On the 46th episode of Enterprise AI Defenders, host Mike Britton (CIO, Abnormal AI) sits down with Ben Nelson (CISO, FICO). FICO is a 70-year-old analytics software company whose software powers real-time fraud detection across financial services. Ben covers chained low-severity vulnerabilities, pre-approved AI pathways, and why impersonation is harder to defend than data.

Quick Hits from Ben:

On governance: "we've curated a pretty robust library of pre-approved use cases for AI internally."

On impersonation: "I think the impersonation is a lot harder to defend because I can't control it."

On vulnerability chaining: "they can chain these things together, so a low is no longer a low."

Book Recommendation: Leaders Eat Last by Simon Sinek

Like what you hear? Leave us a review and subscribe to the show on Apple, Spotify, and YouTube.

Enterprise AI Defenders is a show where top security executives share specific ways AI changes the threat landscape and the defenses that hold up in real environments.

Find more great insights from technology leaders and enterprise software experts at https://www.enterprisesoftware.blog/

Enterprise AI Defenders is produced by Abnormal Studios.

On the 45th episode of Enterprise AI Defenders, hosts Evan Reiser (CEO and co-founder, Abnormal AI) and Mike Britton (CIO, Abnormal AI) talk with Jeremy Koppen, EVP & Global CISO at Equifax. Equifax is one of the three major consumer credit bureaus and a global data, analytics, and identity-verification company that safeguards credit and identity information on hundreds of millions of consumers and businesses worldwide. Jeremy explains how an agentic AI system now closes roughly 50% of his SOC's tickets, why Equifax removed passwords for employees, and how bringing security into product design early has become a defensive advantage.

Quick Hits from Jeremy:

On building security in early: "adding in those security features is much easier at that phase than trying to bolt them on later"

On removing root causes: "we've deployed passwordless to employees"

On the autonomous SOC: "it is closing approximately 50% of our tickets"

Book Recommendation: Tools of Titans by Tim Ferriss

Like what you hear? Leave us a review and subscribe to the show on Apple, Spotify, and YouTube.

Enterprise AI Defenders is a show where top security executives share specific ways AI changes the threat landscape and the defenses that hold up in real environments.

Find more great insights from technology leaders and enterprise software experts at https://www.enterprisesoftware.blog/

Enterprise AI Defenders is produced by Abnormal Studios.

On the 44th episode of Enterprise AI Defenders, hosts Evan Reiser (CEO and co-founder, Abnormal AI) and Mike Britton (CIO, Abnormal AI) talk with Yusuf Ezzy, Chief Information Security Officer at Pacific Gas and Electric (PG&E). PG&E is the largest electric and natural gas provider in California, serving about 16 million customers. Yusuf explains why defending critical infrastructure now demands machine-on-machine operations, how AI governance has to keep pace with the business to survive, and why an expanding grid attack surface means his team no longer owns the whole surface it has to protect.

Quick Hits from Yusuf:

On the future of defense: "It's no longer about humans against machines. You're going to lose that fight every single time. It's got to be machine on machine."

On AI governance: "If you don't operate at the pace of the business, it's not going to work."

On the expanding grid attack surface: "The attack surface is increasing, and we don't own the entire surface anymore."

Book Recommendation: The Tipping Point by Malcolm Gladwell

Like what you hear? Leave us a review and subscribe to the show on Apple, Spotify, and YouTube.

Enterprise AI Defenders is a show where top security executives share specific ways AI changes the threat landscape and the defenses that hold up in real environments.

Find more great insights from technology leaders and enterprise software experts at https://www.enterprisesoftware.blog/

Enterprise AI Defenders is produced by Abnormal Studios.

On the 43rd episode of Enterprise AI Defenders, hosts Evan Reiser (CEO and co-founder, Abnormal AI) and Mike Britton (CIO, Abnormal AI) talk with John Frushour, VP & CISO at NewYork-Presbyterian Hospital System. NYP is one of the nation's largest academic medical centers, defending patient care across a massive hospital network. John explains why the real endpoint of a mature security program is understanding people, how attackers exploit trust and habit, and what it takes to make the entire workforce part of the defense.

Quick hits from John:

On the maturity of a security program: "The zenith of the maturity of a security program is baselining human behavior.”

On what attackers actually target: "It's the compromise of that trust that keeps me up at night."

On the strongest defense: "We want every frontline nurse, every clinician, every administrator, every back-office technician and financial analyst to carry the flag of information security.”

Book recommendation: The Cuckoo's Egg by Cliff Stoll

Like what you hear? Leave us a review and subscribe to the show on Apple, Spotify, and YouTube.

Enterprise AI Defenders is a show where top security executives share specific ways AI changes the threat landscape and the defenses that hold up in real environments.

Find more great insights from technology leaders and enterprise software experts at https://www.enterprisesoftware.blog/

Enterprise AI Defenders is produced by Abnormal Studios.

On the 42nd episode of Enterprise AI Defenders, host Evan Reiser (CEO and co-founder, Abnormal AI) is joined by Amy Herzog, VP & CISO at Amazon Web Services. AWS is the world's largest cloud provider, and its active defense systems process more than 400 trillion network flows every day. Amy explains why AI changes the speed and cost of security rather than its fundamentals, why vulnerability management is collapsing from a month to minutes, and why autonomous agents need their own identity and authorization models rather than the controls built for people.

Quick Hits from Amy:

On the scale that makes automation non-negotiable: "We process over 400 trillion network flows a day."

On the end of the patch cycle: "We can't talk about 30-day patch cycles anymore."

On why agents cannot be governed like people: "They are trained to seek a goal."

Book Recommendation: Measure What Matters by John Doerr

Like what you hear? Leave us a review and subscribe to the show on Apple, Spotify, and YouTube.

Enterprise AI Defenders is a show where top security executives share specific ways AI changes the threat landscape and the defenses that hold up in real environments.

Find more great insights from technology leaders and enterprise software experts at https://www.enterprisesoftware.blog/

Enterprise AI Defenders is produced by Abnormal Studios.

On the 41st episode of Enterprise AI Defenders, hosts Evan Reiser (CEO and co-founder, Abnormal AI) and Mike Britton (CIO, Abnormal AI) talk with Matt Bunch, VP & Global CISO at Tyson Foods, about how Tyson Foods is modernizing its security operations with AI, and why AI-speed threats make the basics more important, not less.

Quick Hits from Matt:

On AI adoption across every role: "We're using the mantra 'all in on AI.' And when we say all in, it is everyone all in on AI."

On AI risk: "What is a prompt injection issue? It's a data validation issue. That's really all it is."

On agentic AI governance: "We're going to have to put guardrails in place that don't exist today to understand what the models are doing, what the agents are doing. Are they really doing what we asked them to do, or are they trying to go outside of their defined scope?"

Book Recommendation: The Art of Negotiating by Gerard I. Nierenberg

Like what you hear? Leave us a review and subscribe to the show on Apple, Spotify, and YouTube.

Enterprise AI Defenders is a show where top security executives share specific ways AI changes the threat landscape and the defenses that hold up in real environments.

Find more great insights from technology leaders and enterprise software experts at https://www.enterprisesoftware.blog/

Enterprise AI Defenders is produced by Abnormal Studios.

On the 40th episode of Enterprise AI Defenders, host Mike Britton (CIO, Abnormal AI) is joined by Keith Gordon, Chief Security Officer at CIBC. Keith shares how a top-25 US bank is hardening its client-facing defenses with in-house behavioral biometrics, why third parties are the next exposed layer in financial services, and how the bank is governing agentic identities as the next phase of identity-first defense.

Quick Hits from Keith:

On the operating principle: "We've got to build AI for security... But we also have to have security for AI."

On the client as the new threat surface: "The client is the path of least resistance and the lowest on the maturity scale."

On governing agents: “they’re a kind of micro-segmentation in the AI age"

Book Recommendation: How to Win Friends and Influence People by Dale Carnegie

Like what you hear? Leave us a review and subscribe to the show on Apple, Spotify, and YouTube.

Enterprise AI Defenders is a show where top security executives share specific ways AI changes the threat landscape and the defenses that hold up in real environments.

Find more great insights from technology leaders and enterprise software experts at https://www.enterprisesoftware.blog/

Enterprise AI Defenders is produced by Abnormal Studios.

On the 39th episode of Enterprise AI Defenders, hosts Evan Reiser (CEO and co-founder, Abnormal AI) and Mike Britton (CIO, Abnormal AI) sit down with Mark Ballister, CISO at Montefiore Health System, to discuss governing AI risk in a hospital system. Mark shares how his team flipped the default from "no" to "yes, with controls," why work-versus-web toggles are a quiet exposure point, and how his own security team produced 22,000 lines of AI-generated code for an internal risk-evaluation model.

Quick Hits from Mark:

On the AI governance posture: "We don't look to say no. We look to say yes, as long as we can put controls around it."

On the Microsoft Copilot work-versus-web toggle: "By just clicking that button that says 'web,' you are no longer protected."

On bringing AI inside the security team: "It wrote all…22,000 lines of code."

Book Recommendation: The One Minute Manager by Ken Blanchard and Spencer Johnson

Like what you hear? Leave us a review and subscribe to the show on Apple, Spotify, and YouTube.

Enterprise AI Defenders is a show where top security executives share specific ways AI changes the threat landscape and the defenses that hold up in real environments.

Find more great insights from technology leaders and enterprise software experts at https://www.enterprisesoftware.blog/

Enterprise AI Defenders is produced by Abnormal Studios.