Security teams are being flooded with promises that AI can automate investigations, eliminate alert fatigue, and transform security operations overnight. But the reality is more complicated.

In this conversation, security leader Joe Cicero from Security Risk Advisors unpacks how organizations should evaluate AI-powered security tools, where the biggest risks hide beneath the marketing, and why successful adoption depends more on people and processes than on technology alone.

The biggest takeaway: AI is not a shortcut to security maturity. It amplifies whatever foundation already exists, gaps and all.

Get the latest executive perspectives on the threat landscape, emerging threats, and managing cyber risks on Microsoft Security Insider.

Hosted on Acast. See acast.com/privacy for more information.

When looking at the far reaches of the current threat landscape, typically we articulate change through the by highlighting the most active threat actors, their tactics and techniques, and what role shifting technology plays. However, when applying this information to security strategy, resilience and operational maturity are the result.

In a recent Security Insider Conversation with Capgemini’s Vice President of Cloud and Infrastructure Services, Mona Ghadiri, the discussion moved quickly beyond novel techniques and into something more consequential: what it actually takes to run modern security operations at scale. Governance that produces proof, not paperwork. Security programs that reinforce good behavior instead of just flagging failures. And resilience that extends far beyond disaster recovery.

The takeaway for security leaders is straightforward: emerging technologies don’t change the fundamentals of security. They expose whether those fundamentals were strong to begin with.

Get the latest executive perspectives on the threat landscape, emerging threats, and managing cyber risks on Microsoft Security Insider.

Hosted on Acast. See acast.com/privacy for more information.

Security transformation is measured in execution, not in policies. In November 2025, Microsoft published its latest Secure Future Initiative (SFI) Progress Report, outlining measurable progress across engineering, governance, and cultural accountability.

The report details 28 objectives, risk reduction efforts, and governance alignment across the company. In a recent Security Insider Conversations interview we sat down with leaders directly involved in shaping and operationalizing SFI to unpack what those numbers represent in practice.

Get the latest executive perspectives on the threat landscape, emerging threats, and managing cyber risks on Microsoft Security Insider.

Hosted on Acast. See acast.com/privacy for more information.