on stage at leading conferences, panels, and keynotes to share insights on cybersecurity resilience, leadership, and the evolving Web3 landscape. With a storytelling style that blends bold insights with deep reflection, River continues to inspire the next generation of cyber leaders and disruptors.

In this episode, we sit down with Alex Loizou, Managing Director at Intrinsic Security and former CISO of Medibank, as he shares firsthand insights into the human impact of navigating a major cyber breach. Alex walks us through the initial moments of discovery, the emotional and psychological toll on teams, and the importance of staying calm under pressure. He dives into Medibank’s approach to incident response, including the use of multiple IR partners for comprehensive investigations and the challenges of coordinating large incident teams in real time. The conversation highlights the value of practical, repeated exposure to incident scenarios, the pitfalls of “ambulance chasing” in the security industry, and the vital role of transparent, evidence-based communication during sensitive events. Alex emphasizes lessons learned about organisational preparedness, collaboration across the cybersecurity community, and the importance of building strong relationships with external media and government agencies. Alex Loizou is a seasoned cybersecurity leader with a proven track record of building and leading high-performing security teams. He has extensive experience as a Chief Information Security Officer (CISO) for major organisations such as Medibank, Flybuys, and Bupa. Notably, he served as the CISO at Medibank during their 2022 cyber incident, where he played a crucial role in leading the response and recovery efforts.

In this episode, we sit down with Tammy Klotz, cybersecurity and IT executive and author of Leading with Empathy and Grace, as she explores the critical role of intentional empathy in leadership. Tammy unpacks the misconception that empathy and accountability are opposites, arguing they are essential partners for building trust within teams. She discusses the impact of technology on our ability to be present, the importance of transparency during organizational challenges, and the pitfalls of viewing empathy as a “soft skill” in cybersecurity. Tammy also addresses how leaders can be more intentional in their interactions, foster stronger human connections despite remote and hybrid work environments, and why self-care is foundational for personal and professional success. Tammy Klotz is a vibrant and accomplished executive and best-selling author with over three decades of diverse experience in the manufacturing industry, specializing in cybersecurity and transformational leadership. She offers keen expertise in navigating mergers, acquisitions, and divestitures within both publicly-traded and privately-held companies and is seasoned in security, risk, and compliance leadership. Tammy brings a dynamic and positive approach to problem solving, excelling in simplifying intricate IT and cybersecurity concepts and facilitating pragmatic, non-technical dialogues that resonate with business executives. She is recognized as a strong, knowledgeable, thoughtful security executive who excels in public speaking and thought leadership, striving to empower others through knowledge sharing.  

Mr. George C. Barnes is the President of Red Cell Partner’s Cyber Practice and a Partner at the firm. In this role, he oversees the pursuit of new-start incubations that are focused on cybersecurity opportunities spanning commercial and government sectors. He ensures optimized market gap responsiveness of new incubations and guides Red Cell’s platform team support as young cybersecurity companies progress through their early-stage business life cycles. As a Red Cell Partner, Mr. Barnes applies his national security and cybersecurity domain expertise to Red Cell’s incubation activities and oversees the company’s overall cyber-related investment strategy. Prior to joining Red Cell, Mr. Barnes served as the Deputy Director and senior civilian leader of the U.S. National Security Agency (NSA) from April 2017 through September 2023. In this role, Mr. Barnes served as NSA’s chief operating officer, overseeing strategy, policy, and operations.  As an agency deputy in the U.S. national security system, Mr. Barnes supported the U.S. defense and intelligence enterprise in national security strategy execution and the formulation of supporting policies.  He positioned NSA as an integrated mission partner enabling U.S. decision advantage and security against foreign threats. Over his 36-year career at the NSA, Mr. Barnes held numerous technical and organizational leadership roles spanning intelligence collection operations, intelligence target analysis, foreign liaison and industrial partnership management, workforce support, and global enterprise governance. U.S. Government Service Recognition Includes: Department of Defense Distinguished Civilian Service Medal Joint Chiefs of Staff Joint Meritorious Civilian Service Medal National Intelligence Distinguished Service Medal Under Secretary of Defense for Intelligence & Security Distinguished Service Medallion National Security Agency Distinguished Civilian Service Medal Central Intelligence Agency Seal Medal National Reconnaissance Office Medal of Distinguished Performance National Geospatial Intelligence Agency Medallion for Excellence National Intelligence Medal of Achievement Distinguished Executive Presidential Rank Award Meritorious Executive Presidential Rank Awards (2) Mr. Barnes received a Bachelor of Science in Electrical Engineering from the University of Maryland in 1986. In 2020, he was honored as a Distinguished Alumni by the University of Maryland’s College of Electrical and Computer Engineering.

The 2020 Partners Dialogue sits at the edge of possibility, where security meets technological ambition. In this special bonus episode, KB explores how nations can move beyond simply consuming innovation to actively co-creating strategic dominance. Anchored by AUKUS and empowered by cross-sector collaboration, this conversation features insights from industry leaders Paul Maddison (Australia &New Zealand Country Manager, Strider Technologies) and Jeff Lindholm (Chief Revenue Officer at Lookout). Paul Maddison, Australia & New Zealand Country Manager, Strider Technologies Paul Maddison is the Australia & New Zealand Country Manager at Strider Technologies, where he is responsible for leading Strider’s market expansion and strategic partnerships with Australian universities, corporations, and governments. Prior to joining Strider, Paul worked at the University of New South Wales in Sydney and Canberra as Director of the UNSW Defence Research Institute. This was preceded by a four-year appointment as  Canada’s High Commissioner for Australia. Paul also spent over 35 years in Canadian naval service. As a surface warfare officer, he commanded at all levels culminating in his appointment as Commander of the Royal Canadian Navy at the rank of Vice Admiral. A graduate of Canada’s Royal Military College, and a dual national since 2020, Paul is from Canada but has chosen to make Australia his home. Jeff Lindholm, Chief Revenue Officer at Lookout As the Chief Revenue Officer at Lookout, Jeff oversees all aspects of the company’s global sales, including the Americas, EMEA, and APAC regions, as well as Channel Sales, Commercial Sales and Sales Engineering. He brings a wealth of experience in networking and security sales leadership, having previously served as President and CEO of Plixer, a company focused on network traffic analysis and visibility solutions. Before that, Jeff led sales operations at both Brocade and Juniper Networks. As the Senior Vice President of Worldwide Sales at Brocade, he oversaw a $2.5 billion global sales operation until the company’s acquisition by Broadcom Inc. At Juniper Networks, he served as Chief Revenue Officer, managing $2.5 billion in revenue.” He has also held significant global sales roles at Arbor Networks (the security division of NETSCOUT) and BigBand Networks. Jeff is based in Boston and holds a Bachelor of Science in Marketing from the Carroll School of Management at Boston College.

The 2020 Partners Dialogue sits at the edge of possibility, where security meets technological ambition. In this special bonus episode, KB explores how nations can move beyond simply consuming innovation to actively co-creating strategic dominance. Anchored by AUKUS and empowered by cross-sector collaboration, this conversation features insights from industry leaders Neha Idnani (Regional Vice President – APAC, Eutelsat OneWeb), James Tennant (Partner – Head of JAPAC, BOKA Capital), and Simon Hodgkinson (Strategic Advisor at Semperis). Neha delves into the significance of operating one of only two global LEO satellite constellations, emphasizing how satellite networks power resilient connectivity, complement terrestrial infrastructure, and enable sovereign national capabilities amid rising geopolitical tensions. James offers a global investment perspective, highlighting how Australia and other key regions are rapidly adapting to strategic defense imperatives, the challenge of nurturing deep-tech startups, and the necessity of scaling defense technology within complex regulatory frameworks. Simon rounds out the discussion with expert insights on cybersecurity, examining the impact of economic uncertainty, increased insider risk during major corporate events and layoffs, and the criticality of robust cyber operations—even as organizations strive to balance resource constraints and work-life demands. Neha Idnani, Regional Vice President – APAC, Eutelsat OneWeb Neha Idnani is an accomplished leader in the Technology, Media, and Telecom (TMT) sector, currently serving as the Regional Vice President for APAC at Eutelsat OneWeb. With over 18 years of experience across the telecom, space, and infrastructure industries, she leads the Asia Pacific and ANZ business for Eutelsat Group, the world’s first multi-orbit satellite connectivity provider. Prior to her current role, she spent over a decade with Bharti Enterprises and Bharti Airtel, notably serving as Vice President and Chief of Staff to the Chairman’s Office. In that capacity, she managed multi-billion dollar fundraising transactions and drove significant global expansion initiatives. Beyond her corporate leadership, Neha is deeply involved in industry governance and the arts. She serves as a Board Director for OneWeb Communications India, is a Founding Member of the Indian Space Association (ISpA), and acts as a Board Trustee for Improbable, a UK-based non-profit. Academically, she holds an MBA from NMIMS, Mumbai, and a Bachelor’s in Commerce (Honours) from Shri Ram College of Commerce (SRCC), Delhi University. Throughout her career, she has remained a passionate advocate for driving the future of global connectivity through innovation and strategic collaboration. James Tennant, Partner – Head of JAPAC, BOKA Capital James Tennant is a Fellow with ASPI’s Cyber, Technology and Security Program and a Partner at BOKA Capital, a leading AUKUS Investment House in London, Sydney and New York. His key role at BOKA is complemented by his service as an Officer in the Australian Army, where he specialises in Capability Development. He is also a Senior Partner at Gilmour Space Technologies, an Australian-based rocket company innovating in the field of low-cost small satellite launch vehicles. James is a seasoned investor and corporate leader with deep interests and investments in diverse fields such as Quantum, Artificial Intelligence, Space, CyberSec, Machine Learning, Internet of Things, Drones, Enterprise Infrastructure, and Autonomous Vehicles. His professional journey, spanning across different continents and industries, uniquely positions him at the intersection of finance, defence, and technology including artificial intelligence. James holds a Bachelor of Commerce degree with a specialisation in International Business from the University of Sydney, is a Graduate of Ap...

In this episode, we sit down with Mike Worth, Founder of Indi-tech Consultancy, as he unpacks the unique cybersecurity challenges facing small and medium-sized legal firms. Mike highlights a major misconception in the industry—treating cybersecurity solely as an IT problem rather than a broader business risk—and explains why investing in the human aspect of cybersecurity is more effective than relying on tools alone. He discusses the billable hours mindset prevalent in professional services, the opportunity cost of security training, and the importance of creating a positive, engaging, and competitive security culture tailored to staff demographics. Mike also shares insights into common pitfalls SMBs face, such as overspending on ineffective security tools, gaps in cyber insurance coverage, and the pitfalls of generic training programs. He closes with actionable advice on building a resilient cybersecurity culture, measuring progress through behaviour-based metrics, and fostering open, honest risk discussions within the organisation. Mike is a proud Londoner now living in Hampshire, UK. He has worked across various industries covering local and central Government, manufacturing and more recently 11 years of Legal professional services as an IT professional. Mike’s passion has recently seen him start his own IT consultancy targeting support for SMB’s on Cyber security & virtual IT management.

In this episode, we sit down with Alex Tilley, Global Threat Research Coordinator at Okta, as he unpacks the evolving threat landscape posed by North Korean IT workers infiltrating global organizations. Alex shares insights from his recent research, emphasizing that this is not just a US big tech problem but a widespread issue affecting various industries—including healthcare, automotive, and construction—across multiple countries. He highlights the sophistication of fake applicants, their use of advanced techniques to bypass hiring filters, and the alarming success rate, even if only for short periods. The conversation explores the challenges companies face in verifying remote candidates, the necessity for ongoing identification checks, and the implementation of least privilege access for new hires. Alex Tilley is a Cyber Intelligence and investigation guy with over 25 years of experience spanning the private sector and federal law enforcement. As the Australian Federal Police’s first Senior Cybercrime Senior Technical Analyst, he specialised in unmasking and prosecuting sophisticated threat actors in global cybercrime and child protection. In his current role as Global Threat Research Coordinator at Okta, he leads law enforcement liaison efforts and drives critical threat research for the world’s leading identity company.

In this episode, we sit down with Rajesh Ganesan, CEO of ManageEngine, as he explores the complexities of AI anxiety within organisations and the global challenges of balancing cybersecurity, privacy, and rapid technological change. Rajesh discusses the uneven pace of AI adoption among businesses of different sizes, the critical role of regulation and capital investment by region, and the growing necessity for upskilling in an evolving digital environment. He highlights the persistent anxiety surrounding job displacement, the shift in workforce requirements, and emphasises the importance of resilience and adaptability. Rajesh concludes by stressing the need for businesses to keep customer needs at the centre and to use technology as an enabler to solve real problems in an age defined by both opportunity and uncertainty. Rajesh Ganesan is the CEO of ManageEngine, a division of Zoho Corp. and a leading provider of enterprise IT management solutions. With over two decades of experience at the company, he plays a pivotal role in shaping ManageEngine’s strategy, direction, and product management while also serving as a key evangelist for the brand. Beyond strategy, his day-to-day work involves being a mentor and coach to teams across various business functions. With deep institutional knowledge and market insight, he helps them navigate decisions with clarity and perspective, ensuring they are equipped to handle the challenges of today’s IT market.

In this bonus episode, KB sits down with CJ Moses, CISO at Amazon, Hart Rossman, VP of Global Security Services at AWS, and Mark Ryland, Director, AWS Security. Together they discuss the realities of “planetary scale security,” AI-powered defenses, and the shifting mindset that’s driving organizations to adopt automation and agentic technologies faster than ever before. CJ Moses, CISO, Amazon CJ Moses, CISO at Amazon, leads security engineering and operations across the company. His mission is to enable Amazon businesses by making the benefits of security the path of least resistance. CJ joined Amazon in December 2007, holding various roles including Consumer CISO and AWS CISO, before becoming CISO of Amazon in September 2023. Before Amazon, CJ led the technical analysis of computer and network intrusion efforts at the Federal Bureau of Investigation’s Cyber Division and served as a Special Agent with the Air Force Office of Special Investigations (AFOSI). CJ led several computer intrusion investigations seen as foundational to the security industry today. CJ holds degrees in Computer Science and Criminal Justice and is an active SRO GT America GT2 Race car driver. Hart Rossman, VP of Global Security Services, AWS Hart Rossman is the VP of Global Security Services at AWS. He leads a team of geographically distributed AWS builders who help customers realise the benefits of planetary-scale security solutions in the cloud, with a focus on innovating with internal teams and partners. Prior to AWS, he was VP & CTO of Cyber Security Services & Solutions at SAIC. Mark Ryland, Director, AWS Security Mark Ryland is a Director, AWS Security, reporting to the CISO of AWS, and engaging with a variety of external and internal stakeholders on behalf of the AWS Security leadership team. Externally, he focuses on public policy initiatives and public sector regulators and customers on issues related to cloud and AI security. Internally, he works with AWS service teams by channelling the perspectives of external stakeholders to influence their plans and priorities. In addition, Ryland works with industry partners to enhance the security of the broader information technology ecosystem as Amazon’s representative on the governing board of the Open Source Security Foundation (OpenSSF), as well as in industry groups focusing on the security and reliability of cutting-edge artificial intelligence systems such as the Frontier Model Forum (FMF) and the Coalition for Secure AI (CoSAI).Ryland has more than 34 years of experience in the technology industry across a wide range of leadership roles in information security, software engineering, distributed systems, technical standardisation, and public policy. Most recently he founded and ran AWS’s Office of the CISO from 2018 to 2023, a team with which he still collaborates closely on a variety of matters. Prior to that, he was the Director of Solutions Architecture and Professional Services for the AWS Worldwide Public Sector team, founding the team in 2011 and growing it to a large global organisation through early 2018. Before joining AWS, Ryland worked for Microsoft for 13 years in two different stints (1991-2000 and 2008-2011) in multiple roles including Lead Program Manager for COM/DCOM, and founder and Director, Standards Strategy Group. In between work at Microsoft, he was co-founder and CTO of two start-ups, and served as vice president and director of the Washington DC office of a public policy think tank.

In this episode, we sit down with Amberley Brady, founder at Realfoodprice, as she explores the urgent issue of food security as a national security crisis in Australia. Amberley discusses the four pillars of food security—availability, access, utilization, and stability—emphasising how fragile supply chains, economic shocks, climate events, and cyber incidents threaten the nation’s access to safe and affordable food. She recounts the disruptions experienced during COVID-19 and highlights the risks of over-reliance on large supermarket conglomerates and lack of support for local farmers. The conversation covers the need for greater policy coordination, strategic food reserves, improved data transparency, and the integration of technology to strengthen domestic resilience. Amberley urges for accountability, innovation, and collaboration between government, industry, and the tech community to ensure that access to nutritious food remains a right, not a privilege, for all Australians. Amberley, an astute industry professional with extensive experience in public policy, founded Realfoodprice in 2024 in response to identified structural inefficiencies within Australia’s food supply chain. Recognizing the critical need for market transparency, she established this data-driven platform to address the competitive imbalance affecting both producers and consumers. Through rigorous market analysis and comparative price assessment, Amberley developed a methodology to clearly communicate authentic food value throughout the supply chain. Her strategic initiative to “un-supermarket” represents a paradigm shift in how agricultural commodities are valued and traded within the Australian market. Realfoodprice exemplifies Amberley’s innovative approach to economic challenges, leveraging data analytics to foster equitable commercial relationships between farming communities and end consumers. The platform serves as both an advocacy tool and a practical market mechanism designed to ensure the long-term sustainability of Australia’s agricultural sector and strengthen national economic resilience. Under Amberley’s leadership, Realfoodprice continues to advance data transparency as an essential component in creating a more competitive and balanced food system for all stakeholders.

In this bonus episode, KB sits down with Jenny Tsai-Smith, SVP, Overall Database Product Management at Oracle, Rand Waldron, VP at Oracle, and Arman Ashouriha, Head of Oracle Cloud Infrastructure Modernisation Programme at Vodafone. Together they discuss Oracle’s move towards supporting modern workloads and their AI play, Oracle’s position in the public and private sector, and Vodafone’s journey to modernisation on Oracle Cloud. Jenny Tsai-Smith, SVP, Overall Database Product Management, Oracle Since joining Oracle in 1993, Jenny Tsai-Smith has held leadership roles spanning technical support, content development, education delivery, plus Oracle Cloud acceleration of startups and scientific research. As the leader for database product management, Jenny works with release and development management to take products and services from design through development to production. Her team runs the customer advisory board, drives technology adoption partners, performs field enablement, assists with migrations to Oracle Database, and works directly with a wide range of customers. She meets regularly with customers, partners, press, and analysts to better understand existing and emerging data management requirements, and to discuss how database innovations can be applied to solve real-world challenges. Rand Waldron, VP at Oracle Rand Waldron is vice president of Oracle Cloud Infrastructure product development, responsible for the Global Government Sector team and leading the strategy, development and deployment of Oracle’s National Security Region product line. Prior to joining Oracle in 2018, he was Deputy Assistant Director at the Federal Bureau of Investigation, responsible for the FBI’s enterprise software and data—including investigative and intelligence analytics, records and evidence management, large scale custom software development and business operations systems. Prior to the FBI, Waldron served at the U.S. Department of Justice. Arman Ashouriha, Head of Oracle Cloud Infrastructure Modernisation Programme at Vodafone As the Head of the Oracle Cloud Infrastructure Modernisation Programme at Vodafone, Arman Ashouriha leads the strategic effort to modernize and migrate thousands of key systems to a dedicated region within the Oracle Cloud Infrastructure (OCI). Arman is continually driving towards platform support, system modernization, and scaling crucial operations across complex, high-stakes infrastructure environments.

In this episode, we sit down with David Bloxham, CEO of GCS Recruitment Specialist, as he unpacks the impact of AI on the changing face of work and the tech talent landscape. David shares his perspective on how AI-driven disruption differs from previous waves like cloud and mobile transformations, highlighting the rapid decline in traditional software engineering and process-driven roles as automation takes hold. He explores the challenges and opportunities for jobseekers at all levels, emphasizing the need to specialize within industry verticals, build adaptable skill sets, and nurture strong professional networks. David also provides valuable insights into the evolving nature of technical and functional roles, the linkage between AI and cybersecurity investment, and the importance of human connection in recruitment practices as organisations and candidates adapt to a more automated future. David Bloxham is the CEO of GCS Recruitment Specialists, where he has been a key player since 1996, with a brief hiatus from 2004 to 2008. Starting as a fresh graduate, he quickly rose through the ranks, becoming a manager in 1999, a director in 2004, and the MD in 2008. In 2017, he led a management buyout with nGAGE. David is passionate about recruitment, strategic leadership, and making a positive impact. He is also the host of the GCS Leaders Series Podcast, where he engages with industry thought leaders to share insights and drive conversations around innovation and excellence.

In this episode, we sit down with Steven Grossman, CISO / CIO at Standard & Preferred Insurance, as he talks about the challenges small and medium-sized businesses face in securing their environment, especially in view of growing regulatory requirements, and how he brings his enterprise consulting experience to bear in driving change. Steven discusses the unique challenges faced by SMBs—such as limited budgets, smaller IT teams, and a general lack of prioritization around cyber risk—while emphasizing the importance of leadership, education, and investing in the right resources like MSPs and fractional CISOs. The conversation covers the regulatory pressures driving security improvements, the pitfalls of treating cybersecurity as a box-ticking exercise, and strategies for building a resilient risk management culture. Steven also shares his perspective on balancing regulatory burden and genuine security, the dangers of under-resourcing IT, and the reasons why proactive approaches to cyber risk are essential for business continuity and consumer trust. Steven is a cross-functional cybersecurity and information technology leader with experience working in startup to large enterprise environments. After 2 decades of management consulting with international firms like PwC, smaller boutiques and independently on his own, Steven jumped into the cyber and tech startup ecosystem, bringing to bear his knowledge and experience in cybersecurity, risk management, regulatory regimes, data analytics and business process management. Throughout his career, Steven has also held numerous industry executive positions, including his current role as CISO/CIO of Standard & Preferred and the Graph Group, a Workers Comp insurance carrier based in the NY/NJ tri state area.

In this bonus episode, KB sits down with Danielle Sheer, Chief Trust Officer at Commvault, and Avi Boru, Senior Director, Cloud Engineering, Network & Telecom at Lennar. Together they discuss building trust by design and how AI, transparency, and authentic relationships are shaping the future of business continuity and cyber recovery. Danielle Sheer, Chief Trust Officer, Commvault Modern compliance, legal and security teams need to be predictive, proactive, and data-driven to meet the speed, agility, and growth of global business in a world of constant cyberattacks. Danielle Sheer, Chief Trust Officer, enables Commvault to do just that. Danielle Sheer is a strategic leader with deep expertise managing complex global privacy systems. She has repeatedly scaled Corporate Trust operations for public technology companies, led IPOs and other transformative strategic transactions, and counselled leaders and boards on significant governance and activist shareholder matters. Prior to joining Commvault, Danielle served as General Counsel at financial technology services company Bottomline (NASDAQ:EPAY) and at cloud-backup SaaS solutions provider Carbonite (NASDAQ:CARB). She currently serves as Global Chair of The L Suite; as well as a director on the Boards of LinkSquares; BreachRx; Formally; and the NetZero Institute; and the Board of Trustees at Beth Israel Deaconess Medical Center. Avi Boru, Senior Director, Cloud Engineering, Network & Telecom at Lennar Corp. As Senior Director of Cloud Engineering at Lennar, Avi leads Lennar’s enterprise cloud vision and strategy to drive the company’s digital transformation. With expertise spanning Strategic Planning, & Integration, Digital Transformation, Cloud Computing, and more, Avi is continually driving towards excellence, scalability, and reliability, especially in fast- paced settings.

In this episode, we sit down with Rajesh Khazanchi, CEO and co-founder of ColorTokens, as he explores what it truly means to be “breach ready” in today’s cybersecurity landscape. Rajesh emphasises the shift from perimeter-based defences to a proactive containment strategy, highlighting the importance of assuming breaches are inevitable and minimising damage through micro segmentation and Zero Trust principles. He discusses how evolving business pressures and sophisticated AI-driven attacks are raising expectations for swift decision-making and rapid recovery from disruptions. The conversation covers practical approaches for bridging knowledge gaps, the role of continuous compliance and visibility, and how organisations can leverage existing EDR technologies to achieve stronger resilience without increasing tool sprawl. Rajesh also shares insights on building customer trust through quicker recovery times, the impact of business continuity on competitive advantage, and the importance of design thinking for both organisational and personal cyber safety. Rajesh Khazanchi is the CEO and Co-Founder of ColorTokens, a company that provides a zero-trust segmentation SaaS platform that spans across IT, OT, Industrial Control Systems (ICS), Devices and Users. Under Rajesh’s leadership company has accelerated to grown over 300% annual in last 3 years deployed over 100+ large enterprise customers in Insurance, Healthcare, Retail, Manufacturing, Oil & Gas and Pharma. Rajesh leads a team of 400+ people worldwide and drives the vision, strategy, and execution of the company’s products and services. As an accomplished technology leader, Rajesh has led product teams at VMware, BMC, HP, and Oracle, and has been on the front lines of the battle against cyberattacks for more than two decades. He has been awarded six patents for his innovations in cloud automation and cybersecurity, and is a member of YPO and TiE, two global networks of entrepreneurs and executives. Rajesh is passionate about solving complex problems, creating value for customers, and building a culture of excellence and innovation at ColorTokens.

In this episode, we sit down with Daniel Churches, Director in Sydney at ColorTokens, as he explores the sweeping impact of new Australian legislation imposing personal liability on company directors for cybersecurity breaches. Daniel breaks down the shifting landscape for CISOs and senior security leaders, the end of self-regulation, and how shared risk at the board and executive levels is altering market behaviour. He discusses the challenges around resource constraints in security teams, the crucial role of business continuity planning, and the importance of articulating measurable value to organisational leadership. We also examine how the legislation is driving changes in funding priorities, motivating cross-functional engagement, and preparing organisations to better withstand breaches in an evolving threat environment. Daniel shares his optimism about the future, emphasising both the increased pressure and potential for positive, industry-wide change. Dan is an Australian and Asia Pacific Sales Leader with over 25 years’ IT experience in Hardware and Software Solutions and Services, Business Development, GTM planning and implementation, Large Complex Negotiations and Executive Relationships. He has worked for IBM, NTT Global and Verizon Enterprise Solutions driving business and building teams in Hardware, Software, Professional Services, Managed Services, Hybrid Cloud, PaaS, SaaS, Data Analytics, Security and Digital Transformation solution sales. As a Sales Director with ColorTokens, Dan is driving market penetration, brand development, partner engagement and client services and support. He is responsible for industry and buyer alignment and understanding of the ColorTokens “Breach Ready” messaging focusing on halting the spread of ransomware and malware attacks across IT/OT, IoT and Legacy environments providing customers a viable Cyber Resilience ‘Uptime’ compliance capability they can report to market.